Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/68d8439d-16ca-36ba-8c5c-0b906eda009c.roa
File:                     68d8439d-16ca-36ba-8c5c-0b906eda009c.roa (raw, json)
Hash identifier:          Xk3szR8DuI2SYSorUvq/vLJ6Vw9+kQkIgsmqq1Md3bo=
Subject key identifier:   C5:D5:04:00:B3:5E:61:0F:19:A4:ED:3F:C6:92:AF:C7:6D:61:A4:FF
Certificate issuer:       /CN=84071564-b087-4d9c-88d0-6fa5a30617a3
Certificate serial:       010D0C9F4328576D51CC73C042CFC1719CE44E9A
Authority key identifier: 83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/68d8439d-16ca-36ba-8c5c-0b906eda009c.roa
Signing time:             Tue 21 Apr 2020 13:19:00 +0000
ROA not before:           Tue 21 Apr 2020 04:00:00 +0000
ROA not after:            Mon 25 Jul 2022 04:00:00 +0000
asID:                     16717
IP address blocks:        2607:d580::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:9c:e4:4e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84071564-b087-4d9c-88d0-6fa5a30617a3
        Validity
            Not Before: Apr 21 04:00:00 2020 GMT
            Not After : Jul 25 04:00:00 2022 GMT
        Subject: CN=c9d3ec4c-bad5-41ac-9e55-c1944ab1033b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:e7:4f:9e:d3:a0:21:46:5e:43:13:33:d9:1a:
                    46:3e:a3:5d:5c:0c:21:bd:c0:c5:c0:a8:29:6a:9c:
                    df:09:27:12:e7:dc:b8:1f:05:34:be:ad:6d:40:e6:
                    76:6e:cc:a0:e0:98:3a:b1:3a:26:f1:a7:66:c8:cc:
                    6b:3f:be:16:d4:76:17:fb:97:ed:81:de:a0:c7:d8:
                    90:d4:4d:ec:4c:b6:df:71:88:ea:68:49:b3:ae:ae:
                    72:0a:82:59:0c:16:c8:05:d2:99:96:74:38:33:d6:
                    a3:3f:26:fe:e5:26:d9:51:88:d3:48:cd:2e:b3:1c:
                    ba:4c:d8:58:57:19:05:9d:78:f4:c7:32:2c:a8:eb:
                    ce:66:9c:22:9e:73:eb:4a:cb:30:0a:56:0c:14:2a:
                    20:92:02:77:a8:75:e9:90:da:59:b3:8c:28:68:df:
                    33:28:59:af:9c:4b:fa:62:78:c6:c6:5b:f6:fb:77:
                    52:1c:d0:96:f5:c6:ca:0e:05:0d:04:09:7c:1a:7b:
                    d5:64:36:09:d3:0c:0d:60:4e:6e:79:66:36:9e:b5:
                    ab:15:46:3c:16:3a:30:c0:61:f8:2b:63:79:77:53:
                    18:b6:50:a1:f0:b7:99:0c:38:7e:8b:ab:a8:aa:90:
                    51:35:92:d1:bf:49:d1:5e:3d:4d:61:f2:d4:b9:08:
                    da:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D5:04:00:B3:5E:61:0F:19:A4:ED:3F:C6:92:AF:C7:6D:61:A4:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/68d8439d-16ca-36ba-8c5c-0b906eda009c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.crl

            X509v3 Authority Key Identifier:
                keyid:83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:33:28:6a:65:ed:d9:d3:e5:6d:a3:42:97:4f:48:38:3e:4f:
         ec:46:bd:91:42:da:8f:c7:e4:b6:41:be:c8:76:89:0b:8a:84:
         b6:36:49:e1:ec:1c:68:3d:3f:0a:90:c2:55:83:20:c6:75:44:
         6f:c9:b9:01:f1:68:53:92:74:c9:fe:62:15:42:e2:bf:0c:15:
         76:48:26:82:bc:59:9f:b7:bc:78:5b:af:3a:b5:d8:ef:af:ad:
         93:26:9c:f0:59:6b:2a:ae:10:6b:f8:f7:70:f5:51:5b:31:53:
         2f:6f:b6:da:64:28:cb:1a:eb:4c:ff:ef:da:87:98:b2:15:19:
         21:cc:35:aa:fc:0d:96:94:69:dc:a3:e9:0a:6d:38:a3:16:11:
         e1:bf:f2:64:e1:48:95:3a:d6:e5:7a:f4:64:05:81:95:29:6d:
         c0:05:43:19:b7:12:1e:52:43:24:41:91:de:7d:73:d4:3d:2f:
         07:7c:36:4a:9b:d4:6c:60:46:1a:73:55:c9:bb:92:cc:21:38:
         4a:c5:ac:d0:6a:8e:7b:ef:a3:ee:e0:64:5d:f7:0e:26:14:81:
         b0:74:98:4d:dd:3c:7a:d0:cf:1a:21:80:aa:f0:0b:89:1a:c1:
         1e:7e:d6:2a:4f:50:f2:e1:b2:f1:5f:9b:74:ef:84:e5:d1:8c:
         65:17:24:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----