Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/6e222c25-4cef-32d1-93b8-8e8061858da2.roa
File:                     6e222c25-4cef-32d1-93b8-8e8061858da2.roa (raw, json)
Hash identifier:          ThbD3YTOek/HJtAGUT/yeySftv6SXXxN6Fgq/I41T98=
Subject key identifier:   26:6C:B0:1E:9A:75:CC:D9:0A:FA:42:5B:43:C1:3B:B1:DA:30:A9:CE
Certificate issuer:       /CN=2b3c022e-4679-4530-ad3a-1df3041efdd2
Certificate serial:       010D0C9F4328576D51CC73C042CFC15B93DE7269
Authority key identifier: FE:C8:AB:1C:76:C7:3A:F5:45:0F:87:45:C2:CB:BC:0D:3E:BC:F5:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/6e222c25-4cef-32d1-93b8-8e8061858da2.roa
Signing time:             Sat 22 Apr 2017 04:14:40 +0000
ROA not before:           Tue 20 Nov 2012 05:00:00 +0000
ROA not after:            Sun 20 Nov 2022 05:00:00 +0000
asID:                     395622
IP address blocks:        63.245.220.0/24 maxlen: 24
                          2620:101:80f8::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:5b:93:de:72:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b3c022e-4679-4530-ad3a-1df3041efdd2
        Validity
            Not Before: Nov 20 05:00:00 2012 GMT
            Not After : Nov 20 05:00:00 2022 GMT
        Subject: CN=5f3ead3b-5127-4c59-9334-c2eee98399c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1b:b3:4a:1b:00:60:c3:29:24:6e:35:b3:55:
                    c2:9e:a5:19:cd:3e:55:15:ea:81:56:54:3a:75:02:
                    41:e5:9e:cc:0c:71:3e:fc:31:06:6f:84:d2:0e:df:
                    9a:c8:da:fb:b6:41:f6:38:54:0b:89:b2:a4:94:3d:
                    4e:2e:40:e4:fa:96:f8:b3:37:57:4f:04:ee:e3:75:
                    a2:53:05:a7:6a:ed:07:23:67:92:d9:b5:08:78:7e:
                    61:bd:43:61:72:2c:6e:5e:ce:2b:a9:83:ce:93:cf:
                    9a:d7:4d:b4:02:2c:4b:f5:5a:01:8c:a3:8c:df:aa:
                    f9:0f:6d:f3:11:90:5b:9c:8f:68:2e:75:40:df:37:
                    a7:d7:2b:c7:de:60:33:db:e5:fb:7a:fc:2b:85:6c:
                    1a:da:7a:25:7c:03:03:4c:b1:2e:d7:58:f4:10:5e:
                    7c:3b:e8:a8:69:85:bf:bc:f0:6c:90:9d:3a:53:5e:
                    5d:67:22:1a:b4:8a:8d:85:3e:4d:00:70:ac:aa:54:
                    47:9c:d0:5f:ce:a3:54:d5:04:42:e2:5d:52:61:22:
                    7f:cc:89:cd:d4:a4:1d:b1:e8:13:3c:15:8c:3b:95:
                    1b:1f:1a:c7:e6:8a:69:99:89:6b:81:9a:bf:b3:52:
                    28:89:71:e5:a6:12:dc:df:9c:d8:cb:8f:5b:17:22:
                    79:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6C:B0:1E:9A:75:CC:D9:0A:FA:42:5B:43:C1:3B:B1:DA:30:A9:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/6e222c25-4cef-32d1-93b8-8e8061858da2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/2b3c022e-4679-4530-ad3a-1df3041efdd2.crl

            X509v3 Authority Key Identifier:
                keyid:FE:C8:AB:1C:76:C7:3A:F5:45:0F:87:45:C2:CB:BC:0D:3E:BC:F5:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.220.0/24
                IPv6:
                  2620:101:80f8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:13:df:7c:15:e3:f9:3c:ae:f2:e1:8a:19:cd:7a:b9:d5:1c:
         3f:bd:7a:08:64:db:cb:64:ba:02:e5:4a:f1:d4:2b:5c:db:ab:
         3a:e3:4f:2b:a6:94:bb:0b:7d:c0:d6:a4:79:2c:b2:f2:9d:08:
         c3:03:06:37:da:76:57:7b:2b:cb:f8:1b:83:43:58:3a:33:3f:
         7f:d3:f0:08:29:ae:33:7d:a9:78:b5:1b:54:31:26:11:3c:ee:
         90:b1:80:6e:89:73:79:a4:03:cd:c5:26:65:b6:8c:fe:11:cb:
         a4:15:53:e2:e6:75:32:e1:69:6a:2d:96:8f:d5:00:57:48:87:
         06:7d:f0:5a:ce:bc:de:36:36:06:15:2a:a5:9e:92:07:71:61:
         e6:89:d4:4a:46:8d:9f:4b:49:26:4f:d9:29:7e:bb:30:bb:86:
         40:7e:39:08:01:36:90:28:c5:91:c0:db:6d:b2:25:48:dd:04:
         53:be:2c:eb:2c:bb:b0:0d:93:c1:2c:5b:3d:ad:9f:f1:94:69:
         09:67:4e:b5:c3:7a:34:7f:f6:ec:d2:6c:63:d6:a4:c1:ae:89:
         b1:6b:6b:91:52:60:61:a3:63:07:47:d2:6e:c3:12:a6:df:6d:
         e3:45:24:05:b4:23:20:5f:f7:7f:90:dc:0c:8e:18:42:6a:c3:
         fa:ab:58:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----