Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/065ee998-46a2-4051-a1a1-b267cd239391/bb0d46a9-721e-356a-8206-77f6f42654b9.roa
File:                     bb0d46a9-721e-356a-8206-77f6f42654b9.roa (raw, json)
Hash identifier:          5DGKLEbZAaf1rp8K4Ek3qCrWKtxYOyI8rendm/mwztE=
Subject key identifier:   D0:C8:89:85:7E:C3:80:50:BF:DB:ED:81:C8:D5:28:D2:91:ED:B6:8A
Certificate issuer:       /CN=065ee998-46a2-4051-a1a1-b267cd239391
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732F817EAC
Authority key identifier: BE:BE:C6:A8:26:70:00:9B:E3:A7:43:A8:AE:C6:21:CF:5E:E0:41:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/065ee998-46a2-4051-a1a1-b267cd239391.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/065ee998-46a2-4051-a1a1-b267cd239391/bb0d46a9-721e-356a-8206-77f6f42654b9.roa
Signing time:             Wed 08 Jul 2020 17:38:02 +0000
ROA not before:           Mon 06 Jul 2020 04:00:00 +0000
ROA not after:            Tue 11 Oct 2022 04:00:00 +0000
asID:                     33549
IP address blocks:        2604:6440::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:81:7e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065ee998-46a2-4051-a1a1-b267cd239391
        Validity
            Not Before: Jul  6 04:00:00 2020 GMT
            Not After : Oct 11 04:00:00 2022 GMT
        Subject: CN=70795413-4086-4a8e-b79b-9175307f0aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:55:69:bc:27:4c:d4:5a:41:94:bd:4b:49:ef:
                    15:a6:39:58:d8:0a:25:b7:08:ef:fb:2b:17:ff:ce:
                    e2:ac:40:a6:d3:87:3a:24:4a:2b:6b:3d:48:78:37:
                    0f:f7:f6:7f:4b:0b:01:b6:de:f0:05:15:fe:57:0f:
                    9f:ea:1e:9c:61:bf:df:a5:c6:77:5a:0b:e3:6a:32:
                    9f:29:08:d0:3a:ce:40:f2:e7:49:2d:1a:40:82:4e:
                    5a:c7:7b:36:b8:eb:82:62:bf:43:ca:b6:32:e7:e8:
                    27:00:86:1c:cf:a9:79:74:4c:ae:50:a4:2a:96:e4:
                    30:20:ef:00:9b:92:2a:62:d3:11:78:29:35:89:e5:
                    a0:0f:f9:5c:46:8a:7d:b9:e5:d3:66:b9:50:8b:c2:
                    03:7a:ce:cd:36:87:07:99:8a:71:a8:70:38:1b:d0:
                    0a:1a:86:70:f6:69:97:cb:6e:04:83:6b:45:63:39:
                    28:63:80:2f:a4:d9:19:dc:b5:53:fa:f6:9f:50:ce:
                    fb:da:11:e7:25:bc:6c:52:d5:9c:b4:93:f0:4e:b9:
                    9f:d8:29:6c:fa:16:95:c9:d8:54:18:dd:f4:72:de:
                    06:8c:95:74:98:9f:66:37:4c:c2:26:cf:fb:6a:17:
                    64:1d:d8:66:26:85:0d:a1:8f:7c:7f:ba:1c:bc:73:
                    d5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C8:89:85:7E:C3:80:50:BF:DB:ED:81:C8:D5:28:D2:91:ED:B6:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/065ee998-46a2-4051-a1a1-b267cd239391/bb0d46a9-721e-356a-8206-77f6f42654b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/065ee998-46a2-4051-a1a1-b267cd239391/065ee998-46a2-4051-a1a1-b267cd239391.crl

            X509v3 Authority Key Identifier:
                keyid:BE:BE:C6:A8:26:70:00:9B:E3:A7:43:A8:AE:C6:21:CF:5E:E0:41:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/065ee998-46a2-4051-a1a1-b267cd239391.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:6440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:0d:88:71:29:20:47:7b:a6:a1:8c:0d:3e:49:26:59:0f:38:
         00:75:03:ef:9f:45:0a:c4:8b:6b:96:51:e9:a1:ef:f7:d5:88:
         57:67:fa:15:cc:1d:c8:4f:e9:85:fc:c9:96:ac:0e:4b:ce:5c:
         a5:72:98:4f:8c:55:9b:ef:4f:a4:52:d6:76:ea:fe:9e:2a:73:
         d7:79:98:be:a4:c5:c3:48:6d:b4:ff:e2:6e:dd:4d:82:b2:83:
         95:3b:24:d9:bb:eb:37:9d:a9:d8:e4:cc:f5:78:bf:24:a0:ec:
         71:6d:57:23:63:1a:c0:ba:81:bc:13:fb:0c:f1:a0:56:17:dd:
         e7:fc:b2:25:30:da:6e:be:bc:9c:5a:7e:85:14:1f:72:e6:19:
         d6:6a:d1:2a:ac:e4:d2:e9:0b:b7:39:7d:2c:09:fa:ac:60:10:
         3c:29:03:ac:b7:ff:32:d3:3f:10:cc:75:66:69:ec:39:31:1e:
         f4:46:c9:82:17:72:c3:82:69:be:1f:10:ab:2d:eb:e6:b4:21:
         00:9c:09:ca:ad:39:4a:db:bc:f4:57:d8:14:fb:c9:bf:fe:00:
         2c:96:0a:73:3b:40:75:22:32:29:ee:f9:c2:18:4a:56:22:53:
         1c:69:9a:d2:42:98:80:46:eb:ce:89:14:77:0f:02:df:aa:98:
         44:0f:73:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----