Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/0c87184c-41cb-37d0-87dc-14ba38474939.roa
File:                     0c87184c-41cb-37d0-87dc-14ba38474939.roa (raw, json)
Hash identifier:          YyrxXkkIg46YnC4/k8RZs/ksshfDkax/kkz8a/PD3lc=
Subject key identifier:   B4:E9:C9:57:9B:80:00:8A:08:ED:D3:24:4C:C1:D2:36:B6:FD:1C:10
Certificate issuer:       /CN=dec54853-8708-4db6-8c16-61e598dd115f
Certificate serial:       010D0C9F4328576D51CC73C042CFC172441A5112
Authority key identifier: AF:E2:B2:1C:02:76:14:90:C2:EB:AB:19:F8:C2:59:BC:52:73:A5:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/0c87184c-41cb-37d0-87dc-14ba38474939.roa
Signing time:             Sun 24 May 2020 00:34:34 +0000
ROA not before:           Thu 27 Dec 2018 05:00:00 +0000
ROA not after:            Fri 26 Aug 2022 04:00:00 +0000
asID:                     397795
IP address blocks:        2602:802:b010::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:44:1a:51:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dec54853-8708-4db6-8c16-61e598dd115f
        Validity
            Not Before: Dec 27 05:00:00 2018 GMT
            Not After : Aug 26 04:00:00 2022 GMT
        Subject: CN=38b3b158-3ad6-4b8e-89c5-6ab8d8046a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e1:8e:b2:22:c0:5b:a1:c4:40:fd:e8:62:34:
                    70:64:4e:c6:28:c6:90:34:96:44:7b:d4:91:18:bc:
                    9f:5b:d1:81:16:7a:1f:38:33:ad:eb:19:b0:d5:59:
                    0b:1b:6c:a3:05:0e:6a:33:c3:dc:5e:e6:b5:21:cf:
                    b0:1a:44:3f:02:8a:4c:9c:a2:97:7b:4d:da:e8:ed:
                    d6:d1:59:c5:17:fb:5b:ed:62:03:b0:57:6d:fe:59:
                    a6:c8:7d:df:4c:60:31:d2:95:8d:63:ea:d5:d3:f9:
                    dc:5d:e1:30:9a:92:af:c8:2c:cf:42:dc:08:21:60:
                    f5:67:c5:5b:f8:3b:12:24:32:c7:66:b9:77:25:0a:
                    41:37:26:c2:5b:26:b0:03:d6:a7:29:8e:93:93:e0:
                    10:6f:c0:19:3a:ee:f4:b3:c7:26:11:5b:7b:80:ab:
                    b8:32:a8:f9:0f:7f:4d:14:c6:03:39:9d:c4:5c:f2:
                    b6:17:c8:45:e3:e2:09:ab:91:fe:cd:9b:a1:99:b0:
                    14:97:a3:ab:f6:b3:75:e2:64:04:44:e8:0d:02:ce:
                    f0:76:f9:dd:f8:84:ca:80:79:41:1d:96:bc:75:5d:
                    14:73:47:06:e1:53:0b:36:68:f1:92:a6:a7:99:93:
                    bd:37:26:4f:ca:e4:79:c7:fb:38:b2:d7:7f:b7:62:
                    56:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E9:C9:57:9B:80:00:8A:08:ED:D3:24:4C:C1:D2:36:B6:FD:1C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/0c87184c-41cb-37d0-87dc-14ba38474939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/dec54853-8708-4db6-8c16-61e598dd115f.crl

            X509v3 Authority Key Identifier:
                keyid:AF:E2:B2:1C:02:76:14:90:C2:EB:AB:19:F8:C2:59:BC:52:73:A5:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:802:b010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:bb:5b:9a:aa:01:f9:c7:9a:75:45:e7:5e:ba:9a:ee:96:6f:
         52:d2:6c:00:ee:e8:fd:f3:d2:36:82:fa:da:84:37:2b:c0:62:
         13:9f:93:bf:77:c2:a5:35:5e:eb:44:b3:12:e1:f7:d9:85:38:
         59:cd:ba:a4:b0:1d:28:77:81:77:16:62:b1:74:e0:39:5d:b1:
         77:55:28:45:f3:83:c4:b2:60:14:82:e6:ef:6f:08:ee:3f:03:
         c0:ea:f8:9f:bb:32:ad:60:12:29:eb:7f:54:77:71:cf:89:06:
         e6:87:ec:55:af:19:68:ac:5d:20:15:a1:3b:6f:46:ec:3e:0f:
         ba:1d:69:d7:74:b7:0d:a5:50:1d:f8:0e:cb:e0:f4:87:c3:22:
         61:97:87:67:32:7f:34:cd:60:1e:83:93:eb:c3:59:6a:45:87:
         81:06:88:13:c3:e0:66:b7:29:44:72:a4:27:1e:4e:e6:48:a1:
         c3:be:8b:ea:d8:ad:dd:81:64:7e:6e:00:71:0f:fd:33:72:81:
         cd:d4:08:5f:36:1c:c1:6d:5e:97:70:fc:ac:c1:82:f4:ef:76:
         ef:3e:60:99:e9:30:cf:ea:83:f3:4a:07:8a:88:67:c2:3a:dc:
         26:6c:57:60:be:98:a6:ad:ad:77:4d:05:11:37:1f:59:fe:8b:
         e6:38:08:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----