Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/dc13d200-a969-336c-b5e6-45862600d648.roa
File:                     dc13d200-a969-336c-b5e6-45862600d648.roa (raw, json)
Hash identifier:          HojySlih3TF//VvwCSacxdBgFZXcLOe6n7xP9h/g818=
Subject key identifier:   8D:ED:3B:E3:13:E0:BB:7D:40:BE:22:16:50:41:93:B3:DC:E4:BF:D3
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328576D51CC73C042CFC173529857CB
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/dc13d200-a969-336c-b5e6-45862600d648.roa
Signing time:             Wed 15 Jul 2020 13:09:42 +0000
ROA not before:           Fri 14 Feb 2020 05:00:00 +0000
ROA not after:            Tue 18 Oct 2022 04:00:00 +0000
asID:                     53667
IP address blocks:        2604:4d40:2000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:52:98:57:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Feb 14 05:00:00 2020 GMT
            Not After : Oct 18 04:00:00 2022 GMT
        Subject: CN=47669fba-a1b5-4342-b5a8-53994a1fe7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e3:38:26:8e:1c:2b:b0:53:59:6e:c3:48:79:
                    60:63:29:bd:43:b7:8b:61:8b:41:c4:38:f3:77:3e:
                    99:52:d4:ba:5c:57:fc:36:95:70:c1:03:21:47:61:
                    87:38:c1:52:89:72:44:b6:57:13:a3:74:9b:1d:7c:
                    62:be:f4:29:df:3e:58:34:a4:ed:2c:55:44:ef:26:
                    e5:a6:c6:3c:ea:71:ab:50:d8:e2:4f:54:2a:ae:eb:
                    a8:81:15:11:8f:b6:ee:ce:65:3f:cf:ab:20:fb:00:
                    b4:ce:22:ff:0b:3b:e1:fe:e3:82:98:d3:aa:87:ab:
                    74:5d:9a:bc:51:d0:eb:d9:3f:a6:df:54:61:dc:ca:
                    83:ea:0b:86:55:eb:d8:75:f7:db:02:e7:a9:a4:26:
                    61:e7:de:12:aa:02:0a:ec:d0:a5:08:ef:82:df:ba:
                    a2:ce:76:8d:8e:9a:f6:88:4d:25:7a:a0:0a:84:fd:
                    6c:0f:09:53:c1:06:bf:4f:e6:ab:b2:68:3b:40:a7:
                    bd:1e:ce:50:38:28:da:0a:06:04:0f:b0:eb:d4:65:
                    3a:8b:7f:46:a9:61:d8:1c:a6:07:35:91:d9:5b:52:
                    40:4d:7c:e3:44:d6:a6:db:01:b6:0c:79:c1:a4:d8:
                    d7:8e:f3:5f:f2:6c:68:78:88:40:fd:06:47:b2:38:
                    d2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:ED:3B:E3:13:E0:BB:7D:40:BE:22:16:50:41:93:B3:DC:E4:BF:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/dc13d200-a969-336c-b5e6-45862600d648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4d40:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:2a:a6:a2:0f:e0:c0:49:35:05:67:c0:60:1c:4a:fc:cd:8a:
         f3:35:32:76:0a:c4:14:d4:67:30:e8:05:34:c6:10:4f:e0:d9:
         a4:ce:6f:22:1e:b8:83:19:8e:89:78:01:ef:7b:f0:5f:22:3a:
         98:49:c2:2a:af:b8:47:8f:29:f8:a5:46:41:d8:75:20:07:02:
         5a:cc:9e:57:ab:d7:66:90:1b:77:a1:7b:15:e6:23:90:6d:4e:
         e0:21:d0:9f:a4:95:41:6e:86:57:a8:ef:50:18:bb:95:a4:37:
         a5:89:f6:17:a2:96:3c:b2:3e:f3:16:28:ab:34:ed:23:84:e4:
         61:07:f2:04:fb:e1:4c:ad:42:47:cc:df:d0:a1:89:cd:c6:4f:
         54:41:3c:61:42:9d:c2:c6:94:3b:6e:7c:aa:30:df:6f:49:d9:
         ce:36:e6:63:96:93:2a:a9:ca:46:f6:50:7a:34:89:4a:4a:7e:
         ee:bd:ff:0c:24:f8:35:d0:12:f6:85:87:ca:97:d0:de:40:5e:
         f6:68:22:31:cc:27:24:b6:bb:fc:9f:e1:97:45:d5:b9:07:9a:
         6c:5a:e4:57:e2:d0:6c:05:81:25:73:8b:71:99:5b:05:10:09:
         4b:39:a8:b6:e6:04:4e:d6:79:18:a9:19:7b:c5:b4:2d:53:78:
         98:9f:d1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----