Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/0b710556-a37f-329a-9f3a-6e20d2986587.roa
File:                     0b710556-a37f-329a-9f3a-6e20d2986587.roa (raw, json)
Hash identifier:          ApnZtVBoydE3Y92JEwOU6AOUtTIOKg8xbt7R/DCtspo=
Subject key identifier:   31:69:3A:26:7D:F7:13:82:9D:EE:E9:32:EF:D2:FE:26:3A:CD:C0:50
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328576D51CC73C042CFC173002DF133
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/0b710556-a37f-329a-9f3a-6e20d2986587.roa
Signing time:             Mon 29 Jun 2020 13:04:37 +0000
ROA not before:           Tue 25 Sep 2018 04:00:00 +0000
ROA not after:            Sun 02 Oct 2022 04:00:00 +0000
asID:                     20473
IP address blocks:        65.20.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:00:2d:f1:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Sep 25 04:00:00 2018 GMT
            Not After : Oct  2 04:00:00 2022 GMT
        Subject: CN=187b9ce8-5a36-4b1c-b04b-560f0326f3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:be:d9:2f:36:07:a0:af:ea:96:dc:81:9d:a4:
                    b7:a8:38:34:5c:13:2f:73:8c:f5:57:35:1d:9a:a4:
                    e2:1e:6b:6f:9f:be:c1:96:bd:e8:be:d8:cc:dc:7e:
                    96:1b:a7:f0:44:f3:00:79:39:07:1b:39:a4:ea:81:
                    95:dd:b1:f4:bd:80:59:03:5e:3a:6a:ae:3f:b3:4a:
                    07:88:0a:f7:ba:c4:25:c3:5a:23:9e:84:2f:41:92:
                    39:aa:de:c2:8b:c6:bf:6a:97:d5:71:82:1d:86:b5:
                    35:9d:c5:de:e6:f1:3e:1b:b0:0d:a9:6e:42:e2:76:
                    d4:b3:34:cd:1b:58:db:60:67:5e:a9:5e:0a:aa:6f:
                    9e:8b:75:f5:37:87:e8:5f:dd:39:60:76:14:8f:a4:
                    c9:68:4a:47:fc:3c:f5:d6:7a:81:e9:18:f8:e9:02:
                    8f:3a:db:27:6d:74:c2:11:aa:c3:cb:75:36:1c:61:
                    bd:e1:b7:4c:6a:4a:7a:83:fe:fd:1b:34:5a:c0:fa:
                    8c:e3:d6:34:d2:13:40:4c:05:bd:e3:10:26:aa:03:
                    9b:4e:13:28:45:15:cc:d3:ca:87:a7:fd:87:7e:c9:
                    ad:b4:70:07:be:57:e5:6f:96:50:cf:1d:ac:3c:92:
                    3e:95:1f:c3:47:18:62:9e:ca:95:fd:d3:cf:a3:a8:
                    d3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:69:3A:26:7D:F7:13:82:9D:EE:E9:32:EF:D2:FE:26:3A:CD:C0:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/0b710556-a37f-329a-9f3a-6e20d2986587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.20.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:be:5c:8c:a7:c2:48:a1:ea:b8:9e:87:15:c5:ca:95:44:f6:
         b6:8a:c9:c8:3b:76:6c:26:2d:6b:7f:de:1f:08:f4:71:9c:e4:
         3a:39:c4:39:b4:27:9b:ca:30:c0:d8:93:9d:bc:25:a6:f4:99:
         07:d7:d6:e6:3f:38:5a:66:7e:1c:bc:3f:39:be:a7:65:45:d0:
         30:c0:f7:c9:62:17:71:b4:ae:43:d5:71:07:59:e4:95:34:6f:
         74:b3:ab:db:f4:e4:53:c5:37:cf:27:75:01:e2:2b:6a:66:ed:
         0b:66:8a:cf:fd:4c:a0:51:07:92:4c:2c:9b:63:fe:af:94:52:
         c1:a7:36:00:01:0d:61:55:8e:f2:d4:b7:50:32:46:90:07:71:
         ff:bc:4a:0f:2e:ad:47:b5:17:87:cd:88:48:3d:b8:17:01:6f:
         55:84:11:da:f7:23:04:bc:01:4c:93:af:e7:a1:d3:94:df:c3:
         97:38:df:25:cd:45:1a:01:23:e3:d2:51:9e:71:a1:f9:7b:f1:
         c8:2f:5d:5b:62:00:d3:2c:a9:f3:68:59:33:7e:65:0e:f3:01:
         06:e5:7a:6b:8f:c3:af:95:38:92:ae:a7:14:43:4d:ee:9d:ae:
         55:39:df:1d:1a:66:e8:77:b0:8d:22:98:b2:ea:12:8d:5a:f0:
         e9:74:f2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----