Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/d08221dd-7bd7-3cc9-bc1d-ab3d4766616a.roa
File:                     d08221dd-7bd7-3cc9-bc1d-ab3d4766616a.roa (raw, json)
Hash identifier:          xmjPGTjK03kIA0hX+eXR1VVQxZ2VU8AmnbSRRfJT9O8=
Subject key identifier:   93:53:1D:6A:5D:EA:B8:7B:3A:94:89:4B:38:95:7D:58:C1:81:AA:9B
Certificate issuer:       /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Certificate serial:       010D0C9F43285838516E657BB5B62B195CD17D00
Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/d08221dd-7bd7-3cc9-bc1d-ab3d4766616a.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Thu 15 Sep 2022 04:00:00 +0000
asID:                     53535
IP address blocks:        2620:38:2000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:51:6e:65:7b:b5:b6:2b:19:5c:d1:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Sep 15 04:00:00 2022 GMT
        Subject: CN=bcdba8f7-c0ab-422c-b943-003579c507f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:12:53:42:ec:fb:64:8e:61:d6:7e:d1:01:9f:
                    d2:93:c5:c1:55:3a:43:67:32:39:51:9e:81:ea:0f:
                    df:4c:64:e6:71:dd:1c:35:85:96:82:b2:91:e7:41:
                    e1:c1:ea:fe:85:eb:b4:7d:da:fe:d2:e6:09:ec:ec:
                    14:ac:81:83:74:49:52:39:5f:ad:ff:4f:25:a2:b7:
                    0d:b9:2a:85:2c:8e:2e:06:2b:a6:83:58:99:3e:c4:
                    1e:d5:07:a6:62:9b:45:7d:c6:ac:52:bd:cf:f0:46:
                    3e:fe:9b:eb:a8:25:f9:7f:ce:da:75:80:83:94:07:
                    73:b6:24:a6:61:0c:c1:2a:7b:a2:1c:0d:b5:c4:75:
                    31:48:a2:26:02:f3:b2:04:52:70:b6:a6:56:15:fe:
                    70:62:b6:1f:90:6d:c3:89:ee:40:68:1b:3c:80:6a:
                    b2:be:1d:10:70:d1:38:14:45:6e:34:08:a9:e0:7e:
                    2e:ae:90:24:9d:d8:be:5a:bb:36:aa:d4:cd:22:8a:
                    e8:07:89:ba:22:e9:a7:81:fc:73:80:58:b3:cb:c7:
                    31:7f:48:94:22:0f:bd:b0:b6:82:eb:b0:78:6b:34:
                    20:a6:86:79:32:06:a7:65:06:38:66:e8:04:18:29:
                    91:f5:88:0a:ed:88:04:8e:06:c6:1a:47:84:d1:95:
                    b4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:53:1D:6A:5D:EA:B8:7B:3A:94:89:4B:38:95:7D:58:C1:81:AA:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/d08221dd-7bd7-3cc9-bc1d-ab3d4766616a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:38:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:47:22:c4:77:3d:ba:ae:df:81:d1:9f:e0:d6:ed:1f:aa:54:
         4f:fd:0e:87:d5:3f:05:db:01:af:ab:4d:9a:9e:71:c1:16:d8:
         7b:e5:99:d5:0f:7c:ed:df:d9:71:4d:a4:00:67:a4:34:42:bb:
         0a:83:21:ea:5d:c9:68:27:12:c5:b2:8d:40:2e:4f:bc:cf:d0:
         28:1d:04:08:a2:4a:b3:c3:84:9d:fe:08:3a:1f:c0:a1:87:bd:
         63:55:a4:82:1f:16:c0:6d:7c:ee:c2:d5:9f:99:5e:58:06:a3:
         4a:86:dc:41:40:48:1e:76:95:7e:5d:64:93:5e:f2:ee:76:7a:
         76:de:b8:6a:d5:ce:87:88:13:23:ae:4c:52:17:a4:f0:a4:41:
         56:9b:02:20:91:1f:53:58:e5:77:1c:68:9f:0d:ac:64:7f:99:
         9f:1e:fa:ab:cd:18:6f:18:f2:74:51:f4:7d:49:4b:16:df:33:
         09:34:ad:ca:a8:7b:06:50:b0:59:b3:7d:42:34:c6:6a:b9:aa:
         c3:29:9a:11:66:f8:08:c3:ae:75:a3:33:2b:0a:6d:e9:75:20:
         fd:b0:ef:2a:50:1d:18:f4:47:31:50:94:08:0a:3e:79:d3:13:
         b9:22:f4:0a:f6:af:d2:f5:9d:19:68:98:5e:9f:c5:69:ca:5c:
         8e:f1:8a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----