Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ea576e64-769f-3665-aa64-bb7dbd5c749d.roa
File:                     ea576e64-769f-3665-aa64-bb7dbd5c749d.roa (raw, json)
Hash identifier:          5zK/MSGzVUWs29ywg+Jr47ZHyRUkYjYSVDo9nxgvlGY=
Subject key identifier:   B8:AD:E8:83:60:1B:FA:C1:C6:8E:F1:6C:52:45:E1:F3:5F:16:92:70
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D41EC7A46F696072180E3200
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ea576e64-769f-3665-aa64-bb7dbd5c749d.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Mon 06 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        2001:56b:e000::/35 maxlen: 35

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d4:1e:c7:a4:6f:69:60:72:18:0e:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  6 05:00:00 2023 GMT
        Subject: CN=3333d6fa-15e8-4883-a200-57b91f940ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0c:a1:bf:64:99:be:22:4f:88:14:b9:ea:ae:
                    4c:17:b2:fe:af:b4:09:d0:39:29:ee:f7:3c:77:7e:
                    54:53:25:32:ca:d3:37:7d:7f:bf:e7:1f:1e:39:34:
                    2f:98:b0:97:25:3a:d2:73:63:0a:7a:0b:7a:e6:44:
                    9f:cb:01:3f:b8:4f:97:73:f7:ec:90:90:66:07:4d:
                    f0:5f:a8:b4:01:33:d2:96:20:e7:22:4f:b9:ea:4f:
                    62:8d:c4:30:82:55:88:e4:e0:ff:9d:d3:ae:24:37:
                    d3:a6:9b:1a:3d:01:f4:8e:08:60:ee:27:6d:35:bc:
                    e2:04:62:da:80:2f:72:b1:c6:e0:aa:f2:65:9b:b7:
                    35:57:88:83:87:2b:2a:b7:d4:09:cf:db:d5:98:af:
                    f4:75:ea:e4:fe:e4:4e:97:e9:96:c4:3e:11:87:f3:
                    50:48:7e:32:16:bc:a5:c4:2d:52:79:d9:e8:56:d2:
                    12:fe:1c:f0:5f:73:0d:01:de:5d:66:19:7d:26:b6:
                    22:49:f1:02:31:32:92:9b:ee:e7:b3:3c:80:01:0b:
                    8c:17:9a:5b:d5:0e:09:48:15:88:b3:02:a7:c2:a3:
                    ab:b8:5c:b3:5c:fa:ed:87:49:de:96:ba:80:2b:02:
                    6c:cb:bb:df:43:73:55:9a:41:75:d6:51:89:4d:02:
                    20:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AD:E8:83:60:1B:FA:C1:C6:8E:F1:6C:52:45:E1:F3:5F:16:92:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ea576e64-769f-3665-aa64-bb7dbd5c749d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:e000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:d7:9f:d2:e0:c9:16:9d:86:70:bc:44:e5:c2:41:61:35:c3:
         4f:c1:a5:b8:0a:7f:96:a8:8d:71:fd:96:9b:bc:35:53:90:9a:
         58:91:9a:b4:f2:d4:4e:78:a0:8a:f7:85:15:0f:8a:48:33:ab:
         f8:c1:c1:f2:cd:05:90:0d:fb:75:33:45:24:f4:a4:ae:88:f5:
         47:e3:48:d6:96:44:6f:fc:25:7f:37:a0:c4:d9:ce:10:a4:66:
         1c:ab:d5:0b:40:b5:07:0b:ee:88:2a:b2:43:51:be:aa:89:26:
         ce:f0:4a:e5:ba:2b:a9:df:3b:77:b9:9f:01:32:10:7d:64:0e:
         c7:f2:95:fd:7a:fd:8e:a3:bc:5f:be:ce:33:e1:88:28:7b:56:
         db:58:24:5a:d1:de:b8:c1:db:b2:d5:61:01:60:e6:c5:86:c9:
         27:8d:71:f2:b1:67:38:c2:5a:c0:62:2c:12:52:c4:19:86:1f:
         2c:fe:fc:8c:9f:f3:28:16:bf:62:e5:7a:0d:f9:32:1d:86:8a:
         09:1d:08:d5:0a:d8:ed:06:9e:02:ea:44:d7:04:47:83:ce:bf:
         b3:0b:db:6b:c4:41:09:93:74:3b:c7:c6:3d:d4:ed:14:58:9a:
         6d:f3:3b:40:61:9b:a0:5c:bd:4a:11:13:8a:8e:cc:53:e9:f0:
         eb:4d:de:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----