Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/dfadc366-a732-3715-be14-81f3c1f0e863.roa
File:                     dfadc366-a732-3715-be14-81f3c1f0e863.roa (raw, json)
Hash identifier:          MmdZyTcSQpG4obweWlPeSOmW0m/qaT0i3NfHlxWTEoQ=
Subject key identifier:   D1:C0:65:71:9B:F8:45:2A:A4:B8:E3:DD:D2:F5:B0:5E:C5:0B:B7:27
Certificate issuer:       /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial:       010D0C9F4328576D51CC73C042CFC173DF76C885
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/dfadc366-a732-3715-be14-81f3c1f0e863.roa
Signing time:             Tue 11 Aug 2020 21:39:30 +0000
ROA not before:           Mon 22 Jun 2020 04:00:00 +0000
ROA not after:            Mon 14 Nov 2022 05:00:00 +0000
asID:                     55163
IP address blocks:        2620:109:c006::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:df:76:c8:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
        Validity
            Not Before: Jun 22 04:00:00 2020 GMT
            Not After : Nov 14 05:00:00 2022 GMT
        Subject: CN=60ab0ccc-3ba7-41b8-8385-749eefcd5440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7a:b1:32:e3:c4:5e:0a:99:24:37:6a:21:da:
                    10:dc:57:76:fb:f1:a8:c8:a0:76:03:5d:a0:d7:36:
                    16:bc:71:09:4f:c3:11:c8:b5:cf:95:b9:96:d7:a8:
                    73:ac:d0:71:d3:52:a9:07:b5:41:7c:cf:bb:32:6b:
                    4d:9f:f3:8c:58:da:3c:3a:5e:db:79:24:50:b3:e1:
                    a8:b3:2a:d8:6c:7e:c1:71:15:c3:58:36:cc:50:9e:
                    99:69:15:c8:b6:62:2e:04:55:9e:c0:25:4f:b2:0c:
                    0a:75:c9:aa:ed:87:df:47:be:27:14:aa:c9:9d:0a:
                    5c:14:ad:53:f6:d3:fe:13:06:2d:40:14:f6:1b:d3:
                    eb:27:9a:7c:80:19:ed:65:82:80:9c:df:f8:03:02:
                    9b:66:17:72:19:54:3f:c8:67:00:4d:5a:2a:2c:69:
                    4d:78:c1:75:c1:1a:bc:6e:d1:f7:18:31:06:9a:29:
                    f9:14:b5:7f:ed:ff:76:db:c7:d9:89:1e:40:e6:e2:
                    ba:c0:c6:d6:01:39:5a:c0:2d:fc:0a:20:42:83:c1:
                    b7:d9:d2:bd:25:39:84:4c:45:b7:88:ac:da:0d:40:
                    f9:9e:b1:e1:88:4e:0d:02:e1:a4:b4:03:6d:b9:ad:
                    0d:1f:92:fb:17:c8:68:c1:3a:50:13:5a:44:83:cf:
                    39:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C0:65:71:9B:F8:45:2A:A4:B8:E3:DD:D2:F5:B0:5E:C5:0B:B7:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/dfadc366-a732-3715-be14-81f3c1f0e863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl

            X509v3 Authority Key Identifier:
                keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:109:c006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:c1:33:63:25:3e:ff:d9:c0:b8:28:ca:07:a4:4f:7a:86:1f:
         98:34:42:39:21:91:22:bd:5e:e1:d8:83:8e:e7:64:85:63:aa:
         81:a9:1a:af:c8:a9:c9:b6:e0:58:79:51:e3:1e:b3:6f:f1:71:
         51:ec:df:34:63:5a:43:da:34:7c:c9:c0:84:72:bc:bc:f1:46:
         01:44:72:b8:49:53:ce:eb:c4:e6:ef:83:05:45:03:52:86:1c:
         9d:f6:dd:10:f3:43:fe:ba:3d:6e:7d:02:6f:29:60:ef:ad:91:
         cd:55:b7:00:c7:7c:5e:1b:7c:8b:07:a0:8d:90:ee:7f:b8:08:
         d4:ff:5d:f5:af:77:84:74:0f:43:a7:49:a5:b3:a3:03:a0:cd:
         32:d9:d0:9d:65:4d:e0:ea:5f:7b:ab:fc:dd:16:7f:8b:7d:70:
         62:4f:22:d1:c3:a2:55:39:f9:12:2a:f0:ed:53:52:6f:d5:7e:
         f7:1d:b5:3f:78:d8:a8:1a:c6:d8:c6:96:f5:8e:07:f6:5b:bf:
         c8:39:b0:80:73:cf:a5:e8:87:46:41:6a:92:51:5f:af:ee:84:
         fb:2a:63:db:df:8a:ad:65:ad:1c:e9:14:cf:26:65:27:cf:5b:
         e5:1f:e1:3a:c6:51:41:30:e7:30:ca:c2:d1:32:4d:88:cc:94:
         97:72:d5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----