Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f606593b-dbc6-4b4d-9308-6ed517dceb85/40a47c1b-82dd-3f6b-a70f-3dd4d323baec.roa
File:                     40a47c1b-82dd-3f6b-a70f-3dd4d323baec.roa (raw, json)
Hash identifier:          eo1HXKg95tJEyNaAHbYUCvvHouAHZsygN+TR8HE4HD8=
Subject key identifier:   13:7A:78:D9:33:51:65:8F:1F:57:B9:EA:C6:45:39:E8:12:71:AE:91
Certificate issuer:       /CN=f606593b-dbc6-4b4d-9308-6ed517dceb85
Certificate serial:       010D0C9F43285838BE6C9A66D432FEE7BD197298
Authority key identifier: C9:B3:87:B6:18:71:13:3E:08:55:BC:B1:61:B5:BC:F1:2F:82:F9:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f606593b-dbc6-4b4d-9308-6ed517dceb85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f606593b-dbc6-4b4d-9308-6ed517dceb85/40a47c1b-82dd-3f6b-a70f-3dd4d323baec.roa
Signing time:             Wed 27 Jan 2021 05:00:00 +0000
ROA not before:           Wed 27 Jan 2021 05:00:00 +0000
ROA not after:            Tue 02 May 2023 04:00:00 +0000
asID:                     399186
IP address blocks:        2602:fcc5::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:be:6c:9a:66:d4:32:fe:e7:bd:19:72:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f606593b-dbc6-4b4d-9308-6ed517dceb85
        Validity
            Not Before: Jan 27 05:00:00 2021 GMT
            Not After : May  2 04:00:00 2023 GMT
        Subject: CN=e8062c9c-d278-4cff-9fce-5a0dca0ec1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ff:bd:ac:89:84:1e:35:8d:ae:a7:fc:21:76:
                    7b:ce:bb:b9:4e:44:ea:83:ea:3e:a2:6f:ef:44:e7:
                    fb:75:78:87:3e:b3:11:cb:a8:ee:96:d3:3d:4f:a0:
                    8b:65:f3:8d:b4:d2:34:45:eb:0c:99:5c:c2:1c:32:
                    86:ba:e3:58:dc:45:b4:20:f8:15:d1:d1:56:c5:d1:
                    21:92:56:9e:73:c4:cf:ca:5f:9f:01:b7:8f:bd:b5:
                    ab:b0:dd:9e:ac:68:f9:28:c4:57:ad:b0:07:54:eb:
                    a1:6a:9f:87:e1:29:be:28:f1:a2:9b:ed:46:7e:00:
                    fa:a5:eb:8f:6b:2b:be:95:07:4c:6a:40:c5:7a:a4:
                    96:34:74:c3:e7:b5:c9:cc:c3:7d:ba:82:80:28:b7:
                    0f:85:0d:9f:2c:18:68:ba:77:17:7d:04:11:51:24:
                    c1:c5:61:18:a7:ca:ee:dd:44:3a:e7:72:65:7a:cf:
                    c9:75:7d:d7:45:e3:83:6f:0c:34:7b:0b:70:3e:dc:
                    c3:64:fb:7c:26:7c:0e:e8:b8:a9:2c:34:a1:1f:42:
                    77:1c:9c:85:42:64:77:6b:80:d8:6b:6f:fb:42:3c:
                    99:21:d2:d1:e5:7e:90:57:8d:ea:aa:3b:6a:28:07:
                    6d:22:f0:43:1e:62:8d:9f:ae:e0:1e:53:f0:7b:96:
                    d6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7A:78:D9:33:51:65:8F:1F:57:B9:EA:C6:45:39:E8:12:71:AE:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f606593b-dbc6-4b4d-9308-6ed517dceb85/40a47c1b-82dd-3f6b-a70f-3dd4d323baec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f606593b-dbc6-4b4d-9308-6ed517dceb85/f606593b-dbc6-4b4d-9308-6ed517dceb85.crl

            X509v3 Authority Key Identifier:
                keyid:C9:B3:87:B6:18:71:13:3E:08:55:BC:B1:61:B5:BC:F1:2F:82:F9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f606593b-dbc6-4b4d-9308-6ed517dceb85.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc5::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:6f:e8:f1:bf:a6:11:66:5e:dd:2f:4a:bb:66:06:a6:f9:26:
         10:7d:66:9a:69:13:26:e6:0a:07:e8:94:ed:e5:a6:b3:ff:b9:
         6b:9c:d5:a0:74:c0:38:95:fa:ac:35:ba:73:ed:77:b3:79:b1:
         b2:fb:98:8c:50:75:af:c8:52:9c:d0:52:68:d1:b6:62:c5:6c:
         8f:ae:43:f1:4c:0c:e7:89:b2:96:37:06:b6:38:97:97:35:4d:
         ff:01:c7:dd:1b:84:f2:1d:4a:f9:ce:8e:4b:ea:1e:eb:96:e2:
         46:b2:eb:e5:d6:38:a9:76:3b:8c:ee:c3:68:a9:ed:26:6e:0c:
         a7:76:62:55:b0:c2:a4:95:64:f1:cd:0c:0e:e2:ab:97:b0:5a:
         c4:3d:cf:20:d0:4d:f9:d7:18:77:e9:9a:e8:bb:93:01:45:44:
         bc:30:e4:4e:d6:55:9f:8a:8f:0f:ed:4b:a8:e5:54:30:d5:91:
         e1:bb:f6:ec:b6:a2:58:82:eb:e5:df:65:b0:6e:73:89:fa:81:
         b0:44:fd:0b:36:54:72:4d:bf:1d:88:5a:e2:70:e2:82:28:e6:
         83:b4:5f:5e:42:5d:e1:0a:7b:d3:ee:fc:33:7f:c8:cf:24:7f:
         0b:19:39:e9:3f:c3:b9:cf:a5:e7:4f:08:5d:17:8c:b2:24:6e:
         b6:e4:85:6f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWDi+bJpm1DL+570ZcpgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwNjU5M2ItZGJjNi00YjRkLTkzMDgtNmVkNTE3ZGNl
Yjg1MB4XDTIxMDEyNzA1MDAwMFoXDTIzMDUwMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZTgwNjJjOWMtZDI3OC00Y2ZmLTlmY2UtNWEwZGNhMGVjMWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP+9rImEHjWNrqf8IXZ7zru5TkTqg+o+om/v
ROf7dXiHPrMRy6jultM9T6CLZfONtNI0ResMmVzCHDKGuuNY3EW0IPgV0dFWxdEh
klaec8TPyl+fAbePvbWrsN2erGj5KMRXrbAHVOuhap+H4Sm+KPGim+1GfgD6peuP
ayu+lQdMakDFeqSWNHTD57XJzMN9uoKAKLcPhQ2fLBhouncXfQQRUSTBxWEYp8ru
3UQ653Jles/JdX3XReODbww0ewtwPtzDZPt8JnwO6LipLDShH0J3HJyFQmR3a4DY
a2/7QjyZIdLR5X6QV43qqjtqKAdtIvBDHmKNn67gHlPwe5bWXQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBN6eNkzUWWPH1e56sZFOegSca6RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mNjA2
NTkzYi1kYmM2LTRiNGQtOTMwOC02ZWQ1MTdkY2ViODUvNDBhNDdjMWItODJkZC0z
ZjZiLWE3MGYtM2RkNGQzMjNiYWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjYwNjU5M2ItZGJjNi00YjRkLTkz
MDgtNmVkNTE3ZGNlYjg1L2Y2MDY1OTNiLWRiYzYtNGI0ZC05MzA4LTZlZDUxN2Rj
ZWI4NS5jcmwwHwYDVR0jBBgwFoAUybOHthhxEz4IVbyxYbW88S+C+QgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mNjA2NTkzYi1kYmM2LTRiNGQtOTMwOC02ZWQ1
MTdkY2ViODUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8xQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAW2/o8b+mEWZe3S9Ku2YGpvkmEH1mmmkTJuYKB+iU7eWms/+5a5zV
oHTAOJX6rDW6c+13s3mxsvuYjFB1r8hSnNBSaNG2YsVsj65D8UwM54myljcGtjiX
lzVN/wHH3RuE8h1K+c6OS+oe65biRrLr5dY4qXY7jO7DaKntJm4Mp3ZiVbDCpJVk
8c0MDuKrl7BaxD3PINBN+dcYd+ma6LuTAUVEvDDkTtZVn4qPD+1LqOVUMNWR4bv2
7LaiWILr5d9lsG5zifqBsET9CzZUck2/HYha4nDigijmg7RfXkJd4Qp70+78M3/I
zyR/Cxk56T/Duc+l508IXReMsiRutuSFbw==
-----END CERTIFICATE-----