Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/7fe955e8-0d5b-361b-80f1-e8b99d8a072a.roa
File:                     7fe955e8-0d5b-361b-80f1-e8b99d8a072a.roa (raw, json)
Hash identifier:          k77NK0rIb/81lZLEoEMFXTpV/XFZfzpPaHJ5HAPMtWs=
Subject key identifier:   E0:D7:11:1D:B4:2A:CC:4C:69:30:1E:B0:09:AB:95:E0:CA:4A:E7:4C
Certificate issuer:       /CN=2aa2eb71-3102-4859-928f-a833f2c63713
Certificate serial:       010D0C9F43285838329BDFF6F416EE0E96576A40
Authority key identifier: AA:77:D5:7B:C1:16:4F:BE:B8:81:7D:3F:4C:E0:33:7E:47:42:3C:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/7fe955e8-0d5b-361b-80f1-e8b99d8a072a.roa
Signing time:             Thu 29 Oct 2020 04:00:00 +0000
ROA not before:           Thu 29 Oct 2020 04:00:00 +0000
ROA not after:            Sun 12 Mar 2023 05:00:00 +0000
asID:                     6373
IP address blocks:        2607:7c80:57::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:32:9b:df:f6:f4:16:ee:0e:96:57:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa2eb71-3102-4859-928f-a833f2c63713
        Validity
            Not Before: Oct 29 04:00:00 2020 GMT
            Not After : Mar 12 05:00:00 2023 GMT
        Subject: CN=2bf6bc73-1a60-4ffa-b139-870a1f17a6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:08:d8:fa:59:e3:04:ec:3d:0f:47:f9:59:91:
                    76:f6:5f:3f:62:b9:e6:86:a0:29:f3:b9:e7:24:0c:
                    6d:4e:5f:12:4f:bc:f8:10:72:3a:e6:1a:1b:47:82:
                    f4:e0:8f:25:cc:f2:96:db:50:61:e8:ac:44:df:6a:
                    21:77:25:e6:7b:fb:65:f4:6d:56:a9:e8:51:07:ec:
                    11:94:dd:f9:bd:79:9e:e7:ef:2b:46:03:ce:2c:06:
                    d0:5c:2f:65:1a:d1:cc:13:f6:e3:4a:54:2b:3e:79:
                    42:5f:f8:b3:2d:76:46:a7:03:26:57:9f:b6:28:8b:
                    9e:eb:10:89:7c:9f:6e:cd:3d:ae:2f:f2:63:20:57:
                    a6:e2:a2:cd:6f:a6:71:99:84:3e:e2:d8:ab:45:59:
                    62:57:38:0c:af:84:78:43:7e:d7:ef:22:05:5f:ee:
                    57:a4:7d:0e:1c:e9:d7:c3:83:c3:d2:bb:29:6b:de:
                    f2:91:a6:14:9c:c8:2e:d8:1c:24:d2:64:dd:ba:b9:
                    75:4e:d6:4d:1f:74:b7:3d:1a:b7:1f:f9:3d:dc:20:
                    c9:31:ee:59:82:de:72:9b:34:cf:c4:25:ea:e1:33:
                    2c:be:84:63:98:e0:5a:fd:f5:7f:84:c1:70:bb:de:
                    bb:ca:fa:92:e6:ed:82:6e:48:58:fc:6f:c7:ad:67:
                    8a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D7:11:1D:B4:2A:CC:4C:69:30:1E:B0:09:AB:95:E0:CA:4A:E7:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/7fe955e8-0d5b-361b-80f1-e8b99d8a072a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/2aa2eb71-3102-4859-928f-a833f2c63713.crl

            X509v3 Authority Key Identifier:
                keyid:AA:77:D5:7B:C1:16:4F:BE:B8:81:7D:3F:4C:E0:33:7E:47:42:3C:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7c80:57::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b6:0e:61:62:ac:c9:0b:e5:74:13:f4:61:0b:48:be:23:86:
         56:4f:e8:91:90:46:54:7d:40:c2:67:76:bb:8e:a4:14:9f:96:
         2f:02:e8:a8:b4:43:36:96:0e:25:a0:68:e6:7e:47:65:8f:a6:
         ca:72:c3:d5:01:d7:ec:7f:ba:9f:35:e2:54:83:39:db:67:bb:
         e8:1b:00:22:f7:3a:38:7c:af:57:5d:8a:1c:80:26:2e:01:c4:
         e2:1e:66:06:f6:f5:70:b8:e6:b2:7d:1c:e9:16:40:09:90:63:
         f0:67:b3:68:49:8f:10:b8:e9:83:e3:83:29:b3:7f:a4:a4:20:
         d3:63:55:6c:fc:02:ec:8a:95:a5:db:0f:c8:ab:88:d0:ec:f5:
         71:8a:bf:7b:0d:4d:6e:2d:ff:b8:15:c8:23:d8:42:ed:e3:a3:
         87:11:43:12:a7:1e:35:a3:6c:66:a2:86:bc:96:44:02:3c:7e:
         e7:ef:6e:0b:21:f9:7f:fa:e4:e3:8d:16:e0:f4:0e:24:d0:88:
         a1:29:0c:89:c6:47:03:dc:a6:c0:4f:73:ce:58:8f:e8:ca:8d:
         05:cc:4e:08:fa:5b:e3:bd:8a:14:b2:a9:2a:f5:1c:49:f6:f5:
         d5:03:25:dc:77:0a:80:d1:dd:8e:46:12:e4:c7:f2:10:0b:12:
         e6:9e:14:a0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDgym9/29BbuDpZXakAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmFhMmViNzEtMzEwMi00ODU5LTkyOGYtYTgzM2YyYzYz
NzEzMB4XDTIwMTAyOTA0MDAwMFoXDTIzMDMxMjA1MDAwMFowLzEtMCsGA1UEAxMk
MmJmNmJjNzMtMWE2MC00ZmZhLWIxMzktODcwYTFmMTdhNmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAjY+lnjBOw9D0f5WZF29l8/YrnmhqAp87nn
JAxtTl8ST7z4EHI65hobR4L04I8lzPKW21Bh6KxE32ohdyXme/tl9G1WqehRB+wR
lN35vXme5+8rRgPOLAbQXC9lGtHME/bjSlQrPnlCX/izLXZGpwMmV5+2KIue6xCJ
fJ9uzT2uL/JjIFem4qLNb6ZxmYQ+4tirRVliVzgMr4R4Q37X7yIFX+5XpH0OHOnX
w4PD0rspa97ykaYUnMgu2Bwk0mTdurl1TtZNH3S3PRq3H/k93CDJMe5Zgt5ymzTP
xCXq4TMsvoRjmOBa/fV/hMFwu967yvqS5u2CbkhY/G/HrWeKawIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFODXER20KsxMaTAesAmrleDKSudMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYWEy
ZWI3MS0zMTAyLTQ4NTktOTI4Zi1hODMzZjJjNjM3MTMvN2ZlOTU1ZTgtMGQ1Yi0z
NjFiLTgwZjEtZThiOTlkOGEwNzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmFhMmViNzEtMzEwMi00ODU5LTky
OGYtYTgzM2YyYzYzNzEzLzJhYTJlYjcxLTMxMDItNDg1OS05MjhmLWE4MzNmMmM2
MzcxMy5jcmwwHwYDVR0jBBgwFoAUqnfVe8EWT764gX0/TOAzfkdCPBcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYWEyZWI3MS0zMTAyLTQ4NTktOTI4Zi1hODMz
ZjJjNjM3MTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgd8gABX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH22DmFirMkL5XQT9GELSL4jhlZP6JGQRlR9QMJndruOpBSfli8C
6Ki0QzaWDiWgaOZ+R2WPpspyw9UB1+x/up814lSDOdtnu+gbACL3Ojh8r1ddihyA
Ji4BxOIeZgb29XC45rJ9HOkWQAmQY/Bns2hJjxC46YPjgymzf6SkINNjVWz8AuyK
laXbD8iriNDs9XGKv3sNTW4t/7gVyCPYQu3jo4cRQxKnHjWjbGaihryWRAI8fufv
bgsh+X/65OONFuD0DiTQiKEpDInGRwPcpsBPc85Yj+jKjQXMTgj6W+O9ihSyqSr1
HEn29dUDJdx3CoDR3Y5GEuTH8hALEuaeFKA=
-----END CERTIFICATE-----