Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/beaec999-29bf-3596-baef-ea53b9739ce7.roa
File:                     beaec999-29bf-3596-baef-ea53b9739ce7.roa (raw, json)
Hash identifier:          HGGVfQKGK4CMl0d0Opmrof4JE6oK0t/37j6UMjfVrf8=
Subject key identifier:   3E:59:79:23:B4:7C:21:88:C8:79:9B:0F:16:7D:26:D6:D1:8E:7B:3B
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D417F4A163E501BAF209DFC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/beaec999-29bf-3596-baef-ea53b9739ce7.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Mon 06 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        2001:56b:9f60::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d4:17:f4:a1:63:e5:01:ba:f2:09:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  6 05:00:00 2023 GMT
        Subject: CN=5389a1c4-87d2-4804-a3ee-6799472e20c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:67:48:23:e6:5e:25:fe:96:61:df:03:a5:0d:
                    62:0e:5b:ca:f8:05:56:bc:a1:da:e8:2e:82:ad:85:
                    88:bd:19:1d:d0:b1:ba:71:12:bc:9d:f1:e2:f8:46:
                    a9:12:77:50:13:70:db:87:88:0b:ad:a2:bf:57:9d:
                    14:3a:ea:f2:18:00:72:1f:f8:a9:ed:55:6a:c7:1f:
                    cf:a2:8d:8a:9b:60:22:a8:31:77:04:c3:d9:32:18:
                    01:51:e4:19:fd:7f:20:ea:e1:b2:94:60:ef:fc:36:
                    0a:2d:95:6b:83:72:d4:2a:13:9f:40:07:4f:48:da:
                    f7:03:d1:a2:d2:69:a4:0a:41:e2:9f:7b:28:2a:0a:
                    83:51:63:cd:ee:b2:2b:80:ff:26:7f:ad:5f:ce:6f:
                    80:c7:bc:ee:f7:07:c4:67:db:86:1d:89:cb:0c:ba:
                    c8:25:16:25:d4:9c:ec:6a:a7:78:16:0b:58:f7:27:
                    aa:d7:e2:99:aa:c6:22:05:f8:ff:ea:65:cd:f3:28:
                    dd:15:93:cf:c1:b5:f8:81:f8:18:d6:a5:32:c0:5c:
                    71:6c:31:69:d3:5f:23:a6:7b:bd:36:98:5a:03:5a:
                    ee:6c:6f:14:6a:f7:d0:ae:3c:b7:71:1a:f3:3a:17:
                    3f:7e:96:f1:5f:52:a9:e6:85:df:c9:01:22:16:41:
                    f7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:59:79:23:B4:7C:21:88:C8:79:9B:0F:16:7D:26:D6:D1:8E:7B:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/beaec999-29bf-3596-baef-ea53b9739ce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:9f60::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:c4:4e:26:a1:eb:a8:76:a8:c4:01:eb:99:c4:38:ce:14:15:
         d2:42:75:f5:37:2a:6f:57:25:ea:57:4f:21:c5:93:2d:83:68:
         af:27:62:60:4b:63:9f:c4:c5:cc:ab:6d:47:1d:53:ad:e4:b4:
         cd:6d:ac:b4:8d:64:ce:ce:eb:b6:1e:77:c8:62:e4:54:f9:fb:
         74:96:9c:cc:8c:0c:1c:b5:3c:a6:30:6c:35:40:00:e2:cf:11:
         e7:65:d6:05:f4:92:05:d1:74:41:15:2f:51:44:a1:b9:49:c3:
         86:e7:30:f9:3e:cc:23:65:7b:29:84:7b:dc:b3:ac:49:3b:20:
         48:1c:3e:9a:f8:cb:aa:8c:0d:76:f0:d7:3d:c0:68:7b:93:b5:
         a4:dc:cd:14:d0:c0:37:97:b8:12:2c:3e:9f:da:a2:ec:29:46:
         e2:2b:26:3a:f0:25:09:c0:fe:7d:69:79:2f:e4:63:3e:37:d8:
         15:4b:91:ea:66:02:d6:22:75:68:98:f5:38:7b:a3:65:74:05:
         17:d3:73:3f:80:8e:8d:af:69:98:1a:98:8c:41:4f:6c:46:ac:
         07:29:28:22:b1:ba:fc:45:43:d7:03:83:59:0f:a8:d3:3b:14:
         55:dd:f2:e7:4a:b7:6b:7c:07:1d:f1:51:1f:c4:22:d9:e2:09:
         d0:82:0a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----