Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/988f95ed-d4af-3e2a-9566-05dfb8646fa1.roa
File:                     988f95ed-d4af-3e2a-9566-05dfb8646fa1.roa (raw, json)
Hash identifier:          0lvPXnEjNK3czWDZ7uYj9WIIlLZARDexj2X8wcU1ZYA=
Subject key identifier:   4C:64:5A:8A:7A:95:01:A0:17:65:A5:43:77:B9:E6:90:FA:B3:E3:DC
Certificate issuer:       /CN=e42a3de7-584f-4010-acae-b7935ed3f602
Certificate serial:       010D0C9F4328576D51CC73C042CFC17088AEC8F1
Authority key identifier: D0:4B:20:55:92:9C:EB:76:E4:1F:6A:75:74:2A:D9:ED:93:2E:F6:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/988f95ed-d4af-3e2a-9566-05dfb8646fa1.roa
Signing time:             Thu 27 Feb 2020 22:05:21 +0000
ROA not before:           Fri 21 Feb 2020 05:00:00 +0000
ROA not after:            Wed 01 Jun 2022 04:00:00 +0000
asID:                     0
IP address blocks:        2001:504:2d::/48 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:88:ae:c8:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e42a3de7-584f-4010-acae-b7935ed3f602
        Validity
            Not Before: Feb 21 05:00:00 2020 GMT
            Not After : Jun  1 04:00:00 2022 GMT
        Subject: CN=6623c9a0-5174-4e84-a04d-cbcd53896f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1f:78:aa:06:d8:21:40:5d:1d:9b:47:66:04:
                    fc:e6:4c:7e:17:e8:39:58:6b:14:81:72:5b:9d:21:
                    77:5d:b4:08:f7:2f:88:85:ca:ec:87:c6:bd:62:34:
                    bc:35:1f:3f:21:19:66:4a:71:4c:19:11:9e:a4:f9:
                    0c:70:51:1b:67:ea:07:2c:ba:b7:9a:77:96:79:69:
                    d5:a2:7b:97:bf:57:3f:dc:65:1d:a6:83:2d:23:a2:
                    be:00:55:02:d9:29:66:bf:81:b4:7e:51:9d:7e:6b:
                    92:67:dd:9c:5e:df:95:f7:93:0f:87:52:d3:16:91:
                    2c:e1:c3:5e:b7:e2:e2:66:6e:8b:2a:f8:87:66:f6:
                    3e:78:f7:c6:ad:e6:57:08:53:ec:fe:61:40:41:25:
                    73:61:2f:cf:7d:c5:9c:fe:5b:eb:9e:6d:30:6b:5d:
                    6e:3d:4d:aa:f0:f8:a6:01:f7:b4:c2:15:1a:31:8c:
                    cb:04:29:20:7a:ee:47:62:af:7c:50:c0:d2:00:bf:
                    0d:7f:01:b5:29:6b:84:31:f9:f4:d4:23:98:b4:7a:
                    1f:1d:4f:b2:46:73:ef:95:fd:51:2d:bf:46:c3:b5:
                    05:90:4f:0d:27:9b:7b:67:cf:50:df:58:83:e0:ab:
                    16:d9:d8:f6:61:df:c6:4b:e0:b8:6f:0b:d3:46:55:
                    a5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:64:5A:8A:7A:95:01:A0:17:65:A5:43:77:B9:E6:90:FA:B3:E3:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/988f95ed-d4af-3e2a-9566-05dfb8646fa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/e42a3de7-584f-4010-acae-b7935ed3f602.crl

            X509v3 Authority Key Identifier:
                keyid:D0:4B:20:55:92:9C:EB:76:E4:1F:6A:75:74:2A:D9:ED:93:2E:F6:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:2a:70:fd:79:91:74:bd:7d:66:e9:2a:32:2a:13:55:4e:88:
         7a:42:63:98:0f:05:a3:9f:e7:9b:a6:ec:87:62:3d:01:b5:9d:
         a0:0a:0b:fb:60:9c:5b:bd:19:e7:37:07:be:c6:cb:3e:c0:3f:
         61:b2:a0:67:3a:eb:b9:b2:c4:cf:7c:53:28:17:5c:2e:d8:07:
         53:1b:75:15:eb:b3:44:95:96:2c:99:36:19:6c:d9:0f:e7:e8:
         0b:b6:0d:0c:a7:83:26:c4:4e:16:ef:31:19:62:79:78:bc:b2:
         58:9f:8a:5b:d6:aa:1b:27:c5:40:9a:58:65:09:b3:75:d3:12:
         4e:c2:e6:e1:45:4b:2f:19:5c:e3:ba:19:03:66:29:a0:b4:54:
         b4:0c:77:51:0a:df:3c:01:9b:7a:8e:9b:b1:db:8f:25:f3:f9:
         fd:a7:ce:d2:92:b7:3d:d8:19:f2:a3:c5:fc:f6:c1:65:b8:d5:
         0a:e0:24:9a:fb:b4:a6:28:21:1b:a7:83:be:79:a4:9b:57:2b:
         f4:37:2f:14:e9:b6:53:ff:8a:99:c5:69:d1:36:bf:54:04:dd:
         62:e6:b5:67:eb:f7:aa:96:0f:78:b7:c8:eb:8f:51:9b:3f:fc:
         ca:43:04:1d:9c:33:fd:72:03:5a:e1:cb:9a:28:4e:21:32:77:
         bb:87:4a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----