Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/eba9b0c2-8ed8-326c-9982-befec33b4a04.roa
File:                     eba9b0c2-8ed8-326c-9982-befec33b4a04.roa (raw, json)
Hash identifier:          IjbnWIAfmzcEoIkQ3PV7Bl//2QOBPGQp3RnTcetkYQA=
Subject key identifier:   C7:F3:5F:1F:58:FD:85:44:96:79:68:2F:98:A8:01:A9:F4:47:55:0B
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328576D51CC73C042CFC1739D9C3497
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/eba9b0c2-8ed8-326c-9982-befec33b4a04.roa
Signing time:             Thu 30 Jul 2020 02:45:26 +0000
ROA not before:           Mon 07 Apr 2014 04:00:00 +0000
ROA not after:            Tue 01 Nov 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2607:fb90:c150::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:9d:9c:34:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Apr  7 04:00:00 2014 GMT
            Not After : Nov  1 04:00:00 2022 GMT
        Subject: CN=3805da03-4de2-4487-b321-e42846ca2c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:93:6a:b3:1b:3b:68:25:f4:ea:bb:9d:5c:df:
                    b0:31:ec:30:60:6a:06:28:59:fc:9a:57:3f:c1:fe:
                    f2:33:48:fb:89:91:68:7f:e8:64:b8:a5:b5:00:ab:
                    0f:cb:8e:e1:d1:30:b5:a2:3f:63:e4:62:59:48:68:
                    69:7e:78:b7:5f:2f:be:d7:80:71:09:96:e0:75:8b:
                    bd:77:08:0f:2f:b4:0c:f7:fa:e8:7a:d3:94:ff:b6:
                    10:de:66:a7:be:fb:12:9a:f4:d5:45:16:1e:a5:f1:
                    67:e7:5f:dc:24:71:64:34:41:47:7f:0e:89:f1:57:
                    fc:d2:15:3a:6a:29:89:af:7f:15:bb:13:ed:a7:86:
                    a1:31:eb:95:99:c3:5b:9a:a5:8f:8c:07:4a:26:84:
                    8d:92:f5:f1:eb:11:a3:f9:e2:4d:28:39:f2:e8:e8:
                    e3:47:8d:61:c6:e3:ca:ba:08:6e:85:0e:4b:f1:a6:
                    0e:c8:5d:94:2a:2a:06:d8:26:ea:e7:a7:8d:c0:c8:
                    87:2a:53:58:69:d1:e6:3c:79:de:ef:fc:13:00:10:
                    62:6d:9c:28:76:1e:8d:6f:9d:1c:7f:0c:ab:50:92:
                    de:43:55:16:66:9f:8d:35:5b:44:3d:87:a4:79:97:
                    69:57:fc:bb:7a:0e:b4:bd:5e:62:c4:7f:a6:81:cc:
                    90:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F3:5F:1F:58:FD:85:44:96:79:68:2F:98:A8:01:A9:F4:47:55:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/eba9b0c2-8ed8-326c-9982-befec33b4a04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb90:c150::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:d2:47:02:ec:ce:4b:6e:f8:0f:a4:21:c4:df:f5:36:c6:de:
         b0:63:8b:02:da:0b:6e:06:86:b0:32:26:21:25:a0:d9:ce:f9:
         5d:ed:5b:60:03:c5:18:41:5c:49:68:c2:28:1d:40:35:3b:ea:
         ad:95:39:89:91:d0:8e:eb:25:d4:28:8a:85:a5:2a:db:b9:97:
         77:cc:ba:ad:29:02:c1:3a:b1:4d:7c:c4:d0:8e:95:0f:82:ae:
         5d:b1:20:c1:46:a2:bc:66:ed:c9:23:64:a8:1d:a7:07:42:3c:
         c4:a3:79:35:28:c9:d4:49:aa:0e:2e:f3:b8:10:4b:c4:cc:12:
         54:38:18:3f:cc:0b:98:c2:e9:f8:26:c2:26:8d:50:76:f8:0e:
         75:93:98:f5:05:3d:a5:41:a2:28:de:46:df:58:bf:d3:c5:c1:
         27:a4:50:be:a6:76:f2:69:ff:8a:03:80:fe:4c:45:e2:bb:86:
         84:9b:41:98:d1:da:19:18:d0:8f:1c:80:51:01:0a:75:7c:3b:
         69:e2:d6:44:2a:05:6d:50:b9:8d:aa:ea:71:1c:a5:e2:d1:5a:
         d3:62:94:59:21:87:74:45:90:ad:cb:d6:d0:ff:4b:12:80:61:
         53:a1:58:dd:27:89:d5:cb:2e:ad:85:5f:d5:b5:4e:48:eb:18:
         c9:16:fd:74
-----BEGIN CERTIFICATE-----
MIIGQjCCBSygAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc52cNJcwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNlZjBj
MzAeFw0xNDA0MDcwNDAwMDBaFw0yMjExMDEwNDAwMDBaMC8xLTArBgNVBAMTJDM4
MDVkYTAzLTRkZTItNDQ4Ny1iMzIxLWU0Mjg0NmNhMmMwNjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAL2TarMbO2gl9Oq7nVzfsDHsMGBqBihZ/JpXP8H+
8jNI+4mRaH/oZLiltQCrD8uO4dEwtaI/Y+RiWUhoaX54t18vvteAcQmW4HWLvXcI
Dy+0DPf66HrTlP+2EN5mp777Epr01UUWHqXxZ+df3CRxZDRBR38OifFX/NIVOmop
ia9/FbsT7aeGoTHrlZnDW5qlj4wHSiaEjZL18esRo/niTSg58ujo40eNYcbjyroI
boUOS/GmDshdlCoqBtgm6uenjcDIhypTWGnR5jx53u/8EwAQYm2cKHYejW+dHH8M
q1CS3kNVFmafjTVbRD2HpHmXaVf8u3oOtL1eYsR/poHMkH8CAwEAAaOCA1gwggNU
MB0GA1UdDgQWBBTH818fWP2FRJZ5aC+YqAGp9EdVCzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMz
NTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2VmMGMzL2ViYTliMGMyLThlZDgtMzI2
Yy05OTgyLWJlZmVjMzNiNGEwNC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0
LTAwMGJmNWNlZjBjMy84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYw
YzMuY3JsMB8GA1UdIwQYMBaAFLS1bGRGPUfr3KUOy9B7mjNDVUBFMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1
Y2VmMGMzLmNlcjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYH+5DBUDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEB
CwOCAQEA1dJHAuzOS274D6QhxN/1NsbesGOLAtoLbgaGsDImISWg2c75Xe1bYAPF
GEFcSWjCKB1ANTvqrZU5iZHQjusl1CiKhaUq27mXd8y6rSkCwTqxTXzE0I6VD4Ku
XbEgwUaivGbtySNkqB2nB0I8xKN5NSjJ1EmqDi7zuBBLxMwSVDgYP8wLmMLp+CbC
Jo1QdvgOdZOY9QU9pUGiKN5G31i/08XBJ6RQvqZ28mn/igOA/kxF4ruGhJtBmNHa
GRjQjxyAUQEKdXw7aeLWRCoFbVC5jarqcRyl4tFa02KUWSGHdEWQrcvW0P9LEoBh
U6FY3SeJ1csurYVf1bVOSOsYyRb9dA==
-----END CERTIFICATE-----