Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/45d018ed-3a39-3fd3-a596-f162a9ac8f6e.roa
File:                     45d018ed-3a39-3fd3-a596-f162a9ac8f6e.roa (raw, json)
Hash identifier:          /R5hwPQsY9xBOnB3GFEaJKOitCMsmh7teqk5fdmkq40=
Subject key identifier:   66:DC:96:C6:A5:03:25:02:89:55:38:1B:7C:7A:69:27:CC:DE:7E:68
Certificate issuer:       /CN=35d4b9db-18f3-408a-8284-1ef0ea5bc68a
Certificate serial:       010D0C9F43285839B8D3B4E92B31798147EE7F00
Authority key identifier: A1:34:5D:51:A4:57:D3:40:5B:E5:EA:5A:89:4F:26:94:CA:25:15:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/45d018ed-3a39-3fd3-a596-f162a9ac8f6e.roa
Signing time:             Mon 26 Apr 2021 04:00:00 +0000
ROA not before:           Mon 26 Apr 2021 04:00:00 +0000
ROA not after:            Sat 29 Jul 2023 04:00:00 +0000
asID:                     394725
IP address blocks:        2620:e4:4000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:b8:d3:b4:e9:2b:31:79:81:47:ee:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35d4b9db-18f3-408a-8284-1ef0ea5bc68a
        Validity
            Not Before: Apr 26 04:00:00 2021 GMT
            Not After : Jul 29 04:00:00 2023 GMT
        Subject: CN=89344899-ab7f-4cd4-ba55-ca91225bf1d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2e:d1:85:3c:d5:b6:77:b3:a7:d8:d2:ad:30:
                    13:44:87:88:b0:07:04:f0:6b:e4:d7:bf:3a:15:cc:
                    51:14:16:bb:64:6f:16:38:37:bc:f1:54:70:3b:04:
                    67:43:f3:e0:3d:d3:d0:a6:3f:7c:2f:49:e3:ca:16:
                    3e:94:74:9b:ba:11:c8:ac:af:f5:27:08:ad:f4:e7:
                    aa:76:1b:26:b6:20:b7:ce:b0:fc:b3:63:25:17:08:
                    ef:9f:ce:5a:d5:72:8f:01:9e:8b:53:33:65:ab:8e:
                    8a:e2:c5:d4:9c:37:b9:98:46:9e:7e:4e:3a:e2:6a:
                    ae:20:82:89:57:af:5d:33:fd:37:56:ef:32:7f:bf:
                    df:6a:a6:99:00:0c:7e:f3:73:19:63:53:ce:97:4b:
                    a9:1d:ea:c1:0e:10:63:82:08:36:71:13:ca:cd:20:
                    44:8a:f3:18:e9:e5:39:80:a8:17:d1:7c:b6:be:0b:
                    0d:c4:c4:99:0e:0f:1f:df:10:db:42:4a:c3:ac:51:
                    03:4f:d9:93:49:09:1b:b3:6f:29:35:00:f6:6f:94:
                    b7:0d:74:b6:dc:bb:ed:ab:1b:2e:67:9f:38:62:87:
                    54:64:f5:d2:26:9a:ce:7a:80:b9:6d:b9:9d:d2:6d:
                    9f:cf:2d:42:e4:ab:cb:6d:77:07:33:37:cb:f3:ce:
                    53:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DC:96:C6:A5:03:25:02:89:55:38:1B:7C:7A:69:27:CC:DE:7E:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/45d018ed-3a39-3fd3-a596-f162a9ac8f6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:34:5D:51:A4:57:D3:40:5B:E5:EA:5A:89:4F:26:94:CA:25:15:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:e4:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:cd:f4:eb:ea:9e:4f:c7:0c:28:3c:6b:c6:8f:52:27:a0:ad:
         65:29:39:54:5c:39:03:93:39:b5:cf:6d:3e:e4:31:18:cc:59:
         d0:d2:7b:30:1f:6c:56:1a:11:3b:26:a0:0e:22:36:21:90:c5:
         ea:e7:ed:45:c8:b1:50:52:84:34:3c:b4:0e:dc:93:f5:c6:ac:
         8c:c9:04:8f:63:02:d8:e4:77:e8:84:ce:fb:4e:66:57:ae:06:
         40:3a:f8:81:19:08:9a:62:c5:36:a7:3e:d0:26:e0:3f:80:70:
         a6:f7:d1:03:c8:de:01:07:9c:54:1c:23:02:3e:25:de:33:33:
         a2:b6:a8:61:74:ae:da:a9:74:68:66:75:12:0b:fe:3d:8e:ee:
         cb:55:b4:ff:67:10:fa:a5:07:c7:b1:32:45:f0:18:f3:95:21:
         de:67:55:e9:83:61:45:ec:17:ec:b1:55:a8:1d:00:f3:fc:e8:
         35:7c:8e:84:49:ad:2f:8b:62:8b:7b:55:76:b6:18:d8:cd:2c:
         1e:ff:67:c9:02:ed:c6:e5:1a:1e:89:ce:e3:c7:3e:00:da:51:
         75:d4:7f:01:8e:84:85:b2:6e:e5:dd:b0:2d:7d:2f:fd:01:27:
         f0:0b:81:d4:5b:71:02:8b:c0:70:fe:eb:18:11:ca:70:17:bd:
         3d:f6:1f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----