Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/02bde628-9f3a-3e11-866a-fec662dcf8df.roa
File:                     02bde628-9f3a-3e11-866a-fec662dcf8df.roa (raw, json)
Hash identifier:          W62Qu4Ynj0Gp+MUTTxHtZkenK8B25qdeEe5odC/bzAo=
Subject key identifier:   3D:07:2B:93:F0:63:03:5F:4B:86:79:C4:A3:E8:8D:93:87:54:55:10
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D41F408BAB975D1FBAAC1280
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/02bde628-9f3a-3e11-866a-fec662dcf8df.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Mon 06 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        2001:569:c000::/34 maxlen: 34

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d4:1f:40:8b:ab:97:5d:1f:ba:ac:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  6 05:00:00 2023 GMT
        Subject: CN=7d1856db-067c-4596-b7b9-d801227a6ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ad:81:ba:82:6a:73:89:a2:26:40:7a:d0:a7:
                    e1:b4:5f:6c:ae:da:78:10:38:3a:ba:25:4e:8c:13:
                    ba:16:84:bf:58:a8:31:7e:45:78:fc:0a:35:29:bb:
                    1c:b8:98:8a:c6:c8:df:1f:75:c0:d9:fb:5d:59:03:
                    a5:8d:18:fd:13:a9:56:34:a5:fa:f5:20:dd:ae:96:
                    6b:9f:0d:6a:ab:37:2d:7e:55:f6:52:73:09:9b:ae:
                    77:b8:b7:d2:a6:bf:81:98:c6:cf:86:71:43:b9:23:
                    9a:5e:a8:72:21:6a:8f:c1:a8:d2:de:46:e1:79:50:
                    9e:39:1b:9a:8a:b3:cb:1d:8c:ea:a7:27:dc:a0:4e:
                    bc:13:ff:ed:37:97:ac:52:ca:78:8f:ea:f5:b3:73:
                    70:04:42:ab:82:e6:dd:c2:64:f6:10:2f:29:68:b6:
                    13:2a:5a:02:8d:56:df:bd:5f:57:01:7f:d1:b1:10:
                    d6:79:e8:35:0c:79:a6:21:02:b1:1f:60:1e:e0:80:
                    e7:ab:49:fe:16:6b:43:9c:40:84:7f:72:52:4f:2b:
                    b4:70:b1:32:22:d6:b6:9b:26:9d:54:5f:f1:d3:09:
                    ff:3d:b3:45:16:a7:fa:ac:91:f3:fa:0b:21:2b:b6:
                    cb:95:ca:ae:de:97:da:92:4e:84:38:d1:a5:18:73:
                    89:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:07:2B:93:F0:63:03:5F:4B:86:79:C4:A3:E8:8D:93:87:54:55:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/02bde628-9f3a-3e11-866a-fec662dcf8df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:569:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:fc:74:37:15:75:c0:23:69:2f:97:a7:5b:ad:dd:83:e3:15:
         36:ad:c9:75:36:54:f6:0c:29:13:2c:e4:3a:ee:25:1c:a1:1c:
         6b:f6:1a:50:cc:33:b8:dc:cd:82:98:7b:71:d4:b2:9b:a2:4e:
         c8:40:48:11:9c:af:99:28:fe:f1:1b:80:50:76:ae:09:95:0f:
         56:3e:23:36:bd:c0:65:9b:e7:0b:04:ac:e0:3b:7e:50:29:78:
         84:4b:ee:4b:2a:09:cc:66:55:15:95:25:ff:69:14:09:3e:f8:
         cd:e4:9c:74:94:50:25:4d:c2:d1:92:ac:7f:ae:10:34:da:28:
         7d:6e:c2:93:42:be:51:1b:0a:e9:98:b5:b3:32:53:8b:c3:b1:
         b5:2b:6c:36:f3:ec:02:3b:dc:70:e2:89:37:18:6c:83:83:44:
         0d:6f:67:77:e3:9e:43:2f:86:fe:a3:fe:5a:be:09:84:7e:4d:
         37:12:14:33:fa:e5:fe:2a:8d:6e:0f:c9:1a:7b:4e:21:49:c5:
         81:b8:50:97:d7:a3:11:4b:ce:df:31:6d:26:20:67:28:9c:7c:
         27:e4:88:79:e3:af:8d:f1:c0:16:b5:d2:a6:17:9f:4d:90:23:
         94:cf:b7:35:ab:86:c0:db:97:05:b4:2c:7b:cd:a6:40:63:52:
         1e:e4:98:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----