Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/c39f9261-c38f-3251-b970-37dd824a0393.roa
File:                     c39f9261-c38f-3251-b970-37dd824a0393.roa (raw, json)
Hash identifier:          IIi82cJIJBWGm4M7ea5xAQ7MskMJGTw8fk/BBLAxfgQ=
Subject key identifier:   FD:6A:1A:BC:8E:EA:E3:F2:F8:8F:1F:F3:22:40:7C:98:3A:4C:AE:D9
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F4328576D51CC73C042CFC1724795BC61
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/c39f9261-c38f-3251-b970-37dd824a0393.roa
Signing time:             Sun 24 May 2020 16:48:14 +0000
ROA not before:           Wed 04 Apr 2018 04:00:00 +0000
ROA not after:            Sat 27 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2604:bc40:6000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:47:95:bc:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: Apr  4 04:00:00 2018 GMT
            Not After : Aug 27 04:00:00 2022 GMT
        Subject: CN=d54eef3e-2586-4215-8805-95b76cd086dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:82:7f:26:d5:d7:56:2b:71:ea:73:f8:ae:5c:
                    12:68:83:d0:b5:bf:e6:39:29:9d:7e:9b:47:84:92:
                    c4:9e:86:d6:d6:3e:a4:52:dc:03:82:d7:e9:9f:3e:
                    25:53:60:23:47:68:67:01:a9:dd:82:83:e7:d1:00:
                    6f:91:3c:95:e0:38:29:cd:c3:f9:89:7b:f0:09:e1:
                    e7:91:37:07:f7:31:d9:37:29:c4:72:f7:32:6e:f3:
                    71:3a:31:ec:c6:c9:12:06:5f:db:44:3d:b7:df:2a:
                    30:5e:f2:91:44:62:73:08:6f:0c:0b:d4:10:b6:6a:
                    95:52:35:30:34:fe:2a:05:c1:85:a2:83:5f:89:3b:
                    3f:b3:e3:d5:0e:e2:35:f3:e9:46:c5:6a:b3:42:51:
                    09:1d:bc:3e:13:3a:87:55:ba:36:e1:58:11:b1:ec:
                    e6:e7:ba:21:0b:0a:16:3c:0e:26:1d:ee:54:66:f8:
                    92:0c:c5:d5:74:96:d2:df:9d:19:ec:c5:d2:2f:5e:
                    88:64:d5:0d:bc:93:76:4c:3e:c4:17:1e:d6:0b:0d:
                    66:21:94:0e:15:62:1f:df:ff:2d:c7:be:78:4e:58:
                    5b:e6:aa:02:1b:94:e7:d5:68:ad:48:ef:ca:e9:38:
                    e6:b8:0f:e3:68:b7:9c:7a:23:2e:01:bc:da:90:f1:
                    dc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6A:1A:BC:8E:EA:E3:F2:F8:8F:1F:F3:22:40:7C:98:3A:4C:AE:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/c39f9261-c38f-3251-b970-37dd824a0393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:bc40:6000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:b1:dd:9f:e9:e8:fc:4e:f2:89:ac:14:1a:31:4c:15:64:84:
         01:7b:85:ff:ea:27:5f:77:c8:7f:e7:78:b8:f4:2b:96:03:a2:
         72:04:5c:a6:35:43:30:8c:96:e1:e1:ba:b0:f9:7c:a1:29:0a:
         e5:66:09:47:29:94:91:28:f5:8c:77:8b:94:20:7b:e7:00:b3:
         93:0b:35:11:df:b6:ed:1d:0f:c8:5f:bf:bd:93:9d:87:80:91:
         20:4a:a4:73:35:52:dc:9d:b0:03:23:ce:22:5e:d4:82:ae:b9:
         19:8b:55:f8:c7:e1:16:46:4e:4f:00:b6:f7:04:69:9f:e3:8c:
         1e:5f:b5:1c:d9:05:1b:e0:ff:0c:40:5b:62:98:b1:61:e1:fe:
         aa:e0:b4:6c:97:1c:f8:a7:8e:29:7a:45:df:29:ae:b5:e2:6c:
         26:30:5d:b5:25:2f:30:9b:28:a8:9b:b6:ff:15:7d:e3:ff:29:
         68:f0:d9:62:24:0e:ce:70:38:82:5a:23:2f:ca:30:9d:c0:c4:
         d8:7d:e4:4e:96:2f:a1:a7:ab:48:35:64:3a:3d:9f:59:d8:7f:
         56:68:f5:57:b6:2e:1f:e9:7d:4d:bb:c9:89:1b:ae:96:61:33:
         aa:d9:d0:75:5f:cf:b0:a0:9c:e4:cb:70:6c:b8:e9:6e:41:7d:
         24:96:cb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----