Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/dcf39896-4f5b-3e30-961b-4d90bf188879.roa
File:                     dcf39896-4f5b-3e30-961b-4d90bf188879.roa (raw, json)
Hash identifier:          KbzKcWQQXdtTq12iqv+W34ZCg6v7DglkdqwCQ9/nnDg=
Subject key identifier:   A5:35:F5:72:CB:8E:B5:67:88:CF:8A:A0:86:74:19:4B:59:6B:8C:25
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328576D51CC73C042CFC1734CEDD3A9
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/dcf39896-4f5b-3e30-961b-4d90bf188879.roa
Signing time:             Tue 14 Jul 2020 10:45:21 +0000
ROA not before:           Fri 14 Feb 2020 05:00:00 +0000
ROA not after:            Mon 17 Oct 2022 04:00:00 +0000
asID:                     213073
IP address blocks:        2604:4d40::/36 maxlen: 48
                          2604:4d40:3000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:4c:ed:d3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Feb 14 05:00:00 2020 GMT
            Not After : Oct 17 04:00:00 2022 GMT
        Subject: CN=159cfd47-a225-405f-8d37-8d6b9d3fb3bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:58:9d:4e:d4:b9:c2:7a:92:cf:37:ab:c6:f8:
                    4a:f3:da:87:6b:0f:1b:6c:e9:5f:9f:f4:fa:4d:05:
                    dd:ab:b7:2f:9a:ca:46:c1:7b:38:13:12:f7:01:9f:
                    2d:30:6b:33:b4:0a:34:aa:3c:68:5d:e1:f0:a8:61:
                    dc:98:a2:70:02:d6:b6:b4:f0:0c:37:1b:7f:8e:ae:
                    4b:4d:3e:4d:b8:d2:e0:c7:42:2e:82:60:18:3d:dc:
                    93:da:42:52:0b:6f:6f:cb:92:48:e7:0a:e0:09:9f:
                    2b:e0:5b:78:2d:f1:14:8a:d4:2a:e0:21:96:17:71:
                    98:3d:09:8d:b4:58:f3:ae:06:2b:6a:46:9b:d9:cf:
                    a9:6c:2b:ca:f2:9b:11:8e:71:7d:2a:b2:fb:f6:ba:
                    21:5b:85:e3:bf:97:67:bc:c2:21:16:eb:62:53:ca:
                    dc:ac:d1:08:74:c2:e4:6d:db:d0:b0:3c:76:2d:c6:
                    5b:0e:17:04:0c:e7:a7:ef:b9:70:f7:c7:58:03:2a:
                    cb:c8:91:2b:fc:6f:60:5c:73:c1:8d:09:6d:4c:0f:
                    79:02:22:86:b3:50:a9:18:1a:de:86:43:3c:ce:54:
                    1a:dc:1c:16:36:0c:8c:bb:e3:44:d3:45:1a:af:e1:
                    60:c3:f1:01:c1:e5:e5:00:6b:f4:3f:fa:93:bf:27:
                    67:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:35:F5:72:CB:8E:B5:67:88:CF:8A:A0:86:74:19:4B:59:6B:8C:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/dcf39896-4f5b-3e30-961b-4d90bf188879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4d40::/36
                  2604:4d40:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:08:13:23:98:78:4f:d0:16:31:58:77:89:f7:70:59:be:c0:
         82:ee:6a:48:23:f4:a7:0d:c0:d2:fa:ad:69:89:6e:e0:13:c8:
         7d:dc:99:92:21:3d:51:3c:6f:87:32:fb:d8:ff:f9:9a:32:9b:
         81:99:25:93:84:5e:f2:6e:96:a7:8c:2c:4b:d2:ea:78:9e:32:
         e4:1a:a7:21:1b:8d:bf:9b:13:ca:34:1b:4f:51:cf:95:10:03:
         af:aa:41:e1:7d:e5:36:e4:cf:d3:7e:ed:d6:39:4c:54:ec:ea:
         d9:d5:c8:5a:f1:9a:1b:1f:1c:1c:8a:5b:38:a0:13:56:72:df:
         c0:05:8e:2a:91:3b:16:9f:1f:fa:f3:e7:65:2d:27:28:b6:51:
         a3:b2:2c:e0:a7:d2:10:b1:80:f4:98:f3:fb:6e:1a:70:69:fb:
         42:50:3a:ea:06:04:99:cb:98:07:52:d6:8a:f8:d1:51:b9:86:
         52:74:4e:d0:36:ba:64:4b:55:82:a1:2d:84:11:f5:bd:a8:56:
         11:cf:d0:b9:31:7c:60:b2:93:eb:ec:c5:4b:dd:36:8e:92:19:
         83:87:cf:d0:cb:e1:a4:f8:80:e3:17:26:9f:b3:b0:e9:e7:6d:
         fa:de:45:1b:ef:6a:99:d7:28:f8:73:99:43:2a:84:b5:21:f2:
         e7:34:46:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----