Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/6b341431-65bf-33ab-beff-812526a54a24.roa
File:                     6b341431-65bf-33ab-beff-812526a54a24.roa (raw, json)
Hash identifier:          DjtE+A7yG4heXWE/fMgPUmTDB7igutD+MGjne2kmkjg=
Subject key identifier:   F9:79:1C:1E:00:4D:4E:BA:36:8E:85:7D:B0:7B:C7:4D:CE:3E:C3:57
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328576D51CC73C042CFC170565E941E
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/6b341431-65bf-33ab-beff-812526a54a24.roa
Signing time:             Tue 18 Feb 2020 03:36:43 +0000
ROA not before:           Tue 11 Feb 2020 05:00:00 +0000
ROA not after:            Sun 22 May 2022 04:00:00 +0000
asID:                     40568
IP address blocks:        2620:10a:80bc::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:56:5e:94:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Feb 11 05:00:00 2020 GMT
            Not After : May 22 04:00:00 2022 GMT
        Subject: CN=a18f6787-c3a7-46b6-946b-8d994de39995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:2e:8e:c5:0b:1b:c8:27:d3:ac:ab:1f:26:
                    07:a2:4e:78:8d:b8:7e:26:45:88:d0:a4:f7:89:32:
                    68:1f:71:3a:86:c3:56:2a:f9:97:0a:09:8e:e4:9f:
                    69:f8:5f:71:13:b0:b6:18:21:17:3b:a1:29:c9:ca:
                    a5:d2:f2:b3:5e:b7:86:27:c4:9f:34:1e:b8:16:2b:
                    0d:05:a6:47:f7:63:76:3a:b6:c3:4a:cd:ed:fa:88:
                    7e:8a:8a:8a:b8:49:6e:51:f4:d9:ba:7b:fd:a5:f9:
                    26:8b:90:71:aa:46:c3:c3:86:f0:3f:fa:4d:72:30:
                    37:4a:64:a6:48:80:4b:ad:0e:a6:85:96:93:07:98:
                    bc:4b:ef:a1:b9:3c:f5:89:4f:10:98:20:b9:17:74:
                    54:b4:ad:02:d8:28:b6:01:46:cb:73:79:c9:af:1b:
                    08:e5:6c:4d:ba:c7:1e:d8:1c:b3:58:71:df:db:d9:
                    13:cd:8e:4c:72:6b:74:df:4e:52:89:02:40:b3:b9:
                    0c:e9:11:84:ef:ef:f3:81:de:43:a9:97:4b:cd:7e:
                    a8:71:c2:fb:0a:63:36:0c:90:d9:2a:04:4b:2b:b5:
                    c8:90:61:cc:16:e9:ee:b7:49:42:d5:3a:4d:2e:a6:
                    d3:c0:79:3d:c8:08:6e:db:1e:07:3d:ae:ab:27:9e:
                    6d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:79:1C:1E:00:4D:4E:BA:36:8E:85:7D:B0:7B:C7:4D:CE:3E:C3:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/6b341431-65bf-33ab-beff-812526a54a24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:80bc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:1c:5d:b4:a2:36:c1:29:29:1d:00:08:fb:c4:7e:9a:87:cd:
         06:58:ad:2f:9c:2e:8d:c1:79:b3:94:d0:44:f7:c0:26:dd:71:
         c6:ea:b3:d2:e2:31:27:ce:d0:03:b5:d5:55:9c:16:96:b1:d4:
         dc:88:04:de:c2:da:eb:57:13:65:df:9b:0d:4d:e9:75:42:44:
         30:f1:16:f7:6b:4d:a7:e8:b5:93:6a:0b:a7:fa:5c:22:c0:0c:
         60:c1:f5:eb:71:c1:e1:7e:b1:1e:fc:a8:4b:e8:7d:52:87:ea:
         5a:99:69:08:b1:94:bb:cf:c5:fc:08:13:0e:b9:84:f5:e0:2a:
         7d:f6:91:c0:58:bc:9f:e1:92:2c:e8:2c:55:d0:14:31:4b:c7:
         75:f4:46:b7:3b:93:69:7b:c9:0a:32:b2:53:3d:60:be:cb:f3:
         d3:dd:14:9c:ea:36:19:46:ee:e2:d7:b3:1b:eb:55:7b:c6:29:
         7b:cd:c0:b2:85:2b:dc:cc:b3:b7:20:fb:78:c3:7b:17:6b:da:
         3f:b7:06:5f:b9:b8:33:56:0a:c9:af:5c:ae:57:36:83:42:b8:
         03:d4:90:6d:f6:33:73:a7:a3:76:52:27:03:2f:10:d6:9c:73:
         53:ec:ab:ca:6a:51:8f:4d:58:d6:af:eb:1e:ef:e4:3d:30:a4:
         6a:21:78:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----