Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/44dba3bd-dd13-3321-81d2-f2f030762f9b.roa
File:                     44dba3bd-dd13-3321-81d2-f2f030762f9b.roa (raw, json)
Hash identifier:          niIoJzZlbOBAV5zVZLeVmYuBgwdKHtyXZdgtWGgfrqo=
Subject key identifier:   27:86:C0:6F:B8:8F:78:38:6E:9C:8A:1F:8E:AA:15:49:E6:82:54:64
Certificate issuer:       /CN=8f27c934-ebc6-44a4-bba0-a03cc465334b
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732A0540F7
Authority key identifier: E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/44dba3bd-dd13-3321-81d2-f2f030762f9b.roa
Signing time:             Tue 07 Jul 2020 16:04:14 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Mon 10 Oct 2022 04:00:00 +0000
asID:                     14333
IP address blocks:        2602:ff99::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2a:05:40:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f27c934-ebc6-44a4-bba0-a03cc465334b
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Oct 10 04:00:00 2022 GMT
        Subject: CN=2c1c8927-bdce-4bbb-a6e1-e695ca572e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:10:c0:08:46:6b:8c:a9:8b:67:18:13:b7:2a:
                    8d:f3:85:aa:33:9a:44:70:ad:1f:ef:58:5b:3a:fe:
                    29:51:57:b1:58:ee:04:77:2e:5c:c5:d9:52:f8:1e:
                    95:a4:6a:a8:74:b8:66:16:45:87:f2:c8:5e:ae:f0:
                    80:ee:b3:50:48:b2:96:7d:c3:b5:4f:2b:0c:fa:54:
                    f9:6f:2f:bf:03:ed:01:4f:f9:50:1f:73:06:ad:22:
                    11:47:b6:53:0a:fa:dd:dc:e9:6d:52:ec:01:31:dd:
                    6c:85:69:e8:f5:4e:eb:c2:e7:4a:8e:69:95:f6:68:
                    e5:42:16:88:33:60:e4:3a:26:1b:ff:0d:24:d5:49:
                    88:d1:9d:fd:08:d1:f0:05:41:b4:e5:a9:50:51:3a:
                    a0:5e:57:64:db:2e:7d:0f:56:2a:52:ef:26:15:fd:
                    e4:25:64:ea:02:7c:dd:b7:de:4d:68:61:88:40:8e:
                    cf:4b:73:b1:f0:bf:61:1f:53:c1:44:98:36:56:b3:
                    d3:b8:e4:3f:88:f5:26:a6:24:85:ca:16:ba:77:b8:
                    03:20:ae:4f:6c:30:4a:4c:87:66:2a:a7:cb:2b:17:
                    51:4d:84:a3:00:2b:b9:d3:4c:ac:fb:3d:7f:52:06:
                    92:1b:de:ba:d1:57:0c:c0:1a:e6:bb:cb:83:c6:b9:
                    f0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:86:C0:6F:B8:8F:78:38:6E:9C:8A:1F:8E:AA:15:49:E6:82:54:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/44dba3bd-dd13-3321-81d2-f2f030762f9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl

            X509v3 Authority Key Identifier:
                keyid:E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff99::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:3f:11:55:0b:15:b5:ef:9b:fe:ea:57:4c:c8:63:8d:3d:ff:
         01:8f:e8:e2:94:01:97:ce:ad:c2:b9:36:1b:72:35:eb:6f:54:
         17:c9:5b:a5:b6:9b:9e:17:cf:b6:c2:df:79:e4:50:f1:cd:df:
         5d:27:32:71:d7:05:f9:94:8c:15:c5:74:13:ac:13:55:8d:9a:
         61:ec:51:81:68:cc:fc:8c:3b:ed:fa:60:50:57:af:b3:a3:95:
         fc:7e:ae:bf:16:56:ea:4b:c2:97:de:6f:5b:ca:82:16:b1:09:
         4d:72:f4:f6:90:3f:e5:52:6b:21:5e:7e:5d:c2:f5:13:0c:ca:
         70:df:05:82:56:9c:29:dc:48:97:45:6f:71:53:46:1a:45:ce:
         98:f7:4d:5b:63:43:ad:d0:34:f8:66:de:8d:20:ca:d6:d8:3d:
         e8:20:42:64:be:96:d5:56:cb:b6:0b:34:77:ed:d8:10:43:74:
         76:c8:17:5d:a0:4a:27:ed:c9:5f:a2:f0:41:9b:f2:0c:99:31:
         e9:91:b6:8c:14:7d:14:4a:3b:33:cd:0a:5f:78:b0:a7:21:f0:
         d5:ba:c2:4b:8f:7c:72:d0:c4:b3:c6:76:c7:82:39:c4:92:fa:
         e9:8c:a3:a7:2d:ee:89:3e:69:2c:a4:50:9d:4d:38:b7:19:a4:
         df:a5:8a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----