Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a608dbfe-af80-486b-9ebb-bee14610b2b8/40496f89-51f8-391f-9694-afc1a5c44bce.roa
File:                     40496f89-51f8-391f-9694-afc1a5c44bce.roa (raw, json)
Hash identifier:          eFNXqGb181FgcViPo+fm46tUupwt/JaSShICsDRtsUA=
Subject key identifier:   EB:FD:E4:43:38:51:51:44:C9:37:40:8A:37:41:CE:23:28:4B:B8:68
Certificate issuer:       /CN=a608dbfe-af80-486b-9ebb-bee14610b2b8
Certificate serial:       010D0C9F4328576D51CC73C042CFC172C82D0B4E
Authority key identifier: D1:55:23:3D:12:A3:4A:36:AC:E5:88:87:EC:DD:CB:7A:A0:C6:69:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a608dbfe-af80-486b-9ebb-bee14610b2b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a608dbfe-af80-486b-9ebb-bee14610b2b8/40496f89-51f8-391f-9694-afc1a5c44bce.roa
Signing time:             Thu 18 Jun 2020 16:04:54 +0000
ROA not before:           Mon 11 May 2020 04:00:00 +0000
ROA not after:            Wed 21 Sep 2022 04:00:00 +0000
asID:                     16842
IP address blocks:        2607:f848::/32 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:c8:2d:0b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a608dbfe-af80-486b-9ebb-bee14610b2b8
        Validity
            Not Before: May 11 04:00:00 2020 GMT
            Not After : Sep 21 04:00:00 2022 GMT
        Subject: CN=46c1fbae-964d-4654-a9e6-9a0240084c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d1:9a:ac:6d:06:41:65:d2:76:c0:e6:b7:62:
                    de:ec:01:a5:1e:ae:a6:47:b9:80:7a:c7:ec:96:a3:
                    0e:a8:0d:ae:d0:ba:8d:02:d9:94:ee:ba:4e:cd:71:
                    e1:18:9e:a2:4c:00:0b:5e:79:41:fd:16:94:68:03:
                    b5:9d:3e:d5:b1:e1:24:d3:29:4c:fc:57:e6:7f:2f:
                    3b:db:ee:49:22:13:e9:4b:9b:28:f3:7d:6a:4c:e0:
                    c1:76:6b:bf:f2:93:58:bc:21:16:66:26:ae:68:ff:
                    fa:50:44:20:52:6d:09:40:0c:38:64:2f:b9:17:1e:
                    c8:98:a6:a7:d2:5d:5b:38:19:51:1c:d7:7c:3f:fb:
                    65:2f:d9:9d:75:65:05:da:04:49:c6:e5:a6:46:7d:
                    3d:a3:33:a2:b2:0d:be:98:3b:b8:d9:c6:ea:31:af:
                    3e:4e:6d:50:7e:b8:08:b1:82:7f:12:c5:45:97:3a:
                    63:db:70:37:f9:c4:88:51:e2:28:51:99:d3:e3:96:
                    ca:51:42:fa:48:a7:00:f8:1b:6b:a2:e3:02:8b:46:
                    87:44:47:64:ce:a8:03:52:91:0a:d5:50:47:73:26:
                    b1:ea:b7:49:22:2f:2a:23:63:35:a8:c6:de:e2:67:
                    98:d1:13:2c:fe:be:d2:b7:24:d7:bb:a2:5f:0b:d8:
                    7a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FD:E4:43:38:51:51:44:C9:37:40:8A:37:41:CE:23:28:4B:B8:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a608dbfe-af80-486b-9ebb-bee14610b2b8/40496f89-51f8-391f-9694-afc1a5c44bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a608dbfe-af80-486b-9ebb-bee14610b2b8/a608dbfe-af80-486b-9ebb-bee14610b2b8.crl

            X509v3 Authority Key Identifier:
                keyid:D1:55:23:3D:12:A3:4A:36:AC:E5:88:87:EC:DD:CB:7A:A0:C6:69:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a608dbfe-af80-486b-9ebb-bee14610b2b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f848::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:10:db:2f:b1:89:c1:d3:3b:03:4d:8b:2f:94:c1:ff:a0:7c:
         25:b7:19:76:c4:68:b3:90:2d:a1:8b:c2:f5:81:03:40:d0:0f:
         a3:aa:9a:b2:64:d0:3a:61:cc:cd:40:ed:6f:e2:fc:9e:bd:44:
         b3:a0:f9:6d:c3:e5:84:68:e9:df:dd:fc:25:a7:fc:34:3a:74:
         92:33:19:a4:b0:a0:69:a2:27:b6:13:59:e7:ff:77:c9:ba:da:
         49:ce:d2:29:e3:7e:e8:3f:60:13:98:54:b7:75:da:f9:06:35:
         49:02:ae:b1:22:23:c2:e3:da:c2:4a:e2:d0:89:2b:97:86:3a:
         88:2c:16:36:d2:38:ba:bd:56:5b:3f:14:c7:f7:5c:03:27:c0:
         69:36:51:c6:f7:58:76:d3:3e:36:47:41:d4:64:40:aa:f6:0c:
         f1:36:25:b0:85:25:2b:80:fd:82:ac:9c:90:ce:c1:14:81:2c:
         4c:a4:91:bb:b1:34:e8:1b:fa:b2:70:eb:d2:83:56:5c:06:88:
         41:66:0e:65:2f:b9:3c:d8:ae:75:bc:d2:b3:d6:8a:45:7a:4a:
         2a:2b:a4:bf:75:3e:fb:64:3d:db:2c:30:f7:c9:2a:85:0f:91:
         cc:ff:6e:20:fe:d5:62:b5:00:4d:5d:14:94:53:0c:86:87:70:
         92:34:2d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----