Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/63e96141-c340-3d9f-af5b-6161b3bbdaef.roa
File:                     63e96141-c340-3d9f-af5b-6161b3bbdaef.roa (raw, json)
Hash identifier:          acpJDgWrnld9FV5ikeCxnqmnIdo/1NXQkfR+dDJ4Xvg=
Subject key identifier:   01:41:88:9E:FE:7F:16:D4:CA:51:1C:D8:F0:F0:75:73:E0:C7:AF:90
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328576D51CC73C042CFC174064E6D72
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/63e96141-c340-3d9f-af5b-6161b3bbdaef.roa
Signing time:             Thu 21 Jul 2016 04:00:00 +0000
ROA not before:           Thu 21 Jul 2016 04:00:00 +0000
ROA not after:            Tue 22 Nov 2022 05:00:00 +0000
asID:                     32133
IP address blocks:        2606:8e80:2800::/37 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:74:06:4e:6d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Jul 21 04:00:00 2016 GMT
            Not After : Nov 22 05:00:00 2022 GMT
        Subject: CN=9769fe24-936f-47d3-8308-c3c058a916f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ac:dd:03:3c:90:c9:96:22:b8:f5:6e:52:48:
                    58:1a:19:6e:78:97:31:0b:e2:fa:2a:67:be:65:0d:
                    95:ee:fe:55:54:46:9a:55:1d:a9:d1:a4:5b:bf:fd:
                    44:ab:a2:af:5d:e1:80:c9:b8:d6:bd:2b:da:06:55:
                    13:03:c6:84:1d:30:71:66:02:c6:c6:6b:0a:32:a8:
                    55:32:77:0e:01:5f:db:a2:cd:f9:72:6e:25:5c:6e:
                    63:1e:1e:34:c6:d5:4a:70:3c:da:0a:49:ec:39:45:
                    bd:95:85:5c:f5:c0:40:5b:86:26:bf:42:d3:d2:98:
                    2c:94:8d:40:48:8b:fc:ca:31:3d:e8:a8:25:d1:78:
                    64:37:9d:07:39:63:4d:3d:e6:57:95:50:a7:87:5c:
                    3f:96:df:8c:55:60:b5:d6:9d:31:2f:28:87:79:15:
                    9b:68:7c:fa:15:c0:47:15:49:e4:e5:34:85:3a:cc:
                    3d:16:b1:74:16:dc:de:75:95:d2:40:31:ce:c8:f9:
                    13:30:25:7e:ae:3d:6a:f2:18:14:23:b9:48:29:35:
                    fb:36:58:11:0f:99:78:07:34:12:70:ed:d7:33:d3:
                    d7:c7:f5:11:c8:54:d1:c4:51:d2:0c:79:31:e4:a3:
                    dc:df:9c:f3:5b:a2:91:6e:f9:65:6d:43:58:27:0a:
                    63:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:41:88:9E:FE:7F:16:D4:CA:51:1C:D8:F0:F0:75:73:E0:C7:AF:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/63e96141-c340-3d9f-af5b-6161b3bbdaef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80:2800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:7d:69:a3:ce:10:00:b2:c8:15:b9:fd:f2:22:78:1a:23:36:
         c1:3e:7b:79:b6:2c:4a:be:81:fe:a7:ba:60:26:8b:c2:db:18:
         81:91:49:b7:30:a0:6b:06:c9:08:97:fd:ad:14:df:72:2f:f3:
         92:b2:75:ca:77:d2:1f:74:bc:73:a3:5b:fc:93:c8:28:74:91:
         c2:78:76:2c:0c:05:5b:e8:0d:3f:8b:38:34:41:02:4f:fc:85:
         77:d7:f7:fc:8c:f2:ae:ed:e5:22:b8:ab:87:60:db:8b:fb:39:
         d1:4c:30:35:88:e9:39:84:0f:43:ce:cb:fa:35:31:78:ed:82:
         f3:5e:c0:35:fa:85:b5:10:dc:20:de:ab:d8:b1:a8:31:7e:95:
         18:6e:32:74:c7:90:9d:60:43:4e:b9:97:e5:dc:c5:81:16:61:
         3c:b0:80:bc:cb:16:44:58:5f:4c:51:0a:ca:5c:ab:18:cc:92:
         23:f7:47:84:97:5a:13:31:1a:9e:2c:4d:c4:fd:2a:b3:16:3d:
         d2:a2:e0:9b:a4:ea:e1:86:b4:f7:2a:4b:d6:29:75:fe:f8:cb:
         3c:2f:18:5d:08:f5:0a:84:88:2f:61:84:d6:b8:ec:6b:8e:fb:
         ef:cf:07:e5:42:2a:b8:6a:e4:4f:ba:a4:a1:45:6d:84:14:d4:
         86:7f:51:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----