Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/65d42f90-d9ce-3710-b20f-f656bf130590.roa
File:                     65d42f90-d9ce-3710-b20f-f656bf130590.roa (raw, json)
Hash identifier:          Fq6b1fgbrKwwYnH5hVugeezPKIkkwtKD23hI4j/AVRw=
Subject key identifier:   05:46:AA:A5:77:75:80:FD:8D:F4:D0:EF:24:19:03:1E:C2:C7:B5:7A
Certificate issuer:       /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
Certificate serial:       010D0C9F4328576D51CC73C042CFC1737C868C66
Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/65d42f90-d9ce-3710-b20f-f656bf130590.roa
Signing time:             Thu 23 Jul 2020 16:34:19 +0000
ROA not before:           Thu 23 Jul 2020 04:00:00 +0000
ROA not after:            Wed 26 Oct 2022 04:00:00 +0000
asID:                     20115
IP address blocks:        104.171.208.0/20 maxlen: 20
                          2602:fd43::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:7c:86:8c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
        Validity
            Not Before: Jul 23 04:00:00 2020 GMT
            Not After : Oct 26 04:00:00 2022 GMT
        Subject: CN=50c82b39-4bf4-4354-b81e-c99b1eb41cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ae:7f:67:55:4e:c3:6b:e0:89:f4:5b:de:9c:
                    e5:05:a1:9f:9f:17:81:ac:f7:01:e1:c6:2a:ae:58:
                    03:1a:95:47:fb:6f:6a:e0:cd:3c:39:63:4b:89:75:
                    a9:fc:4f:34:a5:69:da:23:f5:86:ac:e7:8e:19:15:
                    d8:57:01:33:21:fd:23:ea:51:71:6c:9c:12:e3:03:
                    45:4c:a6:56:cc:2f:63:c4:8b:c1:d8:6c:45:62:75:
                    5b:4a:2d:1f:23:fe:f5:49:d9:fe:c9:f9:41:67:fd:
                    43:fd:64:58:87:5e:03:65:be:70:54:a2:a2:3d:cd:
                    23:e8:3d:41:37:88:ca:e0:8b:07:f4:a1:de:70:db:
                    34:93:1a:3c:fb:a7:1a:4d:46:69:8d:dd:ae:4c:c8:
                    da:32:b0:f1:8a:ea:6c:a9:45:fb:52:3f:20:16:bd:
                    54:01:42:13:a0:ac:08:57:78:6f:3c:76:be:60:ba:
                    a9:c0:bf:e3:6d:77:80:e4:85:f3:74:74:eb:1b:b1:
                    3b:ea:49:45:4f:c1:bf:74:9c:c6:1e:70:73:87:ba:
                    de:4e:f0:3f:50:e5:46:6a:32:b9:5e:36:a3:f8:dc:
                    5b:a0:4d:09:12:c2:81:2c:f6:13:79:45:85:44:3e:
                    ea:06:06:96:f1:4e:3f:b6:f1:60:a6:36:eb:33:a2:
                    aa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:46:AA:A5:77:75:80:FD:8D:F4:D0:EF:24:19:03:1E:C2:C7:B5:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/65d42f90-d9ce-3710-b20f-f656bf130590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.208.0/20
                IPv6:
                  2602:fd43::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:10:eb:7e:a8:b5:a2:c8:0e:b5:a6:be:27:cd:48:71:47:6d:
         bc:8b:2a:3a:5a:06:c5:0e:77:b8:5d:6b:bf:53:6f:fc:02:85:
         dd:69:b2:37:32:a5:84:30:c6:5e:bb:06:0e:c9:24:06:21:28:
         c2:80:d1:18:38:8e:34:ff:de:15:80:7f:31:fa:bf:7a:be:74:
         ab:17:02:b6:1a:4d:6b:d3:91:09:6b:93:c7:81:34:c6:be:c7:
         ce:e3:fe:20:0b:12:7d:65:6f:8a:dc:fa:0e:37:72:33:66:a7:
         7a:e5:63:0a:14:75:3f:f6:0c:f7:c4:a5:55:18:3a:6b:c9:5b:
         89:12:91:a8:ab:25:9d:e2:aa:78:dd:cc:93:45:2d:dd:8b:23:
         80:1d:3c:24:fb:8e:21:80:34:31:82:37:91:2e:cd:6f:1a:04:
         aa:78:3d:5b:1d:16:1a:6b:d6:7c:f2:da:96:3d:03:d6:f4:b8:
         4e:c9:d2:26:38:d6:43:27:48:b9:17:22:46:98:fb:bb:89:14:
         86:d9:e2:e7:34:92:32:6d:5c:98:9b:c9:61:a5:e2:9d:19:d3:
         c3:ec:2a:ec:a0:d4:aa:06:13:ba:c7:a0:a4:97:b3:57:07:26:
         a4:6f:7f:a5:d1:69:11:4c:12:74:44:ee:12:dd:c5:11:84:4e:
         6e:d1:35:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----