Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f5a80587-5b8f-311a-8f79-57c5652bc376.roa
File:                     f5a80587-5b8f-311a-8f79-57c5652bc376.roa (raw, json)
Hash identifier:          y6KI+mms0RpgdZtFJyPIBZLb5oBPdL4eJU4slOmGpbU=
Subject key identifier:   BC:14:B6:32:28:7B:4B:BA:A0:15:A7:5C:64:7A:69:D4:9F:EE:0D:20
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285839B8D250B1FB15774EA52FA8A0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f5a80587-5b8f-311a-8f79-57c5652bc376.roa
Signing time:             Mon 26 Apr 2021 04:00:00 +0000
ROA not before:           Mon 26 Apr 2021 04:00:00 +0000
ROA not after:            Sat 29 Jul 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        2607:f8b0:4008::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:b8:d2:50:b1:fb:15:77:4e:a5:2f:a8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Apr 26 04:00:00 2021 GMT
            Not After : Jul 29 04:00:00 2023 GMT
        Subject: CN=8a5a7b04-4e35-4bf5-ab21-868c5e7aaab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dd:4f:7d:f4:35:7d:7b:a6:cc:cf:cf:12:d0:
                    fb:ef:e1:6c:27:c0:f7:e9:99:a8:33:e5:3b:55:34:
                    ae:6b:5c:5c:fe:b3:76:60:16:d4:f2:5d:f1:39:4c:
                    00:2f:3e:18:cc:4b:bd:79:c4:a3:77:fb:ff:8c:9f:
                    17:fc:00:15:aa:e5:f7:64:6b:86:ea:71:90:57:21:
                    82:c6:0a:65:54:5d:9a:d0:35:af:7a:95:ae:f4:28:
                    ca:56:57:fc:f9:73:5b:c6:0c:bd:43:fb:d5:59:7d:
                    d6:81:7d:d6:fe:31:a8:ea:cc:5d:f7:45:e8:74:83:
                    1f:4d:22:eb:a1:57:9b:92:ea:93:2c:76:fd:45:67:
                    d0:a5:f2:34:36:c3:58:e9:24:2e:51:f6:ec:56:f4:
                    3a:52:bc:ea:ad:30:fe:1a:89:00:48:d5:a3:61:1e:
                    c0:ba:78:0a:eb:f7:9b:2a:f0:ed:60:49:a0:c4:42:
                    a0:2e:2f:21:66:6f:53:58:8d:27:5f:c9:71:94:2d:
                    46:96:d3:7c:28:0b:66:ac:5b:4f:a4:a2:2a:4b:ee:
                    7c:5b:b0:07:55:2a:70:a9:82:50:8a:b7:f6:c5:df:
                    b1:90:3b:be:c3:33:9d:7e:33:0b:5f:71:da:ae:51:
                    6e:c8:8a:f7:b1:35:89:c0:8f:82:86:a1:4c:d9:e0:
                    8d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:14:B6:32:28:7B:4B:BA:A0:15:A7:5C:64:7A:69:D4:9F:EE:0D:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f5a80587-5b8f-311a-8f79-57c5652bc376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8b0:4008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d6:e5:bb:08:9a:60:c0:2e:39:ee:0a:9e:1b:14:35:7d:54:
         8a:e9:59:04:25:61:d2:64:cd:3c:f8:2f:10:ec:1e:80:02:8e:
         86:74:32:fb:ea:6c:96:29:69:21:7a:42:35:83:f3:02:8e:1c:
         1a:71:c5:1e:21:6d:33:f8:9c:d3:98:82:43:d9:ba:49:29:11:
         b5:f7:13:56:07:05:12:04:3e:13:83:78:12:84:1c:5f:b8:3c:
         05:a1:07:a5:7e:ed:19:17:5c:6c:01:f4:f5:3a:8f:46:b7:c5:
         06:32:57:bc:3a:10:a6:89:e5:fe:b9:6c:86:e3:5b:cd:4e:b0:
         95:7f:ed:c9:af:c9:bc:84:fa:69:d2:89:9c:82:cf:e3:96:10:
         71:24:9b:a7:91:8d:1f:3e:3d:2b:8c:22:f4:1e:76:2f:6d:77:
         f4:f1:30:3d:05:fe:33:03:ab:46:07:1e:86:4a:81:42:11:55:
         ba:04:82:f8:9f:18:2d:cb:a1:05:d6:4d:ba:5d:96:9d:5c:1c:
         9f:78:bf:08:23:59:21:aa:1b:b7:04:68:42:46:f1:51:d0:2b:
         01:dc:db:85:93:97:8a:62:2e:0d:2a:f2:63:cf:08:f1:a1:63:
         f5:c6:f8:d7:7c:97:05:ae:f7:ce:e0:3c:e5:7a:9e:08:72:73:
         9a:44:d1:4a
-----BEGIN CERTIFICATE-----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