Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/21f3baca-a739-3a89-bb9d-b04c37a92723.roa
File:                     21f3baca-a739-3a89-bb9d-b04c37a92723.roa (raw, json)
Hash identifier:          +dGt2wrUm6ddV9XejRCsOyLfmHnb9rcPx0s4nGx+oTY=
Subject key identifier:   E9:FD:00:D3:F7:91:97:2F:91:F5:B2:D2:AD:F7:0B:A3:B8:8A:D5:AB
Certificate issuer:       /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
Certificate serial:       010D0C9F4328576D51CC73C042CFC1737705302B
Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/21f3baca-a739-3a89-bb9d-b04c37a92723.roa
Signing time:             Wed 22 Jul 2020 14:54:55 +0000
ROA not before:           Thu 05 Sep 2019 04:00:00 +0000
ROA not after:            Tue 25 Oct 2022 04:00:00 +0000
asID:                     1207
IP address blocks:        2001:5e8:ffff:3::/64 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:77:05:30:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
        Validity
            Not Before: Sep  5 04:00:00 2019 GMT
            Not After : Oct 25 04:00:00 2022 GMT
        Subject: CN=c7d35a83-46e4-4560-8b6a-47846524275d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ac:fa:3c:21:05:12:85:b1:2a:23:0c:ef:5f:
                    92:d4:6c:62:4f:8a:dc:8b:69:b1:7f:70:01:32:a8:
                    3e:74:14:51:d0:49:8a:50:ea:f0:cb:68:43:49:4e:
                    cb:0f:97:29:94:b7:fd:17:ca:a9:94:f3:7a:41:d5:
                    28:32:2d:ad:c4:fd:e5:af:3d:a3:9c:5c:00:64:4b:
                    58:cd:5b:1d:a7:4b:36:ea:0c:44:57:91:21:39:d4:
                    4e:e8:5c:cf:50:3b:01:25:05:7b:95:92:9e:94:19:
                    f0:3d:45:00:76:92:c4:a4:d7:cc:31:61:de:91:9e:
                    d2:31:2e:d5:d8:18:b8:dd:db:75:0a:06:73:b8:58:
                    20:f4:89:3a:1d:66:1b:0c:f5:0a:1a:84:0f:79:ff:
                    54:c6:70:b5:3a:7e:04:6c:e6:23:b7:6d:48:ef:07:
                    c8:e0:76:b1:ef:54:7c:62:9d:3e:00:29:f2:60:6f:
                    b5:9d:f0:b5:d5:7e:03:4d:29:64:8b:f4:8b:f3:f4:
                    64:1a:b1:39:ff:08:2d:39:24:b1:de:48:6d:e0:93:
                    11:8d:88:43:d5:89:78:d1:2a:87:c3:4a:b2:94:5d:
                    a8:ae:99:8f:4d:17:ee:56:9a:2a:33:5a:57:d5:b6:
                    d5:81:e7:53:e5:1c:ce:2e:44:68:9e:a4:41:fa:1f:
                    1f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FD:00:D3:F7:91:97:2F:91:F5:B2:D2:AD:F7:0B:A3:B8:8A:D5:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/21f3baca-a739-3a89-bb9d-b04c37a92723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5e8:ffff:3::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:74:b4:88:59:da:57:21:3d:f0:ac:a5:64:cf:c8:9b:f5:7d:
         0b:22:43:78:cf:09:35:c6:42:33:94:08:f8:2c:4b:be:8d:4b:
         88:06:e5:79:ab:3f:72:d9:47:4c:66:db:f0:f7:39:c5:d9:fe:
         48:c1:29:d1:30:63:95:06:08:5d:f2:cd:c0:eb:06:94:40:b5:
         4d:79:b7:90:f3:ff:22:52:96:86:06:cd:8f:63:3b:57:65:86:
         de:e8:7f:63:aa:64:a2:1a:0d:f7:fd:f9:fd:57:d0:8f:b3:22:
         c7:d3:53:18:52:29:5a:83:54:23:3d:91:2c:ae:36:a5:39:30:
         2f:fc:23:03:2d:5a:c4:65:e0:cc:bc:2d:46:50:58:93:d9:d0:
         70:40:18:62:8e:a2:21:69:cc:7e:ac:ac:9f:56:4d:43:66:a7:
         9d:a9:55:4c:82:86:9a:e4:80:26:16:1f:e6:b9:b3:28:5c:dc:
         da:24:4d:b0:a6:52:a6:a5:0e:14:8f:4f:50:ea:71:19:a3:0b:
         ed:aa:1f:e2:e7:c7:c6:12:04:cb:7a:1f:f6:47:8e:e8:7f:0a:
         f9:07:a2:29:2e:bb:b7:c9:75:4f:01:63:7f:96:89:f8:85:35:
         65:a1:26:ff:f0:e4:f1:0d:f1:54:a3:f8:b5:72:ae:fd:66:52:
         8e:be:2f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----