Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/0520cc9e-9fb1-30da-8f28-30aacbfdfc27.roa
File:                     0520cc9e-9fb1-30da-8f28-30aacbfdfc27.roa (raw, json)
Hash identifier:          ZC7Nt+Ri4TGmPrlaNp/x30jfhUzkC6t2of/fif7/7Yk=
Subject key identifier:   A6:14:65:39:AD:3A:8E:29:CA:86:9D:97:46:79:7C:2C:D1:48:1C:A3
Certificate issuer:       /CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7
Certificate serial:       010D0C9F4328583CF44998CCCEF90F7AFD642EE0
Authority key identifier: EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/0520cc9e-9fb1-30da-8f28-30aacbfdfc27.roa
Signing time:             Wed 16 Feb 2022 05:00:00 +0000
ROA not before:           Wed 16 Feb 2022 05:00:00 +0000
ROA not after:            Tue 21 May 2024 04:00:00 +0000
asID:                     11736
IP address blocks:        2607:f558:1800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:f4:49:98:cc:ce:f9:0f:7a:fd:64:2e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7
        Validity
            Not Before: Feb 16 05:00:00 2022 GMT
            Not After : May 21 04:00:00 2024 GMT
        Subject: CN=360fb7d5-66bc-4418-b3a8-667ad5a02ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d6:20:ca:66:a7:a5:e8:3d:45:96:32:ad:12:
                    d1:5b:16:79:f9:42:83:39:80:2f:7d:a2:f6:f3:cf:
                    26:b3:f8:7c:ab:db:d0:af:bf:fc:74:d1:77:df:ef:
                    13:fd:58:a3:4d:58:66:e0:fd:3d:ca:c2:23:b5:34:
                    d1:27:92:e4:77:6e:f9:c1:86:33:90:b3:0c:45:fe:
                    a6:53:da:22:cb:df:ef:cd:45:1d:13:4d:8b:7f:14:
                    97:89:dd:f8:dc:b2:a8:70:b2:cd:eb:da:a8:cc:78:
                    3c:82:cc:6c:ba:11:f0:e0:1d:cb:87:94:d0:bc:17:
                    04:91:c7:62:eb:63:b4:fa:c3:69:c6:0a:fb:cc:d0:
                    e4:46:7e:93:ad:1a:0f:ca:a9:29:b1:13:f2:44:ae:
                    d0:f9:70:14:d9:5b:96:a7:8f:f4:3f:16:eb:81:87:
                    5e:56:df:a2:cb:f4:27:18:51:fc:1d:f5:f5:b4:bc:
                    e4:be:9f:50:37:fb:6f:7e:20:0a:83:fd:7b:dd:38:
                    53:aa:b1:41:d6:4c:5e:58:c0:1e:2b:a3:f5:9d:20:
                    db:8c:00:b8:f0:70:1f:4e:76:96:af:63:ee:c2:72:
                    e3:b6:68:49:04:46:71:25:be:d2:c0:a0:39:5d:67:
                    94:fd:7a:da:b0:e1:b4:99:46:23:38:91:ea:dd:9f:
                    1a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:14:65:39:AD:3A:8E:29:CA:86:9D:97:46:79:7C:2C:D1:48:1C:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/0520cc9e-9fb1-30da-8f28-30aacbfdfc27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.crl

            X509v3 Authority Key Identifier:
                keyid:EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f558:1800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:25:33:06:85:10:3d:0f:df:b7:e2:e5:8e:25:9c:ab:9b:4c:
         ab:18:88:80:af:5d:c0:bd:8f:09:17:9b:09:df:86:bf:c1:57:
         4d:57:29:76:c8:4a:ad:8c:b2:ab:12:6a:88:dd:e4:d5:12:31:
         1e:a1:a2:95:9c:c7:63:7c:0f:3d:48:94:f5:b3:52:0d:d4:33:
         17:dd:bf:01:df:34:3d:87:f9:49:8d:c7:41:71:2f:2f:7c:a5:
         ae:71:8b:be:7f:d7:2c:15:3b:16:9b:da:87:ba:6a:66:b8:ee:
         c6:eb:91:7b:7c:3d:91:b5:6e:54:62:96:94:32:66:f9:d7:79:
         87:01:2c:67:f3:de:f1:16:5e:ae:a1:29:ec:1d:5e:5e:0b:d2:
         64:b5:c6:d9:f4:ff:40:66:fc:05:32:c6:b1:c6:0c:e5:af:54:
         ac:99:1c:3e:7d:8f:bd:c7:e2:e9:72:bd:82:9e:dc:5c:6c:a5:
         1c:ea:67:7f:2c:06:b3:b3:9f:64:ce:9c:bf:52:22:11:04:81:
         ca:52:fd:d9:bd:3c:3c:b8:5a:0f:0f:a7:a5:a4:cd:d6:ee:9f:
         11:9d:1c:8e:b3:55:4d:fb:07:04:30:55:35:24:d7:53:53:51:
         c6:3d:8c:b6:3e:e4:38:37:ff:29:32:87:ab:29:1d:6c:96:a6:
         f3:d6:43:d3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWDz0SZjMzvkPev1kLuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWU3ODAwNjUtNmI0YS00MmU1LWJhNmEtMmNjMzQwMDAx
YWE3MB4XDTIyMDIxNjA1MDAwMFoXDTI0MDUyMTA0MDAwMFowLzEtMCsGA1UEAxMk
MzYwZmI3ZDUtNjZiYy00NDE4LWIzYTgtNjY3YWQ1YTAyYWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NYgymanpeg9RZYyrRLRWxZ5+UKDOYAvfaL2
888ms/h8q9vQr7/8dNF33+8T/VijTVhm4P09ysIjtTTRJ5Lkd275wYYzkLMMRf6m
U9oiy9/vzUUdE02LfxSXid343LKocLLN69qozHg8gsxsuhHw4B3Lh5TQvBcEkcdi
62O0+sNpxgr7zNDkRn6TrRoPyqkpsRPyRK7Q+XAU2VuWp4/0PxbrgYdeVt+iy/Qn
GFH8HfX1tLzkvp9QN/tvfiAKg/173ThTqrFB1kxeWMAeK6P1nSDbjAC48HAfTnaW
r2PuwnLjtmhJBEZxJb7SwKA5XWeU/XrasOG0mUYjOJHq3Z8a+wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKYUZTmtOo4pyoadl0Z5fCzRSByjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZTc4
MDA2NS02YjRhLTQyZTUtYmE2YS0yY2MzNDAwMDFhYTcvMDUyMGNjOWUtOWZiMS0z
MGRhLThmMjgtMzBhYWNiZmRmYzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWU3ODAwNjUtNmI0YS00MmU1LWJh
NmEtMmNjMzQwMDAxYWE3LzFlNzgwMDY1LTZiNGEtNDJlNS1iYTZhLTJjYzM0MDAw
MWFhNy5jcmwwHwYDVR0jBBgwFoAU6qwyvARyCXmDcxCxcHgxsJ3PRkMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xZTc4MDA2NS02YjRhLTQyZTUtYmE2YS0yY2Mz
NDAwMDFhYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf1WBgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAAiUzBoUQPQ/ft+LljiWcq5tMqxiIgK9dwL2PCRebCd+Gv8FXTVcp
dshKrYyyqxJqiN3k1RIxHqGilZzHY3wPPUiU9bNSDdQzF92/Ad80PYf5SY3HQXEv
L3ylrnGLvn/XLBU7Fpvah7pqZrjuxuuRe3w9kbVuVGKWlDJm+dd5hwEsZ/Pe8RZe
rqEp7B1eXgvSZLXG2fT/QGb8BTLGscYM5a9UrJkcPn2Pvcfi6XK9gp7cXGylHOpn
fywGs7OfZM6cv1IiEQSBylL92b08PLhaDw+npaTN1u6fEZ0cjrNVTfsHBDBVNSTX
U1NRxj2Mtj7kODf/KTKHqykdbJam89ZD0w==
-----END CERTIFICATE-----