Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4fb6734d-4a8b-33c4-8888-d5ddf8038e84.roa
File:                     4fb6734d-4a8b-33c4-8888-d5ddf8038e84.roa (raw, json)
Hash identifier:          /GvaKeOlnxzNSCiyUBf98luHl7DPn19blD8Fij1v8G8=
Subject key identifier:   C4:73:05:7E:C4:43:6B:BE:E0:9D:7F:6B:B8:7F:80:F5:A8:FC:16:ED
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D4194F3579D7CA3D70031800
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4fb6734d-4a8b-33c4-8888-d5ddf8038e84.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Mon 06 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        2001:56b:3f20::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d4:19:4f:35:79:d7:ca:3d:70:03:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  6 05:00:00 2023 GMT
        Subject: CN=72b280ec-4bb1-40cc-b46a-db63635120cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:41:75:23:73:71:6d:66:ec:96:4d:cb:1b:7f:
                    8b:a9:c6:19:10:36:ec:6b:ba:ee:17:98:52:48:1c:
                    b5:38:82:4a:fd:2d:07:ae:5e:b3:91:4c:65:6b:25:
                    9c:c7:e2:7d:2f:18:f5:c5:38:2c:e0:6f:95:f3:e2:
                    af:cf:8e:02:7f:c9:9d:d2:3d:f0:66:d6:19:0e:b8:
                    db:95:0e:8a:1a:5b:39:bd:f5:9b:34:41:d5:c9:13:
                    fd:03:b2:b7:44:00:b9:93:9b:2c:81:e2:09:1f:8c:
                    fc:6e:61:8f:81:6d:6a:68:3d:95:47:e1:3d:45:e8:
                    55:76:8c:38:1b:95:2a:e5:78:2e:df:49:e4:3e:ca:
                    56:74:82:1e:23:c5:60:dc:37:5d:a3:1e:da:5b:75:
                    2d:fc:b0:82:72:31:b3:42:90:4c:e2:1d:e5:e6:87:
                    3b:26:e9:aa:20:62:d6:c5:5b:cf:e5:ef:dd:6b:51:
                    ed:9a:79:1b:47:d8:73:aa:00:c2:b2:16:3a:78:6a:
                    e9:2d:6e:52:c4:83:2b:9d:e9:69:bd:a4:29:9a:8e:
                    a5:4a:34:c3:93:e5:a7:c8:45:f8:0b:87:c6:d4:06:
                    19:83:0b:0a:dc:d8:9b:99:ac:10:4e:c9:c8:c4:fb:
                    14:53:66:94:aa:3b:fb:8c:1b:64:7e:9e:fa:4e:57:
                    f3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:73:05:7E:C4:43:6B:BE:E0:9D:7F:6B:B8:7F:80:F5:A8:FC:16:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4fb6734d-4a8b-33c4-8888-d5ddf8038e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:3f20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:4d:62:d8:80:15:77:d7:d6:e1:78:9a:58:1b:18:67:2e:57:
         db:34:42:05:cd:25:c8:6a:a4:a0:d3:f1:b7:8a:4f:2b:ba:d2:
         aa:9f:d6:7f:0b:c1:1d:7a:b6:3a:84:d6:b1:c7:83:60:40:67:
         3a:47:e9:0c:e7:24:65:78:74:66:1f:87:94:1d:e1:88:9f:97:
         30:b9:fa:41:fd:4e:08:58:3f:b3:ff:46:c6:fb:cb:6f:6b:84:
         72:a4:13:2e:84:ba:7e:33:7d:2b:68:c7:55:80:03:f1:02:8d:
         1c:60:88:20:9f:65:8d:12:7d:73:1a:6b:88:c0:e6:cd:5b:48:
         ec:71:18:e0:62:76:a1:fb:54:33:17:fb:d2:1c:33:ed:58:fb:
         b1:d7:e3:c0:a9:4a:ea:12:23:de:29:88:1f:cb:ed:88:99:06:
         0f:e6:68:ba:f4:67:a5:3d:6b:46:e6:44:ff:af:41:51:9f:fd:
         39:79:7b:39:9e:4f:28:d2:42:dd:92:09:0a:0d:1f:27:d7:95:
         6f:83:12:8d:45:40:87:41:14:e0:a8:ed:35:7d:ea:ba:e3:89:
         fd:d2:00:ae:9a:09:5a:a5:f6:19:91:7e:71:f2:9f:4a:c7:9f:
         ba:89:70:91:59:2f:a2:fc:14:01:cf:b5:ba:54:ec:a5:a4:d8:
         ee:81:39:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----