Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/dc551ad9-2f25-3879-aa7d-44b6adb862e1.roa
File:                     dc551ad9-2f25-3879-aa7d-44b6adb862e1.roa (raw, json)
Hash identifier:          o612HkzyBOs3nuCQPxSfAE9MXuR1gQ9JQt7Hb3NT1mM=
Subject key identifier:   62:6F:31:38:8F:B5:95:89:F0:EC:AB:DF:5C:2E:E7:3D:50:6E:1A:F2
Certificate issuer:       /CN=8780f59d-efa1-4d8e-b7c0-66773735a31d
Certificate serial:       68769CE367CA95A40D07D35338883385F138FE
Authority key identifier: 6E:AA:38:FA:81:26:FD:B9:F1:3B:FC:A7:1E:F9:74:FC:4E:6D:D4:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/dc551ad9-2f25-3879-aa7d-44b6adb862e1.roa
Signing time:             Thu 11 Oct 2012 15:56:40 +0000
ROA not before:           Thu 11 Oct 2012 04:00:00 +0000
ROA not after:            Tue 11 Oct 2022 04:00:00 +0000
asID:                     11711
IP address blocks:        2607:f068::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:76:9c:e3:67:ca:95:a4:0d:07:d3:53:38:88:33:85:f1:38:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8780f59d-efa1-4d8e-b7c0-66773735a31d
        Validity
            Not Before: Oct 11 04:00:00 2012 GMT
            Not After : Oct 11 04:00:00 2022 GMT
        Subject: CN=aedb0356-3949-4b0f-9cfe-6b667e6a1c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6a:29:62:06:a5:a5:55:74:d6:de:2d:19:a8:
                    b8:42:ae:2f:df:64:fd:0e:f0:c9:a5:e1:70:25:2c:
                    02:fa:15:d6:ce:b1:32:5d:30:3b:e6:96:d2:94:40:
                    32:d8:06:d0:69:f7:69:2d:3a:eb:22:79:6c:ef:26:
                    78:e1:ca:19:93:15:da:5a:61:9b:16:fa:b0:c6:01:
                    39:be:f4:41:9f:17:50:01:24:c2:b3:0e:26:cd:0d:
                    fd:1d:70:9a:ff:24:eb:67:b5:f3:f7:08:eb:c7:50:
                    6a:39:44:e0:0e:47:a3:8f:de:a5:d1:c7:4e:d1:2a:
                    c7:08:42:8b:32:fd:7c:a8:9d:bd:7a:45:64:1d:09:
                    c9:c7:71:29:82:8c:9c:cf:ed:3b:61:70:77:31:1c:
                    d5:27:fa:4c:cc:de:0c:8d:02:49:3d:bc:f8:78:2d:
                    2a:aa:50:ff:0a:78:49:7a:c0:c5:1a:9d:77:4c:0d:
                    d5:64:d2:48:5f:fd:1b:b4:bf:d4:d0:98:98:ab:31:
                    b7:ad:da:f3:bb:d1:bf:0c:b5:c5:af:70:c1:32:17:
                    c8:b7:a9:31:17:20:29:cb:d4:1a:35:e3:fe:be:43:
                    ef:f2:ef:9b:46:cf:2c:25:98:21:2f:41:de:bb:22:
                    65:d5:cc:b1:8e:5c:bb:74:92:e0:9c:e7:25:b5:70:
                    e7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6F:31:38:8F:B5:95:89:F0:EC:AB:DF:5C:2E:E7:3D:50:6E:1A:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/dc551ad9-2f25-3879-aa7d-44b6adb862e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.crl

            X509v3 Authority Key Identifier:
                keyid:6E:AA:38:FA:81:26:FD:B9:F1:3B:FC:A7:1E:F9:74:FC:4E:6D:D4:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f068::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:3a:cc:5a:fb:e6:43:ca:0a:18:82:50:0e:76:ee:67:88:15:
         f5:60:24:99:2b:4a:7f:b3:7e:ce:ad:8e:08:20:c2:49:a0:12:
         7d:17:0f:76:0d:6d:df:77:86:24:b3:86:74:6f:10:fe:59:5b:
         3b:ef:79:41:ff:92:6b:e0:99:bc:93:e4:5f:33:63:05:a7:a5:
         ac:6a:a9:72:0d:9f:d2:56:4a:07:a9:df:a5:47:30:aa:0a:41:
         d3:a5:97:b6:1f:76:c7:44:e9:47:4b:8f:0c:4c:d6:01:17:10:
         c0:b1:97:59:19:ed:77:bd:1b:1d:bf:c6:34:da:94:75:20:d9:
         a1:51:4b:86:85:66:c0:41:69:83:a2:68:f4:4a:ea:67:93:0a:
         a1:7b:16:c1:33:f5:78:84:df:fb:05:bf:76:09:30:af:39:0a:
         d9:e5:41:b7:ba:a5:cf:34:41:f0:7b:88:3b:29:6e:46:38:f3:
         e9:43:f2:b6:8f:a5:21:29:af:86:d5:f2:31:10:c4:16:60:7d:
         ab:57:4b:ea:81:9d:13:53:25:c3:d5:7a:b9:a1:64:82:f5:f4:
         e5:b1:e4:0a:c1:3f:51:fc:b6:4f:a5:18:c5:da:b3:b4:d0:fb:
         92:3e:c1:86:a9:de:7c:af:6f:ca:e9:f6:d3:db:9a:9d:4e:d2:
         d2:47:15:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----