Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/62e930c4-3fff-32e0-af17-f8c4dc45dcf7.roa
File:                     62e930c4-3fff-32e0-af17-f8c4dc45dcf7.roa (raw, json)
Hash identifier:          IScfkpvG80fFSksjBqU14GEyzwXYNEVRSDe+rEif+N0=
Subject key identifier:   9E:EE:34:8B:63:A9:9C:7F:3B:EF:2A:3B:52:27:AD:35:03:76:FC:3A
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328576D51CC73C042CFC174064B7D69
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/62e930c4-3fff-32e0-af17-f8c4dc45dcf7.roa
Signing time:             Thu 21 Jul 2016 04:00:00 +0000
ROA not before:           Thu 21 Jul 2016 04:00:00 +0000
ROA not after:            Tue 22 Nov 2022 05:00:00 +0000
asID:                     32133
IP address blocks:        2606:8e80:800::/37 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:74:06:4b:7d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Jul 21 04:00:00 2016 GMT
            Not After : Nov 22 05:00:00 2022 GMT
        Subject: CN=7a317a3e-c752-4eda-8766-8a1a4aee7fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:bb:7f:5c:07:f0:11:2a:a0:c0:d5:7d:14:
                    27:aa:a1:c4:fc:63:c0:38:21:d2:4d:42:1c:d6:89:
                    e6:73:bf:77:1a:73:c5:60:7f:1a:29:43:ca:ad:96:
                    4f:55:9e:4f:79:f1:43:88:d8:d9:31:f0:49:2c:57:
                    44:07:8b:6e:b4:71:5e:87:aa:e9:4e:72:da:cf:a5:
                    a5:82:cb:c9:46:82:eb:7a:78:c6:4f:a0:66:3d:e1:
                    e4:5d:e0:de:e5:93:51:7e:88:5b:89:80:bb:96:09:
                    8e:6a:9c:35:5f:66:3a:0e:9d:aa:72:33:6a:2b:6b:
                    af:bc:83:27:57:25:44:41:19:3d:80:c6:c4:19:79:
                    f0:62:fd:0b:7e:8d:ff:6a:c5:5f:25:14:36:98:d9:
                    26:4c:12:3e:0e:86:6e:ef:8a:e8:e4:bf:58:20:b5:
                    4a:89:da:8d:93:17:db:44:9d:88:0f:ff:63:6a:5d:
                    25:22:00:60:92:be:ad:90:8d:b3:82:d7:fc:97:70:
                    62:c9:65:37:22:c8:59:08:0a:14:1d:d5:59:8f:de:
                    05:32:49:75:c6:0a:49:a9:55:47:1d:af:ba:95:83:
                    d6:d7:05:60:97:75:5f:5c:69:42:31:fd:fb:8f:19:
                    fa:fa:04:3e:c3:63:a2:02:1e:b9:8f:a7:83:30:ae:
                    d7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EE:34:8B:63:A9:9C:7F:3B:EF:2A:3B:52:27:AD:35:03:76:FC:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/62e930c4-3fff-32e0-af17-f8c4dc45dcf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80:800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:b1:b7:f6:23:47:80:f8:7d:50:96:2e:01:97:8e:ca:bb:85:
         09:b0:c8:04:cf:e8:81:5d:fa:5b:bc:17:d9:41:77:5a:2a:f2:
         a6:15:cc:35:23:dd:55:61:cc:4e:35:7c:b3:8c:6f:7b:9a:aa:
         6d:05:ec:63:ca:a7:db:99:c2:4b:e7:6c:65:e9:7c:aa:b7:ac:
         a8:30:d5:33:f5:19:17:1f:92:92:9e:ea:2d:e4:ae:52:94:fd:
         46:88:fb:d2:bf:6f:b1:da:55:f5:6a:99:01:6f:6d:dd:20:15:
         5d:b6:ba:82:7c:c2:7e:e6:7b:b6:04:55:f6:fc:b7:32:f1:e6:
         d6:8d:59:8c:c2:53:bc:3e:de:0c:52:ac:f3:5f:51:a5:fc:79:
         65:cd:0c:b5:18:bb:43:74:f0:54:52:cf:01:1f:88:7c:62:04:
         9a:6b:fc:48:ce:62:bf:ae:99:2a:08:bb:f9:c2:c5:98:08:10:
         52:f4:19:1d:6c:46:49:73:f1:ce:58:5a:c1:f9:31:8a:43:34:
         4b:b2:bb:d0:d2:d0:b4:5d:11:71:41:0e:8d:b4:36:3a:d9:10:
         0d:ce:b5:6c:a3:03:59:74:f3:96:d8:70:cb:fd:93:75:6b:94:
         06:2f:2b:73:2f:b7:5c:b6:d0:08:60:6c:27:2b:6f:74:f1:26:
         38:ab:8a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----