Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/1f12da25-a154-35e8-869f-d37de2d505ad.roa
File:                     1f12da25-a154-35e8-869f-d37de2d505ad.roa (raw, json)
Hash identifier:          ElbDYRHXd8/MVHsJx4nyzGIIkQnkLP/Yv0Nmz4I8C0U=
Subject key identifier:   9A:F8:B4:40:F2:BA:66:2B:56:98:E4:D9:A1:87:54:09:23:09:9C:DA
Certificate issuer:       /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
Certificate serial:       010D0C9F4328576D51CC73C042CFC1737C82F902
Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/1f12da25-a154-35e8-869f-d37de2d505ad.roa
Signing time:             Thu 23 Jul 2020 16:30:25 +0000
ROA not before:           Thu 23 Jul 2020 04:00:00 +0000
ROA not after:            Wed 26 Oct 2022 04:00:00 +0000
asID:                     63267
IP address blocks:        104.171.208.0/20 maxlen: 20
                          2602:fd43::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:7c:82:f9:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
        Validity
            Not Before: Jul 23 04:00:00 2020 GMT
            Not After : Oct 26 04:00:00 2022 GMT
        Subject: CN=be039fd2-edae-4b11-b68f-91c8f3e5f8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7f:d9:5d:3f:89:e5:82:77:46:43:3c:2b:33:
                    20:dc:97:ec:a8:28:51:96:cd:ab:d8:38:0c:60:05:
                    51:75:7f:2a:e2:de:f2:40:f3:ca:19:8b:57:f1:37:
                    e6:f4:2f:2a:93:dd:a1:aa:87:92:69:16:21:32:f7:
                    dc:51:9c:ee:ab:7e:8d:f0:4e:9e:15:5e:ad:53:25:
                    eb:68:6a:40:98:5d:0b:87:db:e0:1e:a3:76:98:fa:
                    b4:a6:3a:fb:e7:f1:f9:81:3b:ed:55:97:1b:cf:ae:
                    33:c3:1d:f0:58:e4:4c:6b:21:57:cb:ef:aa:45:61:
                    7c:73:f2:b7:27:e7:0a:46:dd:3d:5c:92:ae:7c:b3:
                    22:c6:99:14:96:1d:1f:65:4f:46:e7:c5:0d:48:d2:
                    36:5a:2b:ad:e1:8d:c8:1e:0b:e7:cf:0d:de:a3:f2:
                    ad:4c:dc:c0:0f:55:68:1b:98:ff:c0:f4:3d:ad:6c:
                    f9:21:71:a6:a4:66:62:42:59:41:77:f8:99:7a:11:
                    c5:af:d3:93:90:6a:10:5a:2d:db:09:91:81:16:1b:
                    05:dc:16:9d:1a:0a:22:4a:5d:e5:12:e9:41:e8:cd:
                    d3:7b:79:ca:24:f9:53:de:a6:71:8d:80:6b:fb:b3:
                    0f:f7:51:68:c4:71:1a:de:92:de:7e:b2:12:5a:04:
                    ad:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F8:B4:40:F2:BA:66:2B:56:98:E4:D9:A1:87:54:09:23:09:9C:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/1f12da25-a154-35e8-869f-d37de2d505ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.208.0/20
                IPv6:
                  2602:fd43::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:33:ce:f6:45:cc:ac:00:a8:8f:59:60:51:ab:87:b2:ef:51:
         29:5c:6f:56:29:21:25:08:fd:2e:f8:ee:26:45:68:e4:c0:05:
         ef:7c:26:73:b6:13:d9:13:9f:93:c0:ba:df:f9:f3:c4:4e:bf:
         da:40:ce:ba:b9:73:f0:96:c6:0a:35:88:17:b1:6d:10:67:de:
         79:3c:d2:a1:65:7f:87:e3:fe:ae:1f:f8:f5:d8:42:90:64:a2:
         b8:20:61:40:c9:12:df:62:23:05:74:a4:55:df:7a:8a:55:7e:
         f0:d7:f2:32:7c:f7:b5:a2:dc:c4:b0:00:08:6c:3b:78:c9:b3:
         3b:44:12:c9:a3:90:58:9f:34:84:ce:48:8c:c6:7e:7a:47:f4:
         46:3b:4e:bb:00:81:fb:a2:83:45:98:7b:1f:1b:cd:6c:ff:59:
         25:07:ca:9f:2f:6e:81:ba:1c:3a:51:58:2a:01:f8:3b:77:d9:
         8b:99:69:b3:0f:11:86:28:ed:08:c0:cd:93:16:a8:34:a7:47:
         8f:0f:c9:dc:3b:cb:da:95:eb:c0:81:d3:29:67:18:11:40:20:
         5e:e7:6a:e1:23:91:7f:56:28:e0:f0:ec:03:40:0f:dc:0d:b9:
         04:07:cf:4b:40:02:f5:9c:8a:fc:43:6d:8a:3e:8d:7a:0d:9f:
         f9:8d:54:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----