Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6dddcb0f-51e2-3b60-8325-c3b33d6d6eb7.roa
File:                     6dddcb0f-51e2-3b60-8325-c3b33d6d6eb7.roa (raw, json)
Hash identifier:          iYjk346f16gO8iFeBh4khz1AcgkN0UvPTfNItV8zHLY=
Subject key identifier:   60:40:98:3A:D7:ED:34:3D:35:AF:C8:9D:1F:A6:55:C8:B9:1B:2D:79
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837BDA1E8302A1FE73ED34EFF80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6dddcb0f-51e2-3b60-8325-c3b33d6d6eb7.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 29 Jan 2023 05:00:00 +0000
asID:                     25668
IP address blocks:        64.114.200.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:bd:a1:e8:30:2a:1f:e7:3e:d3:4e:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Jan 29 05:00:00 2023 GMT
        Subject: CN=89c79e15-75f2-498c-b629-b510eed5a54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0a:b6:08:5a:eb:17:41:ca:4e:24:00:a3:da:
                    38:ee:c2:39:45:ce:ca:6f:fb:7b:60:aa:3b:40:d4:
                    70:f5:f7:fb:42:de:81:8a:ca:e5:1f:d4:48:3d:27:
                    1d:5e:f6:e9:29:74:a3:9b:a9:68:c5:04:3b:96:56:
                    c2:b6:c4:8e:70:19:db:73:85:69:ea:89:03:a9:e1:
                    f8:45:da:11:d3:c6:c8:0d:0e:47:4b:e2:04:94:74:
                    7b:07:11:fb:74:54:4c:b3:a6:c9:ae:12:17:3a:e2:
                    18:a7:c8:30:40:a9:81:ac:4e:33:8b:05:5c:72:ce:
                    e4:fb:8c:91:d9:a0:d4:70:75:77:32:b6:36:03:d7:
                    f4:e8:90:65:cf:90:25:24:50:ce:60:3b:36:2c:8e:
                    aa:75:70:25:3f:b2:c6:58:2d:eb:d2:91:69:f6:29:
                    fe:93:c5:aa:34:19:ab:01:b2:33:d3:3a:5b:fb:79:
                    55:e7:6f:b1:3a:4c:cb:ad:5d:00:8d:5d:67:bd:e6:
                    c4:6f:3f:87:af:c4:9c:1a:1d:9b:1f:3b:b5:1e:d1:
                    63:f4:25:1c:dd:de:86:4c:cf:b2:35:e3:c2:01:60:
                    f3:26:4b:46:de:ec:60:b4:ce:e5:07:4d:c9:a1:70:
                    49:f6:c6:72:75:c5:20:71:dc:25:f7:c2:2a:cc:9c:
                    de:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:40:98:3A:D7:ED:34:3D:35:AF:C8:9D:1F:A6:55:C8:B9:1B:2D:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6dddcb0f-51e2-3b60-8325-c3b33d6d6eb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.114.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d0:bb:b6:b4:ea:52:6a:7b:d4:a2:16:09:db:8b:c0:13:f0:
         09:f2:f9:70:0a:75:45:4c:4d:29:d9:2a:8c:5c:2c:53:1b:67:
         f5:9c:e4:d8:6b:12:0e:85:23:12:69:da:ff:b9:b2:76:ed:88:
         c1:88:a9:41:26:09:bf:99:4a:e2:7d:d3:0d:a8:c9:22:6e:c7:
         3c:b5:7a:6d:0d:00:e5:bf:aa:bc:97:88:4c:21:5b:3a:70:d0:
         25:9a:2b:43:e7:58:80:f2:68:76:56:3b:ab:52:bd:6e:54:63:
         92:5e:32:f9:a9:4a:8c:ac:ed:07:93:62:62:55:8c:9e:5f:76:
         49:a8:74:5f:5d:6a:60:3f:f1:de:9b:7a:44:d6:92:1d:05:e5:
         ef:8e:b9:9a:3d:e3:af:33:87:62:23:16:63:a9:60:e5:0b:55:
         0e:2f:59:05:c3:e0:76:d0:c7:88:7b:6e:b5:9e:4a:7f:0d:e6:
         0a:e3:14:da:73:81:3b:8e:46:42:4c:ad:da:02:2f:0c:d4:15:
         bb:b7:41:86:57:5c:1f:14:78:12:d3:24:79:04:b5:c7:50:53:
         b6:a0:b9:09:64:cd:f8:30:86:25:3c:c7:c3:2d:97:ca:f4:e5:
         76:e8:02:e0:7b:00:b1:e1:a2:2d:35:33:5b:cc:df:b2:9b:5a:
         71:95:2f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----