Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e189bc1f-a727-4fa8-86fa-d70c78a19c2d/c948de4b-9b0d-3a3b-92fa-c29574e7dc4f.roa
File:                     c948de4b-9b0d-3a3b-92fa-c29574e7dc4f.roa (raw, json)
Hash identifier:          CbeEsJoKvCJ1p6NjifKZZiLrLfl6iSkdXGiJt7ASy70=
Subject key identifier:   BF:4D:B2:B5:D1:25:A7:B1:39:DC:1D:96:B8:7A:FE:19:29:5E:20:1A
Certificate issuer:       /CN=e189bc1f-a727-4fa8-86fa-d70c78a19c2d
Certificate serial:       010D0C9F4328576D51CC73C042CFC170D4C57902
Authority key identifier: D2:4D:48:EC:71:D8:C1:D0:33:0B:85:1F:4A:F1:D2:C2:1F:33:07:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e189bc1f-a727-4fa8-86fa-d70c78a19c2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e189bc1f-a727-4fa8-86fa-d70c78a19c2d/c948de4b-9b0d-3a3b-92fa-c29574e7dc4f.roa
Signing time:             Fri 13 Mar 2020 16:41:16 +0000
ROA not before:           Fri 13 Mar 2020 04:00:00 +0000
ROA not after:            Thu 16 Jun 2022 04:00:00 +0000
asID:                     54161
IP address blocks:        2605:a5c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:d4:c5:79:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e189bc1f-a727-4fa8-86fa-d70c78a19c2d
        Validity
            Not Before: Mar 13 04:00:00 2020 GMT
            Not After : Jun 16 04:00:00 2022 GMT
        Subject: CN=c0a3c4f9-d8c0-454b-9734-05fd176c1e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:64:68:0e:7b:45:43:28:c8:79:2a:e7:97:67:
                    6b:f9:fd:e1:1b:4c:24:d1:97:94:dc:93:57:16:e2:
                    d6:66:18:8a:f8:e0:e0:ec:1e:fe:b4:af:93:aa:1a:
                    dd:24:05:82:5a:62:3e:a5:02:42:06:a4:08:f9:ef:
                    0b:a0:5f:0a:f1:52:c4:9c:92:47:43:eb:58:30:5b:
                    df:f1:40:f0:6b:c7:03:04:bd:16:da:39:0c:ba:5e:
                    dc:55:25:68:1c:f1:f4:d8:bf:cb:02:7a:c5:e9:47:
                    bb:06:4c:20:d5:f1:9e:9d:83:bd:ad:db:7f:92:f3:
                    a6:3b:60:fa:86:93:fd:0c:62:f2:70:a5:b5:a3:ac:
                    99:ab:3b:2f:a1:e2:1a:60:50:7a:61:e9:0b:b4:3a:
                    65:7d:e1:15:4f:29:0d:43:f1:20:56:18:93:67:de:
                    d8:fa:c9:5c:e4:dc:5a:62:0a:e3:e6:9d:ac:74:0f:
                    f5:ed:a3:e1:0a:1f:f6:21:09:cc:3e:8e:52:67:26:
                    c1:a8:44:92:6f:37:bd:8e:b9:0e:89:8f:97:63:14:
                    ee:ae:d1:ad:a6:0c:23:9b:1d:9a:0e:db:bc:0a:cd:
                    24:2b:5e:0c:9d:f9:1c:7d:eb:18:5c:5d:4d:2a:0e:
                    e4:cd:3e:64:4a:88:86:24:aa:33:0a:1d:66:24:15:
                    db:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4D:B2:B5:D1:25:A7:B1:39:DC:1D:96:B8:7A:FE:19:29:5E:20:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e189bc1f-a727-4fa8-86fa-d70c78a19c2d/c948de4b-9b0d-3a3b-92fa-c29574e7dc4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e189bc1f-a727-4fa8-86fa-d70c78a19c2d/e189bc1f-a727-4fa8-86fa-d70c78a19c2d.crl

            X509v3 Authority Key Identifier:
                keyid:D2:4D:48:EC:71:D8:C1:D0:33:0B:85:1F:4A:F1:D2:C2:1F:33:07:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e189bc1f-a727-4fa8-86fa-d70c78a19c2d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a5c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:d9:89:10:cc:12:98:97:08:26:09:9c:41:92:9a:4a:f9:68:
         22:0c:bc:79:cf:c1:53:e3:a6:ec:9a:5a:fa:bb:85:e0:75:44:
         cb:37:d5:30:0b:a0:61:4f:32:6e:34:c2:16:73:24:70:b2:5f:
         ae:05:a0:1b:b9:14:fe:93:e3:19:53:79:c5:04:ce:d2:6b:f8:
         e6:01:40:9e:7e:ff:ab:2a:5e:bf:8a:25:88:6a:e3:43:38:9c:
         f2:57:92:de:87:61:2f:2d:83:39:44:42:65:aa:4c:7a:db:c6:
         20:4d:46:92:b6:17:50:fe:12:4f:23:2d:2d:e4:14:9c:ad:d0:
         88:b7:ec:c5:35:66:95:43:90:78:d4:fc:74:5c:6e:3c:a4:39:
         49:16:40:2b:18:92:32:3d:e5:6a:7b:1b:1d:eb:fa:82:14:1c:
         bf:a5:c5:f8:e8:63:11:ea:ab:a4:cd:93:e0:80:69:67:d3:49:
         0b:a0:1c:4c:75:90:42:0e:6e:4d:79:13:6c:41:09:cd:b7:8b:
         9e:48:9d:df:ea:83:80:40:cb:9f:ee:65:50:88:3e:d1:ce:02:
         b7:7a:f6:d2:ef:03:50:27:1e:6d:9d:6b:df:6d:1c:73:74:6d:
         fb:aa:cd:3b:52:76:80:db:5f:82:d1:84:e6:35:f4:47:00:a5:
         7d:87:5e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----