Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/7654669a-ad15-3940-b3b8-3827e118dce8.roa
File:                     7654669a-ad15-3940-b3b8-3827e118dce8.roa (raw, json)
Hash identifier:          wPi7PZZpW9ZIggBGybwJDPWFmykKrvnUS4YgmfZeZd4=
Subject key identifier:   53:8E:06:D8:B7:5D:02:12:7F:F9:94:13:7B:A0:A5:14:4D:96:36:C3
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328583BBAFE0C4334F7F22696F9FD10
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/7654669a-ad15-3940-b3b8-3827e118dce8.roa
Signing time:             Mon 26 Nov 2012 05:00:00 +0000
ROA not before:           Mon 26 Nov 2012 05:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     32133
IP address blocks:        2604:4000:2800::/37 maxlen: 37

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:ba:fe:0c:43:34:f7:f2:26:96:f9:fd:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Nov 26 05:00:00 2012 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=5bce677b-3134-4bda-b89b-1bc0544751d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:dd:65:ea:e9:dd:41:d3:30:0b:1a:d1:52:a0:
                    55:7c:26:8e:3a:28:4f:bb:56:58:de:76:66:58:b6:
                    60:80:8e:f9:6a:3c:60:80:ab:9b:41:63:51:83:f9:
                    da:4d:12:09:c7:89:dd:7c:7e:91:02:9f:51:0b:28:
                    80:af:2a:6c:9f:3f:27:f5:f3:75:1a:da:76:c2:19:
                    c2:e4:13:57:f2:77:ae:b1:19:5b:cf:ca:50:65:d3:
                    c4:bf:77:75:68:13:94:a5:eb:98:8d:27:a2:79:8d:
                    0c:b0:bf:e5:f4:6b:01:b4:14:06:70:60:86:d1:1e:
                    d3:11:1c:10:f6:af:35:76:e9:39:56:c8:d4:cc:8e:
                    81:32:5d:3e:2e:cd:99:95:e5:b3:95:69:63:6b:47:
                    4f:74:f2:02:a6:7c:ef:87:f8:f9:f5:56:4b:f3:04:
                    bb:97:f6:ee:e3:3f:1c:ec:70:70:86:c7:88:40:66:
                    bc:b3:25:00:d9:af:21:ee:18:c9:2b:f4:ca:ad:fc:
                    e9:8c:41:03:4f:5e:ab:b2:87:2a:c3:cf:b0:f2:dd:
                    26:90:49:b5:67:db:84:7e:ae:a8:cb:9d:fb:91:71:
                    f4:2e:85:d1:ca:d6:f5:1f:ff:7f:28:ad:f6:e3:17:
                    27:da:3d:e1:7b:04:a9:50:5c:ba:d6:0f:30:31:80:
                    45:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8E:06:D8:B7:5D:02:12:7F:F9:94:13:7B:A0:A5:14:4D:96:36:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/7654669a-ad15-3940-b3b8-3827e118dce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4000:2800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ce:00:89:22:93:b1:11:7c:10:0f:d9:14:e8:f9:a4:cc:28:
         11:e6:5b:f5:07:9b:68:ee:87:f2:cc:f9:34:5c:d8:5f:a5:66:
         bc:4f:46:10:ae:f0:dc:88:01:cc:02:1a:45:1d:74:2d:cb:5f:
         bd:61:e9:b9:ad:87:6d:a2:21:53:1d:a0:af:83:1f:96:e5:b3:
         77:80:d7:bb:80:a3:db:95:5f:a2:3a:7e:1a:46:95:3f:f5:61:
         95:12:f0:70:13:0b:43:92:e4:ce:f5:45:61:06:da:34:53:58:
         73:d4:c6:f4:ee:dc:61:58:7b:be:0f:cc:39:c3:29:52:30:f3:
         f0:d6:9c:02:df:fb:1b:f9:ea:de:46:59:dc:4a:f9:d9:89:52:
         d6:4a:7e:09:e8:24:86:46:3c:4e:d4:a9:48:b4:e2:d7:8a:b5:
         65:84:ef:8d:0a:21:57:2a:5e:e0:93:dc:6e:3d:f1:07:56:45:
         06:bd:44:87:32:30:bb:8a:68:42:99:23:08:3f:95:43:c0:d0:
         4a:7f:2c:07:02:92:7f:7b:0c:64:68:7b:d9:57:78:01:f4:32:
         f5:0f:7d:ab:ad:ff:eb:cc:6a:b1:b2:c6:a2:6f:af:58:8e:13:
         76:d4:7e:75:94:e9:d7:99:51:6c:c2:dd:ae:ee:fa:b4:f7:7f:
         ed:f2:6f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----