Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/6551187a-c84e-3a78-964d-e8e9b20783dd.roa
File:                     6551187a-c84e-3a78-964d-e8e9b20783dd.roa (raw, json)
Hash identifier:          z5EeW4n9vn0OVVxbtpx92IWQTk3mUTWqVyrgmfjhdeA=
Subject key identifier:   C2:43:33:3A:9D:F2:0B:5E:7D:A6:49:57:A4:1C:7E:A5:66:DC:D4:FE
Certificate issuer:       /CN=481eff9a-c8b9-4eed-af8e-c3859c22b5c8
Certificate serial:       010D0C9F4328576D51CC73C042CFC15BD945E386
Authority key identifier: 1A:2E:04:DE:C8:91:38:25:BB:18:2E:26:E2:C0:98:78:E7:3A:BA:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/6551187a-c84e-3a78-964d-e8e9b20783dd.roa
Signing time:             Fri 05 May 2017 15:41:27 +0000
ROA not before:           Tue 18 Apr 2017 04:00:00 +0000
ROA not after:            Thu 30 Jun 2022 04:00:00 +0000
asID:                     393668
IP address blocks:        2620:12f:6000::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:5b:d9:45:e3:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481eff9a-c8b9-4eed-af8e-c3859c22b5c8
        Validity
            Not Before: Apr 18 04:00:00 2017 GMT
            Not After : Jun 30 04:00:00 2022 GMT
        Subject: CN=954cde4b-2cba-4b3c-ac76-0a519328913c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:66:0b:42:31:de:07:50:ad:6b:2c:b5:6c:
                    3a:0d:12:5b:46:41:9d:b1:61:0f:3e:f8:c4:02:1e:
                    01:ec:e7:60:10:74:aa:49:d5:8a:d8:0e:ab:d6:eb:
                    c9:d9:4b:df:38:3e:0b:21:6d:3c:1a:ed:e9:fc:ac:
                    f0:23:c0:e0:50:40:b2:30:cc:2b:ac:43:67:27:0f:
                    50:ce:b7:02:74:81:4a:1b:52:a5:98:3d:dd:ee:91:
                    b6:6d:07:70:db:6f:18:cb:f2:10:e2:ea:da:0a:40:
                    5c:63:59:76:ae:8a:d2:db:81:67:33:d4:59:5e:84:
                    29:44:5e:47:51:73:88:f0:60:83:c5:ff:90:97:78:
                    2e:f8:6d:44:7c:8f:d9:dd:18:31:79:23:15:9a:2a:
                    5f:3a:09:0d:3a:28:b3:b2:b8:81:38:47:e3:74:5c:
                    7c:23:de:c6:ae:e9:39:dd:0e:d1:e9:18:9d:63:c0:
                    7c:99:90:9c:b7:0e:31:24:b7:eb:fb:d1:ee:43:b9:
                    be:e5:db:6a:dc:42:eb:df:80:eb:26:f4:3f:b1:1d:
                    1e:30:37:0b:20:11:94:01:db:d4:7c:b7:9e:c6:c1:
                    cd:f1:15:fb:f8:64:bf:11:c0:ba:76:ab:b8:98:b7:
                    7d:4e:5a:bf:36:77:ec:dc:91:b5:d7:70:26:e3:b4:
                    85:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:43:33:3A:9D:F2:0B:5E:7D:A6:49:57:A4:1C:7E:A5:66:DC:D4:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/6551187a-c84e-3a78-964d-e8e9b20783dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.crl

            X509v3 Authority Key Identifier:
                keyid:1A:2E:04:DE:C8:91:38:25:BB:18:2E:26:E2:C0:98:78:E7:3A:BA:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12f:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:3d:64:f1:dc:48:28:10:6e:b6:a8:84:8c:f6:74:21:67:f1:
         cc:e2:75:db:d5:1c:7d:57:31:b4:1e:94:8a:a7:ca:68:c6:2c:
         0c:94:1d:3c:79:12:6c:39:65:e5:59:33:be:b9:5e:01:ce:30:
         7d:4f:0c:34:61:b5:9a:1b:e7:ce:aa:48:63:d8:fc:83:6f:77:
         8e:26:85:cd:45:bd:62:37:d7:9d:4e:48:df:dd:b6:a9:fb:28:
         3e:e1:d5:f3:c7:6f:82:a6:2b:72:3c:87:1b:e2:1e:bb:bf:03:
         74:31:6f:7c:a2:6e:8e:37:bd:b1:e1:39:a6:48:06:6e:9b:42:
         d9:36:e7:87:86:22:5b:b8:e3:72:0f:6b:ed:27:22:48:bb:c1:
         e7:03:b1:b3:ef:c8:48:34:7e:ac:b3:4f:e5:0e:2c:0e:6f:fa:
         21:70:db:9f:66:a8:e7:c7:74:67:15:b7:99:9d:c9:c6:88:be:
         85:30:d9:47:db:ce:b3:9b:8e:ac:fe:ab:cd:6e:53:1d:ac:6b:
         a5:b1:1e:9a:bc:87:44:74:27:c9:31:87:90:4a:fd:bc:c7:fb:
         d1:a7:54:54:68:5a:84:6a:0f:a6:7b:ee:03:28:be:cf:c7:88:
         b2:a7:80:fe:bc:db:01:56:48:3c:02:34:13:49:df:db:47:ef:
         57:6f:9d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----