Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/0bc1c2dd-d461-37cf-80b9-33228663ced6.roa
File:                     0bc1c2dd-d461-37cf-80b9-33228663ced6.roa (raw, json)
Hash identifier:          Y0XEGn/VmG9IV6HnnBpvZbyGAkAwfAgoAb4xKFxtAdg=
Subject key identifier:   68:E5:4E:FE:58:2E:9F:EF:EB:F1:33:94:45:2C:41:20:18:82:19:E9
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328576D51CC73C042CFC17020EB7613
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/0bc1c2dd-d461-37cf-80b9-33228663ced6.roa
Signing time:             Fri 07 Feb 2020 18:31:07 +0000
ROA not before:           Tue 25 Sep 2018 04:00:00 +0000
ROA not after:            Thu 12 May 2022 04:00:00 +0000
asID:                     46407
IP address blocks:        2001:19f0:a06::/48 maxlen: 48
                          2001:19f0:a07::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:20:eb:76:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Sep 25 04:00:00 2018 GMT
            Not After : May 12 04:00:00 2022 GMT
        Subject: CN=0b650c53-dec8-4d35-874e-b4161798d2b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3d:a3:b9:f7:bb:17:02:e4:e7:1a:3f:f7:bf:
                    00:ea:15:a2:f0:58:bb:f4:4f:7a:10:65:53:17:39:
                    24:7d:a9:1a:08:2f:91:94:d5:69:81:d0:21:d0:34:
                    00:cf:e4:dc:b9:74:42:1e:0b:48:3e:95:5d:47:51:
                    26:8a:d7:cd:9b:c6:5f:5f:91:2e:55:05:46:52:47:
                    46:8b:29:a8:70:c6:9c:f0:26:67:dd:c6:0c:fe:73:
                    41:b5:80:b9:9a:33:56:1d:92:ca:1b:33:c8:32:42:
                    0a:ee:4d:5f:ec:ff:f8:9b:79:e8:58:ba:04:50:63:
                    a2:e4:f9:16:56:cf:fb:a5:69:aa:a2:8f:08:99:ea:
                    ec:1b:b2:66:b7:35:5f:f7:bf:b4:19:d5:a6:9c:7f:
                    1f:3e:ad:c2:5d:14:3b:36:94:67:a6:3f:04:be:e4:
                    73:72:45:0b:ef:91:b9:c4:c5:04:b1:33:39:ff:11:
                    29:6e:ff:1c:c4:ae:ce:d6:6c:02:81:eb:db:5e:f2:
                    af:98:c2:b2:c6:3c:6e:26:dd:bd:9b:d4:3e:47:fb:
                    c7:17:fb:64:88:16:df:43:60:3f:a4:3c:94:bf:57:
                    2d:6b:ec:2f:5f:c4:4d:c2:2f:cc:7a:29:b3:e9:c2:
                    9b:2d:7a:a1:6c:5f:0f:e4:de:c6:50:8f:e4:cb:20:
                    fa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E5:4E:FE:58:2E:9F:EF:EB:F1:33:94:45:2C:41:20:18:82:19:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/0bc1c2dd-d461-37cf-80b9-33228663ced6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19f0:a06::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e1:03:df:aa:5d:4e:4e:d4:37:ed:74:3c:c9:f3:51:bc:99:
         99:3d:ce:0c:2b:58:a0:9b:1c:65:93:6e:ca:ea:f7:f3:fe:fc:
         81:74:58:9d:21:8a:1c:f8:c3:b6:49:b4:67:fe:30:aa:88:ff:
         67:bc:80:ff:86:49:6d:d0:f6:63:e3:2c:20:78:2f:57:af:f1:
         23:9e:2f:4e:9d:58:18:e8:1a:20:ff:4e:3e:a2:c3:0c:bd:e6:
         1a:54:5b:7e:41:63:d5:b9:89:63:f7:c4:27:12:b3:8d:60:9d:
         47:e9:c8:f5:1a:93:d9:c5:9a:21:16:87:d1:23:5d:c0:e1:42:
         0f:b3:c6:1f:b8:a2:47:90:e8:2e:04:53:87:d2:f2:ea:e2:cd:
         6c:2a:e0:ad:ff:bd:5c:84:84:9d:fa:bb:92:c7:da:71:63:89:
         e3:e0:ca:02:98:f8:28:79:ec:5e:14:f0:92:2f:85:e7:5d:1a:
         fe:1f:7a:01:d5:cf:08:55:7a:a3:c1:1c:99:1f:e6:5f:f3:6b:
         8a:b8:cc:f2:61:b2:c6:bd:1e:9f:d7:8e:c4:78:1c:43:57:24:
         c9:ca:97:7a:8a:bb:b6:63:96:53:94:53:28:6c:ee:85:73:7f:
         66:28:69:2f:9b:b9:9b:48:17:90:3c:b3:3f:81:4e:01:9c:07:
         6e:93:08:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----