Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/37743939-c6b9-309c-9724-3c9aeae16cf5.roa
File:                     37743939-c6b9-309c-9724-3c9aeae16cf5.roa (raw, json)
Hash identifier:          yVojApSyhwRMlLCaC6vLF8TZSelLtRnxRohsh4gydGc=
Subject key identifier:   A2:C4:7B:1C:06:29:59:44:C1:6B:E5:56:2F:58:AB:85:F5:67:D1:15
Certificate issuer:       /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial:       010D0C9F4328576D51CC73C042CFC172607590DE
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/37743939-c6b9-309c-9724-3c9aeae16cf5.roa
Signing time:             Fri 29 May 2020 12:43:37 +0000
ROA not before:           Fri 15 May 2020 04:00:00 +0000
ROA not after:            Thu 01 Sep 2022 04:00:00 +0000
asID:                     398143
IP address blocks:        2604:cbc0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:60:75:90:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
        Validity
            Not Before: May 15 04:00:00 2020 GMT
            Not After : Sep  1 04:00:00 2022 GMT
        Subject: CN=ef48515c-6740-48c0-a6cf-a28e83866da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:70:a9:68:9f:22:d8:c5:c3:7f:24:71:1c:e6:
                    7f:53:5e:3b:79:46:99:a0:39:af:59:2a:f6:0d:cf:
                    53:81:7c:e7:67:2d:12:55:0d:3f:8a:c4:0d:37:7c:
                    db:b4:ca:6b:cc:1f:67:b9:be:5a:4d:5f:4f:fc:ce:
                    04:fc:ec:b1:5f:d9:87:ec:ac:85:08:56:1a:75:3b:
                    c4:19:f2:eb:a4:f0:f5:99:88:f9:f6:27:8d:99:60:
                    50:97:cf:00:c7:f4:05:bb:9f:b9:9f:5a:57:60:ed:
                    23:90:87:d8:5d:1c:73:66:7b:f2:03:b7:2c:c3:e2:
                    5f:be:cb:5e:1e:20:09:83:1c:01:66:be:98:d2:b4:
                    53:4f:7f:73:c7:19:02:1e:53:05:88:3d:bc:07:35:
                    36:67:0f:b1:e7:f9:aa:57:c4:5d:48:a9:66:bc:8c:
                    bf:47:3b:0d:35:bd:f1:19:b3:8d:05:2a:8e:c3:5d:
                    db:1f:a8:68:5d:9e:fd:fe:0b:7f:fe:8a:d6:f4:32:
                    ab:29:07:a7:bc:9c:bb:61:8a:ef:33:7a:7b:8f:dd:
                    a2:db:53:6e:fa:11:32:40:e0:49:e4:3e:af:61:b7:
                    0d:c6:70:d9:d3:44:22:dc:6d:a4:71:c4:b8:9c:bc:
                    d2:e6:ac:0b:18:54:f8:8a:f4:7c:30:ec:c3:33:e8:
                    46:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C4:7B:1C:06:29:59:44:C1:6B:E5:56:2F:58:AB:85:F5:67:D1:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/37743939-c6b9-309c-9724-3c9aeae16cf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl

            X509v3 Authority Key Identifier:
                keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cbc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:cc:ba:90:b7:cb:ff:b5:e3:54:4b:8b:9a:5b:4d:34:00:73:
         c7:1c:8a:c7:fe:e1:86:16:e9:b0:34:7d:05:ed:5f:52:e6:b6:
         d7:60:b6:17:c2:f6:9a:8f:23:99:24:9d:a7:64:e8:ce:88:cc:
         e1:bf:f0:22:7f:65:36:0e:69:28:22:e2:52:84:15:10:a0:e4:
         fd:b6:d3:33:5f:b8:1f:27:14:a4:f6:e7:38:7a:cc:77:b5:23:
         ed:d6:c5:d3:b5:84:b5:49:19:80:41:be:78:4a:b7:88:87:20:
         ea:75:69:df:09:0b:59:77:de:81:85:a3:d2:eb:82:9a:9c:4c:
         10:2b:00:e8:d7:70:53:39:d3:f5:5f:46:0b:7d:0c:cb:09:5e:
         3a:d7:19:a3:79:0d:a8:4b:ff:70:ca:79:5c:69:8b:23:4a:9d:
         80:86:a3:15:80:6a:b0:5e:7d:96:fc:33:b5:26:42:5b:b6:1f:
         ef:74:de:60:62:ef:db:8a:69:0a:fe:f7:a7:6a:70:25:b6:6e:
         df:5f:6f:b7:6f:b4:8d:de:fc:0a:98:75:9a:f8:30:b4:16:4d:
         23:95:f5:24:b8:31:44:34:2a:bd:28:f5:3b:dc:5a:6d:1f:9a:
         77:00:1f:e2:27:63:2d:90:93:c4:ea:fa:f5:0d:43:23:a3:ba:
         fc:e0:6d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----