Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/b2a1db6c-2691-30de-bdac-9e4a8807842f.roa
File:                     b2a1db6c-2691-30de-bdac-9e4a8807842f.roa (raw, json)
Hash identifier:          0k0nrxZtyirBKH3v18D4y181XO4xMWPQj4IBBiZjvCw=
Subject key identifier:   5E:AA:38:40:36:6B:18:4B:2F:42:A1:B3:DF:B0:58:A1:44:55:FB:22
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       1AB7D5EA87F62B8A039391295F33D150385A3B
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/b2a1db6c-2691-30de-bdac-9e4a8807842f.roa
Signing time:             Wed 28 Nov 2012 17:12:52 +0000
ROA not before:           Mon 26 Nov 2012 05:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     32491
IP address blocks:        2604:4000:4000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b7:d5:ea:87:f6:2b:8a:03:93:91:29:5f:33:d1:50:38:5a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Nov 26 05:00:00 2012 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=45e1e70d-1b5c-4dc0-9945-e64651cf4785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:08:7d:8c:26:87:3d:d8:3b:13:97:56:48:cc:
                    f1:67:1e:b6:8d:38:c1:4e:32:ce:20:d4:03:9e:5c:
                    db:95:7e:2e:04:f8:cf:dd:37:2a:17:d2:3c:eb:dc:
                    ef:b4:45:52:55:f3:c6:71:20:d0:cb:92:6f:c4:e3:
                    82:f3:ab:a6:b2:af:62:f5:6c:83:6e:f0:de:5f:4b:
                    6a:44:05:ea:dc:b1:ff:79:16:4c:3b:b7:23:b5:ba:
                    33:2d:bf:e3:b8:07:c8:8a:37:88:cd:8f:0d:c5:94:
                    5a:2f:6b:70:92:32:e4:5e:c7:8b:b4:4d:e5:34:59:
                    d4:b2:ae:62:88:21:ec:a4:31:64:71:af:20:b8:f1:
                    0a:0d:cf:a7:03:06:bd:47:78:ab:0e:2e:ae:40:88:
                    69:4e:74:34:84:0d:8d:af:fb:f0:b7:4e:6b:ee:24:
                    0e:27:54:c8:23:da:39:dd:9e:bf:89:6f:23:a9:82:
                    cf:a9:36:9b:38:8b:8b:a4:0c:1f:11:94:dd:c6:c8:
                    3f:06:25:fc:86:ac:40:f8:c0:50:f8:ad:12:0a:d9:
                    cb:60:cd:3c:6d:56:2d:27:ce:ef:8f:0d:f5:15:7e:
                    df:d8:71:80:58:df:da:f2:ff:97:da:08:61:9f:8e:
                    95:a3:2f:e6:05:9d:7d:eb:a1:65:89:9d:16:f2:03:
                    b4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AA:38:40:36:6B:18:4B:2F:42:A1:B3:DF:B0:58:A1:44:55:FB:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/b2a1db6c-2691-30de-bdac-9e4a8807842f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4000:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:ad:ac:be:3a:42:03:5b:84:8b:ff:9b:57:fb:62:f6:47:4f:
         eb:9f:79:62:f0:6e:2e:dc:66:1b:2c:fe:82:5a:e2:69:de:01:
         86:08:2e:57:b6:34:2b:9f:d3:4f:04:1d:59:32:6f:d5:29:ec:
         46:b5:be:fd:1c:fd:8c:fc:f1:5e:7f:e3:3f:a2:07:6b:3a:45:
         33:d1:b0:06:01:24:be:79:1f:11:79:26:be:6c:8d:28:78:98:
         59:f8:63:71:75:a7:57:77:0d:e7:d2:54:46:d7:47:c6:82:e0:
         c9:de:d6:cb:52:9f:13:56:4e:43:7d:e7:d9:38:6e:4a:d8:e3:
         78:4a:25:a4:68:df:35:72:29:78:4e:f8:51:77:ac:59:af:fb:
         53:1f:dc:6f:71:f5:6f:52:50:20:b7:0a:7f:2c:41:f3:e6:cb:
         18:52:fe:be:8d:af:b1:fa:ce:af:e9:cc:39:75:d1:41:f1:fc:
         f2:2d:1a:01:dd:2d:43:f8:39:eb:96:14:2e:db:c5:8b:d7:73:
         7c:9b:13:49:7a:0d:9f:b0:7a:0a:c4:b9:5b:1c:aa:3d:a2:a7:
         5b:25:6d:a7:57:21:d9:6f:1a:10:bd:e2:af:0f:b4:d5:73:7b:
         cc:d1:91:18:4e:2a:e4:0b:82:29:68:a9:e3:0e:99:1d:49:20:
         46:ae:9a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----