Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/61de2fde-0f2f-369e-853f-b1e9940a1d30.roa
File:                     61de2fde-0f2f-369e-853f-b1e9940a1d30.roa (raw, json)
Hash identifier:          YX1zxp6VRf+0Rj06Vnkv1rCoyniI+uxTc0UTHzBU/y4=
Subject key identifier:   B6:10:2B:DB:80:A4:12:67:37:B7:E7:07:FE:D0:53:16:65:33:7F:D8
Certificate issuer:       /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial:       010D0C9F4328576D51CC73C042CFC173EF31D5E3
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/61de2fde-0f2f-369e-853f-b1e9940a1d30.roa
Signing time:             Mon 22 Jun 2020 04:00:00 +0000
ROA not before:           Mon 22 Jun 2020 04:00:00 +0000
ROA not after:            Thu 17 Nov 2022 05:00:00 +0000
asID:                     202745
IP address blocks:        2620:119:50be::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:ef:31:d5:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
        Validity
            Not Before: Jun 22 04:00:00 2020 GMT
            Not After : Nov 17 05:00:00 2022 GMT
        Subject: CN=970c3a91-a032-468b-b4ee-1d1bc1e54008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9c:13:83:f5:bc:df:65:ef:1e:9b:f0:c5:87:
                    81:ad:46:87:09:81:56:9c:c3:a6:ff:5f:ab:68:90:
                    85:50:45:24:f5:72:d4:a8:a3:43:8c:eb:ae:c4:0a:
                    46:d0:b3:ab:5b:8d:04:b3:1c:ae:3a:61:90:ec:c7:
                    43:92:3d:ed:0a:af:79:94:6e:99:b9:95:d8:14:e3:
                    17:02:ba:90:0c:a3:40:d3:55:89:f6:c6:39:c2:77:
                    75:58:c0:1c:69:38:8f:7f:70:5f:1a:ec:69:33:05:
                    20:ed:85:a8:f3:35:40:f2:2f:64:ed:de:4b:4e:9b:
                    e9:06:cc:f8:bf:28:65:c7:e5:49:8a:6a:98:a5:d4:
                    d0:83:39:01:99:b0:de:a6:e3:29:f9:0c:4e:a7:09:
                    ea:9e:07:c2:8c:22:c6:f6:79:7e:a6:69:6e:a1:8c:
                    2f:17:f2:20:2e:63:55:e2:44:de:d5:31:1a:06:13:
                    a1:63:99:21:40:6e:a0:83:a7:2e:95:db:17:d7:e0:
                    ce:bf:c6:96:af:da:32:e5:fa:da:e4:85:2b:29:bd:
                    f4:69:f7:51:30:e1:60:bf:2d:0d:85:86:28:12:f5:
                    17:a7:d0:45:14:78:36:63:08:c8:b1:f6:8a:d8:4d:
                    41:08:fd:54:db:38:1c:52:e8:4b:73:c6:ad:da:aa:
                    14:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:10:2B:DB:80:A4:12:67:37:B7:E7:07:FE:D0:53:16:65:33:7F:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/61de2fde-0f2f-369e-853f-b1e9940a1d30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl

            X509v3 Authority Key Identifier:
                keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:119:50be::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:36:87:00:ca:08:e9:80:f5:ed:dc:74:cc:59:12:b7:dc:1b:
         26:27:94:6c:af:29:13:2c:1c:e4:85:82:f6:3f:48:73:9a:3c:
         77:a3:b7:b6:a1:02:db:7a:b8:a2:9c:89:71:51:c1:9f:56:16:
         c0:d7:77:c4:4f:b6:22:39:2f:7f:b5:f6:91:29:ad:e8:2d:5a:
         82:09:9c:04:99:91:03:84:3d:f4:c9:77:71:0f:5e:1e:44:4b:
         cd:91:2c:83:3a:f6:50:d3:8b:63:41:52:16:a3:ed:9a:d2:c6:
         85:70:05:ad:1a:82:42:22:d3:b2:9c:9c:6e:6a:c8:2e:46:9e:
         0a:54:41:dd:2f:54:a7:1e:e7:d5:f0:51:ad:4c:f9:b4:72:d8:
         ae:64:c9:f2:c1:c5:4a:30:30:52:71:3e:a1:be:34:1b:87:02:
         a4:d9:55:f1:ed:39:fa:72:2d:a3:1b:55:1c:62:4d:aa:3e:c3:
         d4:54:4d:66:5c:8a:b0:ca:eb:33:24:67:f8:1e:b1:dd:98:e6:
         80:4f:0d:3b:40:72:86:75:db:ae:14:c9:94:c4:cf:57:bb:6e:
         d6:fd:57:eb:55:41:5f:3f:07:65:da:79:bf:a1:46:8a:eb:23:
         26:b8:00:bd:23:d3:cd:cc:eb:1f:cd:cf:f7:54:a9:93:c2:dc:
         ba:cb:38:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----