Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/c776ec58-f983-3093-a86c-f0be19c159da.roa
File:                     c776ec58-f983-3093-a86c-f0be19c159da.roa (raw, json)
Hash identifier:          gdYBik16k2QVsZhhq9aUiNFDVa4dkNjZ56CSpmR5sJM=
Subject key identifier:   8F:95:17:C9:25:4E:93:8E:56:06:96:E6:30:3E:F3:42:D4:C3:14:6B
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328576D51CC73C042CFC1720FEC60D3
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/c776ec58-f983-3093-a86c-f0be19c159da.roa
Signing time:             Wed 13 May 2020 21:24:09 +0000
ROA not before:           Fri 13 Dec 2019 05:00:00 +0000
ROA not after:            Tue 16 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2620:116:800a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:0f:ec:60:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Dec 13 05:00:00 2019 GMT
            Not After : Aug 16 04:00:00 2022 GMT
        Subject: CN=c3bc0db3-f0bf-4ba8-8c74-b168bf1aa24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:e3:8f:c3:91:8c:c3:78:4f:85:ca:41:48:
                    75:6b:37:71:27:c2:eb:e2:73:ec:d4:0f:ba:96:3e:
                    be:5c:a8:e8:84:22:91:ea:93:08:cf:7b:17:f4:d2:
                    96:28:fc:26:c0:bd:a6:57:c3:87:f2:41:c8:01:5c:
                    63:01:3e:53:3a:c2:ff:da:19:4a:47:be:90:67:34:
                    13:a0:5b:e1:50:c9:b1:e5:13:55:68:cd:75:76:ea:
                    ad:29:0a:2e:59:3c:fc:72:af:35:bb:88:c5:49:ba:
                    8f:59:57:3c:22:3e:14:a2:88:72:a7:8e:c7:51:9a:
                    ed:de:c0:8d:b5:10:ae:10:e3:93:91:7a:8e:f3:13:
                    f4:d6:e6:6a:6a:d6:2f:19:95:40:b3:29:d5:f6:a7:
                    cc:4c:04:5b:4a:0c:c0:cf:7b:fb:f3:ce:72:53:80:
                    b8:d7:43:d7:b4:94:09:8f:22:23:e3:14:da:a9:14:
                    51:79:23:65:b8:4a:ae:b4:fc:88:4b:15:59:fc:05:
                    f5:50:ce:2f:96:19:f0:71:02:5a:4c:04:26:61:bd:
                    00:eb:b5:65:99:06:40:2a:19:a5:ec:72:49:3b:72:
                    e6:a1:f3:cd:e8:e6:50:93:0b:5f:bd:3f:03:d9:3b:
                    d2:d5:89:27:60:e1:50:b6:70:e0:14:b2:09:4e:a0:
                    25:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:95:17:C9:25:4E:93:8E:56:06:96:E6:30:3E:F3:42:D4:C3:14:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/c776ec58-f983-3093-a86c-f0be19c159da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a8:8e:46:18:a7:cf:14:78:4e:0b:6b:3e:ea:6f:28:85:8b:
         0d:a9:bd:cd:84:3b:29:37:66:db:81:bb:fc:dc:0e:e7:49:d8:
         4f:e4:56:14:34:df:ac:bb:48:7b:f6:17:fc:8f:c5:2d:c2:3a:
         b8:e4:c3:3a:91:a1:91:03:64:3f:5a:42:fd:56:5c:af:5c:a3:
         28:bd:40:4d:88:5d:4b:0c:9e:4c:5b:53:b2:47:e4:5c:9d:fa:
         63:0c:e0:f0:bf:2f:fe:49:62:c3:11:db:b2:cf:65:17:82:0b:
         c4:c2:96:31:2a:bb:54:b6:5d:74:85:b7:c5:e6:ae:8e:cd:aa:
         0f:2b:dc:35:bb:03:98:7d:d0:e1:b4:bc:b0:70:90:3e:3e:d4:
         30:94:09:ef:16:8f:a8:dd:9d:8b:48:5c:22:5c:df:26:ba:18:
         f4:91:a3:82:d0:e8:f0:62:f5:49:b7:c1:7b:79:d2:33:1b:bc:
         ae:14:9b:43:aa:52:57:6f:66:3f:70:68:eb:b2:00:d9:67:85:
         a4:58:7b:f2:05:ba:24:3e:22:4f:eb:d4:9e:5a:2e:eb:cd:30:
         24:45:00:87:ea:4f:07:ce:d3:d2:64:b6:82:15:bb:9d:38:0f:
         61:6c:c5:a2:59:c3:8b:83:2d:f0:88:53:68:da:60:1a:21:8e:
         e8:81:53:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----