Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/6d435538-80ca-3ff6-83d9-d024f3418113.roa
File:                     6d435538-80ca-3ff6-83d9-d024f3418113.roa (raw, json)
Hash identifier:          DZT05T2JF+lxp9YFg0LyggHKQupQQ7M9FFdbB8NpeWA=
Subject key identifier:   7A:87:AE:4C:F3:A4:E3:CD:C4:81:68:44:69:34:EB:D5:B6:64:07:EC
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F43285837AE49BD8ABEC7286B84682D40
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/6d435538-80ca-3ff6-83d9-d024f3418113.roa
Signing time:             Thu 21 Jul 2016 04:00:00 +0000
ROA not before:           Thu 21 Jul 2016 04:00:00 +0000
ROA not after:            Tue 24 Jan 2023 05:00:00 +0000
asID:                     32133
IP address blocks:        2606:8e80:3800::/37 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:ae:49:bd:8a:be:c7:28:6b:84:68:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Jul 21 04:00:00 2016 GMT
            Not After : Jan 24 05:00:00 2023 GMT
        Subject: CN=4907fd5c-2959-43b2-a083-00954ae78ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e6:5e:98:f9:e9:3c:9c:db:da:e2:d7:71:37:
                    af:2e:01:dd:3b:01:c3:d4:8b:21:ef:f3:91:22:b7:
                    a4:4b:0f:b5:61:60:86:9c:2a:07:d7:27:f0:c7:0c:
                    2f:0c:64:37:cb:08:e2:13:06:11:c6:a3:a6:c5:d3:
                    a8:4d:4d:07:49:78:c5:a2:4e:95:6d:b2:a4:65:5d:
                    63:28:9f:ed:08:09:61:3a:ac:56:e5:c0:ae:e7:2e:
                    95:97:b1:47:92:f6:e8:4a:d2:f1:5a:89:4e:50:e3:
                    eb:c2:7d:92:03:32:97:84:66:16:19:21:81:e0:e7:
                    a2:e2:56:b9:39:b7:a7:0f:03:2e:b8:1f:80:6b:d9:
                    3f:f4:c5:b2:be:ea:50:57:ca:20:28:6f:75:70:1a:
                    af:0f:a8:70:56:c0:37:96:71:ae:42:56:83:57:25:
                    18:96:fd:70:22:08:f4:95:16:20:da:65:e1:44:21:
                    22:41:66:6e:38:f1:a6:1e:5c:e1:7f:b5:0f:56:39:
                    79:d6:5a:65:25:fc:3d:79:ed:da:4d:07:79:0f:57:
                    ac:62:16:10:fd:ea:39:8d:9f:d4:69:23:8f:d0:f6:
                    ab:15:8f:c2:22:3a:8a:c2:c8:4f:59:1b:4e:e7:95:
                    eb:00:5b:80:ba:ba:2f:27:a7:bf:c5:cb:f7:70:1a:
                    12:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:87:AE:4C:F3:A4:E3:CD:C4:81:68:44:69:34:EB:D5:B6:64:07:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/6d435538-80ca-3ff6-83d9-d024f3418113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80:3800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:40:b8:cd:e8:61:e1:5d:8b:22:6a:a6:4a:73:83:d7:4c:6d:
         97:ed:75:ad:e7:18:f8:13:b3:3a:0e:ee:f9:a1:60:d1:82:eb:
         00:ea:35:61:ab:0c:d2:a9:dd:4f:15:ef:f9:90:fd:87:e2:47:
         9f:1f:5b:95:94:fc:96:2e:4f:64:54:17:90:ed:18:c2:69:aa:
         a4:c3:1b:0e:78:1b:95:d8:4c:30:de:89:8e:82:8b:5b:f5:cd:
         ce:40:a3:01:6d:a2:4d:1e:92:f4:3d:1c:06:71:67:20:05:34:
         36:d8:af:3b:01:99:33:83:0e:d5:c0:c5:25:4d:e4:90:61:d0:
         03:5c:41:8a:31:15:d8:20:14:c4:af:54:fa:dc:3a:97:4d:6f:
         97:53:19:ea:c2:0f:2a:a7:dd:07:a4:1e:c5:f8:40:ed:d6:90:
         5d:0e:f2:29:da:cd:83:fc:56:44:fe:99:58:86:33:df:3c:12:
         9d:99:bb:34:57:37:71:c4:db:67:fa:f5:4b:c6:e4:0b:6b:fb:
         73:ec:f6:19:3c:79:49:53:e9:09:c0:57:eb:ee:12:96:f5:e1:
         e0:24:d0:cd:b1:5b:27:5a:ea:eb:7b:c6:20:d7:05:39:8f:4f:
         75:c1:1c:fa:32:d8:de:2f:7b:cb:91:5c:48:ec:94:f0:5b:bd:
         b5:ee:18:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----