Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab/8da42781-32d0-3e14-bad9-c5c35e275447.roa
File:                     8da42781-32d0-3e14-bad9-c5c35e275447.roa (raw, json)
Hash identifier:          f5MSyhaHjHOk9IwLqZwp8T2meG6OUo7kxKgaAEEk9TA=
Subject key identifier:   F8:66:E2:61:8A:3A:F3:87:64:B2:03:E6:C7:E4:A5:D3:F3:4E:B9:49
Certificate issuer:       /CN=ef0b1b44-6f91-4e5d-a42c-54259da394ab
Certificate serial:       010D0C9F4328576D51CC73C042CFC17219AABF6E
Authority key identifier: 1B:98:1D:18:FD:64:C4:44:8D:CF:25:CA:BB:A5:70:87:31:12:91:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab/8da42781-32d0-3e14-bad9-c5c35e275447.roa
Signing time:             Fri 15 May 2020 18:48:40 +0000
ROA not before:           Fri 15 May 2020 04:00:00 +0000
ROA not after:            Thu 18 Aug 2022 04:00:00 +0000
asID:                     393990
IP address blocks:        2620:120:8000::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:19:aa:bf:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef0b1b44-6f91-4e5d-a42c-54259da394ab
        Validity
            Not Before: May 15 04:00:00 2020 GMT
            Not After : Aug 18 04:00:00 2022 GMT
        Subject: CN=fb37b546-3594-438c-977a-75915aa0f3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:63:52:f8:b6:3e:ec:ef:95:c6:f9:42:6b:00:
                    76:ba:dc:23:40:e0:80:05:82:7a:02:a4:8a:40:96:
                    ef:3d:a7:22:60:24:11:36:e1:e9:98:34:ae:0e:50:
                    3a:73:20:03:b7:a3:35:fa:c8:d8:ed:73:9a:4f:95:
                    6d:fb:db:8e:78:80:09:4d:aa:d6:4e:a4:e1:f4:bc:
                    36:65:f9:73:fd:53:68:e9:0c:52:29:0d:d9:bb:95:
                    d8:1c:ea:0e:23:97:d7:5e:27:6e:ba:6a:9e:20:d9:
                    28:8c:72:e2:76:cf:eb:cb:ce:50:a3:62:f8:cb:6c:
                    eb:e9:76:8e:29:a5:14:04:47:9f:6e:69:f7:e7:e7:
                    7a:dd:91:20:02:8a:f5:09:04:d6:de:f3:cb:2f:9a:
                    1b:7b:e9:5e:80:68:df:24:ac:38:15:e2:ce:6e:54:
                    f0:1c:6f:03:47:d9:19:4b:91:de:25:ac:b1:1c:8a:
                    bd:56:dc:62:7d:df:47:74:1e:38:d2:a7:ae:49:3c:
                    80:bf:8a:98:85:01:7a:09:2a:3d:37:6b:68:8f:67:
                    c8:41:1e:e3:f6:ba:6a:69:68:f7:bf:99:bc:94:1e:
                    f2:98:ec:6a:f0:8e:62:4e:21:54:e8:28:28:04:46:
                    eb:52:54:55:21:c0:ea:61:8d:48:74:a0:c8:93:04:
                    6b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:66:E2:61:8A:3A:F3:87:64:B2:03:E6:C7:E4:A5:D3:F3:4E:B9:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab/8da42781-32d0-3e14-bad9-c5c35e275447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab/ef0b1b44-6f91-4e5d-a42c-54259da394ab.crl

            X509v3 Authority Key Identifier:
                keyid:1B:98:1D:18:FD:64:C4:44:8D:CF:25:CA:BB:A5:70:87:31:12:91:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:120:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:bb:de:3f:88:f9:21:32:67:5e:41:15:c8:a2:51:42:3d:bd:
         c4:f1:df:9e:ad:2d:40:fa:3a:bb:aa:6b:f1:05:f4:ed:59:50:
         b9:2d:97:e8:3b:9d:07:64:31:ad:b0:ee:cd:ea:59:dd:b0:00:
         42:97:25:f9:55:d9:de:15:07:93:8c:15:9c:7f:e6:55:54:5c:
         b5:42:2f:ef:db:16:de:14:59:ba:23:61:e3:d2:18:02:8f:ce:
         b8:8d:17:6a:07:f6:5c:a6:15:6d:51:bf:72:fc:d9:c6:49:e4:
         46:c4:e1:d9:d7:06:ec:0b:9d:90:1a:c0:f5:0b:26:04:aa:18:
         3b:41:ed:2a:b1:33:f3:2d:25:cc:ab:96:99:57:47:e1:66:99:
         3e:23:12:38:14:47:a6:7f:c1:b7:61:97:80:29:0f:f9:bf:77:
         8c:56:11:d6:d2:f0:11:7b:23:0d:ae:81:e5:c8:90:80:5f:42:
         17:aa:92:ad:24:ab:d5:59:bb:28:b9:a0:d8:4b:c2:30:8d:53:
         e2:bd:d3:a6:4d:cb:0a:be:27:5e:e3:69:ac:53:d9:1d:3d:f0:
         f3:ac:7e:88:0e:4c:e7:90:9d:e2:15:55:b2:7b:66:ac:41:27:
         d6:a9:54:71:a2:de:bd:f9:11:01:e1:4a:46:f7:c8:ee:57:ec:
         d8:a1:1c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----