Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/4d307b84-6ad1-3010-a87d-f88f1db1c318.roa
File:                     4d307b84-6ad1-3010-a87d-f88f1db1c318.roa (raw, json)
Hash identifier:          Gqiyeyzon5cAili1wk5kQovlp2ohW3OTJ2CDLf4NxpA=
Subject key identifier:   86:2C:00:6B:BB:99:89:C1:0B:FC:25:B3:CE:09:13:38:34:E2:F4:C6
Certificate issuer:       /CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7
Certificate serial:       010D0C9F4328576D51CC73C042CFC1739B59A263
Authority key identifier: 5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/4d307b84-6ad1-3010-a87d-f88f1db1c318.roa
Signing time:             Wed 29 Jul 2020 16:13:29 +0000
ROA not before:           Wed 29 Jul 2020 04:00:00 +0000
ROA not after:            Thu 28 Jul 2022 04:00:00 +0000
asID:                     398325
IP address blocks:        2605:e040::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:9b:59:a2:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7
        Validity
            Not Before: Jul 29 04:00:00 2020 GMT
            Not After : Jul 28 04:00:00 2022 GMT
        Subject: CN=206ce9b2-82f1-434e-98cb-dbd9272a21a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c5:c3:b7:32:1c:cd:14:f2:2c:03:b2:be:5e:
                    5f:34:31:03:ae:fc:81:3e:cb:2d:ab:2d:4a:a4:6d:
                    17:ab:3b:59:a7:ac:aa:47:63:ff:4b:5e:0d:b6:e0:
                    89:7f:65:66:52:21:49:4e:38:72:b6:5a:a3:19:61:
                    83:d7:2b:a6:a0:16:bc:10:27:8e:e3:27:8c:59:56:
                    05:89:e8:0e:fe:5a:27:94:1f:2c:ec:9b:4c:66:b6:
                    62:c5:a1:01:1c:2b:4f:49:16:e2:7d:18:35:53:c2:
                    23:65:91:a1:54:24:1b:df:de:a3:ba:ff:4a:41:76:
                    ed:58:57:bc:c1:f9:45:e8:e7:d3:84:9c:5f:61:30:
                    ba:67:be:91:89:12:03:0a:a8:55:2d:bf:50:d4:d1:
                    46:83:10:a3:5b:e2:e4:22:9f:8a:13:57:81:1a:92:
                    41:dd:4c:c9:ce:82:d7:b2:8b:73:82:ca:ee:78:61:
                    9d:c9:ee:5a:f3:d9:6c:04:3a:7e:85:a0:2d:30:b3:
                    b0:4f:a1:57:7f:63:98:20:99:60:7e:cd:ff:04:7e:
                    a2:f9:89:1e:06:e7:81:7b:6b:bd:af:b0:e1:13:f0:
                    ca:a1:23:1c:95:fb:1c:a1:1d:53:9c:d8:b7:3b:f0:
                    26:a8:bc:0c:52:5d:82:6e:07:48:8a:cc:25:b7:e1:
                    1b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2C:00:6B:BB:99:89:C1:0B:FC:25:B3:CE:09:13:38:34:E2:F4:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/4d307b84-6ad1-3010-a87d-f88f1db1c318.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl

            X509v3 Authority Key Identifier:
                keyid:5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:13:e0:4d:88:50:34:d5:88:d7:1f:fa:05:e0:07:5e:c7:cf:
         6e:4b:8d:53:18:7d:73:d7:b5:2c:ba:ea:67:4d:98:4e:86:9a:
         0a:9b:67:e2:57:c1:71:5d:bf:11:e4:9d:9c:4d:10:5c:ad:b0:
         ba:9a:7d:5d:ed:25:38:ae:53:d0:cb:45:46:16:0c:24:b6:57:
         1b:e5:34:c2:57:d4:98:93:cd:c6:d6:d0:3f:8b:7e:fb:66:12:
         9b:f6:b9:3e:f9:61:6f:56:49:6a:99:b3:21:bc:d4:5b:fa:48:
         56:ed:f7:2c:e6:aa:b4:3b:0b:b6:65:a0:a8:cb:70:8a:75:62:
         f6:98:76:fe:8a:82:98:a1:9d:75:16:bc:bf:df:6c:65:19:82:
         1a:02:80:a1:a3:8b:b5:54:0e:b4:80:c6:56:88:fc:12:56:85:
         7a:17:d2:84:9e:ee:b1:6d:03:2a:93:7f:02:6d:51:57:57:6f:
         23:98:81:26:45:d4:20:d1:30:e8:29:7b:f7:3c:f1:a5:b5:45:
         30:c8:09:c3:1b:b5:c5:e6:ab:a7:71:08:39:74:61:cf:63:d6:
         16:2c:60:14:a8:4b:0d:99:57:79:66:10:58:48:b8:12:6c:f2:
         e6:a1:6f:1c:db:07:cc:a0:ec:df:2a:52:a6:27:d6:f9:33:1d:
         e5:15:17:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----