Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/ef429694-b2e7-3526-81f9-c25cca71df26.roa
File:                     ef429694-b2e7-3526-81f9-c25cca71df26.roa (raw, json)
Hash identifier:          iKr+2MUDEs2vLCO+bRcMbZcqvTZwRqYnGRgIBJZIZ3c=
Subject key identifier:   AA:01:D1:40:8A:D2:64:0E:12:60:6B:5D:72:9E:02:89:52:C3:4B:36
Certificate issuer:       /CN=1b03e342-d588-4239-8704-6688d01760d9
Certificate serial:       010D0C9F4328583772564C8A40F4F207F0941D20
Authority key identifier: 13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/ef429694-b2e7-3526-81f9-c25cca71df26.roa
Signing time:             Fri 25 Sep 2020 04:00:00 +0000
ROA not before:           Fri 25 Sep 2020 04:00:00 +0000
ROA not after:            Mon 02 Jan 2023 05:00:00 +0000
asID:                     397031
IP address blocks:        2602:fda1::/38 maxlen: 38

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:72:56:4c:8a:40:f4:f2:07:f0:94:1d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b03e342-d588-4239-8704-6688d01760d9
        Validity
            Not Before: Sep 25 04:00:00 2020 GMT
            Not After : Jan  2 05:00:00 2023 GMT
        Subject: CN=71bea959-580c-43a5-8f0a-1eb208195ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ea:32:25:a4:ee:ab:d3:d2:e0:a7:19:4b:87:
                    67:7a:ea:c6:29:58:70:f2:e4:0d:2a:3b:b2:32:9c:
                    be:e2:3e:67:c7:86:c1:10:42:ed:81:a2:8a:61:d3:
                    5e:cb:9e:a9:6b:f0:a2:17:61:57:ec:be:90:4e:71:
                    b8:cc:02:f1:c3:59:b0:9c:e7:a7:54:41:54:8e:fc:
                    60:c4:7f:f8:02:9a:0b:5a:ca:62:3a:a1:62:f4:8b:
                    ed:65:05:a1:45:ac:42:9b:da:77:8b:be:22:7f:d4:
                    53:c1:e8:08:9c:6b:78:74:21:73:54:0f:27:6c:d0:
                    fd:21:ce:49:d4:57:5a:5c:05:e7:d1:b1:9a:08:1e:
                    d8:78:18:e4:e4:bd:70:00:13:fd:db:2b:a8:ce:b4:
                    16:c4:7c:d5:5a:7e:1b:03:2d:54:2b:84:85:58:85:
                    51:0a:76:c3:25:f7:97:c9:7a:89:e4:e0:16:aa:a8:
                    ee:cb:e3:62:b3:bf:c7:1a:f1:df:54:e9:d7:2a:cf:
                    64:95:0b:35:8e:bd:c7:2d:f2:19:16:c3:d4:6a:4b:
                    3f:95:a8:ad:2c:8e:74:c2:fc:8c:94:f0:21:89:fc:
                    c7:05:03:c4:24:b1:b9:a1:2a:c7:5a:46:5f:bc:fb:
                    76:13:5a:d1:21:4c:c9:97:df:1e:56:b4:1f:03:5b:
                    cf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:01:D1:40:8A:D2:64:0E:12:60:6B:5D:72:9E:02:89:52:C3:4B:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/ef429694-b2e7-3526-81f9-c25cca71df26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.crl

            X509v3 Authority Key Identifier:
                keyid:13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fda1::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:14:9d:aa:a7:56:c0:c1:c6:4b:80:ee:a0:1b:ff:b0:18:bc:
         f3:d2:ad:1d:d0:8b:3a:77:5d:71:af:ee:78:ce:f6:0f:76:8d:
         3a:83:0c:b7:24:9f:1e:1c:94:70:6e:73:60:1a:76:8d:58:a1:
         31:af:fa:6a:5c:a0:ce:d4:7d:53:89:95:bc:96:05:87:76:9e:
         9b:41:48:4c:09:54:41:eb:f6:b3:7d:8a:ae:67:6f:39:63:43:
         2f:da:03:13:9e:b6:b0:0d:0c:a0:99:e8:44:2b:ba:f9:a1:5e:
         18:18:3c:3b:63:f6:20:47:76:49:32:1c:15:7d:f6:5f:b0:77:
         b4:51:51:55:ab:30:48:97:07:af:61:df:c6:da:88:3e:55:4f:
         df:4e:af:25:5d:30:5f:dd:3b:3d:5e:34:d8:75:00:00:7d:83:
         08:a1:54:2e:8b:86:f0:c6:b0:91:fe:a9:89:09:a7:14:bb:72:
         1d:6f:93:21:a6:8e:4c:34:7e:34:07:c5:3b:8a:fd:e9:c1:b3:
         bf:b2:9c:7e:b7:02:4d:a8:7b:6b:5b:07:72:03:82:45:a4:5d:
         97:75:de:7b:37:41:46:1a:2e:9a:11:53:99:4f:ca:ff:8a:36:
         1e:76:c7:84:d8:d7:b5:1c:a8:eb:02:e7:fa:9f:21:dd:08:33:
         0a:55:b1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----