Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/a341b509-edba-3eb6-b5a8-7d79bb86e009.roa
File:                     a341b509-edba-3eb6-b5a8-7d79bb86e009.roa (raw, json)
Hash identifier:          S4oLhDvaG3d2kF8qRhMCDMaRDIOdp4NvNwT/vJ5JgN8=
Subject key identifier:   77:0B:0C:4E:3A:52:D7:1D:7D:93:0F:95:DD:6C:93:71:B0:67:81:BF
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328583A5792332FDF3DF756488E9F00
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/a341b509-edba-3eb6-b5a8-7d79bb86e009.roa
Signing time:             Tue 22 Jun 2021 04:00:00 +0000
ROA not before:           Tue 22 Jun 2021 04:00:00 +0000
ROA not after:            Wed 22 Jun 2022 04:00:00 +0000
asID:                     36692
IP address blocks:        2620:119:10::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:57:92:33:2f:df:3d:f7:56:48:8e:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jun 22 04:00:00 2021 GMT
            Not After : Jun 22 04:00:00 2022 GMT
        Subject: CN=362a1be3-fd5b-4fa0-b2ed-db9a6851443b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ec:13:72:6a:61:0c:f2:07:6c:b8:89:bd:92:
                    1e:fd:e5:21:f2:98:99:34:96:c0:f9:2e:30:8a:c3:
                    85:14:72:e1:f6:cd:9f:40:d1:0f:0e:f9:17:38:91:
                    23:c5:1a:f3:6e:6a:dd:18:67:63:59:32:5e:e7:64:
                    a6:a2:34:d5:83:a9:78:e0:42:dc:72:ec:87:48:06:
                    82:71:bb:69:f1:d4:5a:cc:88:b1:9f:83:9b:eb:63:
                    c5:cc:88:05:70:f6:03:28:b6:72:52:8d:2c:a9:92:
                    da:ec:53:79:2d:22:88:75:ae:de:94:d6:89:3a:57:
                    3f:2d:7f:b0:96:b3:dc:ef:e0:e9:9d:26:be:40:d3:
                    12:f5:9c:7e:ce:c6:a0:1a:73:e1:3b:16:42:83:32:
                    74:3f:5d:58:47:74:03:e0:3b:a9:bc:c0:58:02:8d:
                    e2:bc:8d:e2:40:60:18:af:fe:d4:28:0e:47:b4:06:
                    4c:42:e5:94:18:f8:05:b8:5a:cf:c7:24:f1:c9:78:
                    46:14:6c:5a:f0:b3:6a:70:f2:9c:59:d2:2a:67:d7:
                    d1:6f:b7:86:95:6c:d3:85:5d:d2:58:e4:d3:53:09:
                    99:ac:22:a2:56:78:4e:8c:ec:f0:b8:51:d3:d0:99:
                    aa:9a:2b:a0:38:09:9e:08:70:35:04:77:8c:74:9c:
                    c4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0B:0C:4E:3A:52:D7:1D:7D:93:0F:95:DD:6C:93:71:B0:67:81:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/a341b509-edba-3eb6-b5a8-7d79bb86e009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:119:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:9a:93:8d:61:ce:ee:b7:06:74:31:d0:93:34:f2:1d:34:12:
         34:93:f6:bd:ec:78:3c:92:ec:c2:76:a2:9a:d4:50:9f:eb:c5:
         2d:e4:66:2f:fa:5a:bd:18:37:c4:13:23:8e:9f:2a:b3:be:35:
         dd:f8:ba:71:82:e3:9c:67:a7:ce:99:ff:3f:b5:f4:b4:2f:ad:
         19:69:d4:94:09:14:da:ea:a0:9a:57:ce:ed:79:0c:b4:11:08:
         ac:86:d8:bb:e6:f3:17:18:f0:0d:bd:3d:50:84:9a:29:f1:ee:
         1e:82:c9:65:19:65:e1:b7:3a:fb:0a:a0:66:8a:ed:1a:fb:e8:
         73:e7:89:c2:02:9b:60:49:48:9f:96:f3:ef:1c:9c:98:73:5d:
         31:11:32:ba:a3:72:41:61:5e:9f:d1:08:3f:45:bb:26:a9:21:
         77:01:bd:53:7c:42:8a:58:a2:1e:5b:93:4d:55:dc:a7:74:24:
         34:6d:b7:40:98:dd:0a:61:b6:15:4f:b7:46:78:05:21:22:02:
         78:20:df:47:ec:f6:b6:14:df:e0:44:b6:94:ef:4e:c9:40:31:
         da:19:36:cc:5b:8c:6d:ee:80:79:f9:26:9a:e0:7e:1b:bf:f8:
         c6:2f:c1:15:2f:90:31:56:5a:6c:39:1b:0b:c5:de:de:e9:8c:
         5c:c6:3e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----