Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e6bf25-e68b-42d8-b59c-76233460e77e/fbeefb8c-b472-39be-8c08-464e9f5e0645.roa
File:                     fbeefb8c-b472-39be-8c08-464e9f5e0645.roa (raw, json)
Hash identifier:          OCeu+ZsmKFQKF6m+BtxvuK9NImoyWItTc1rzDZC/XCk=
Subject key identifier:   AE:A5:DE:C8:A7:A9:BB:3E:2D:4D:79:89:90:37:B8:24:5F:5A:84:95
Certificate issuer:       /CN=02e6bf25-e68b-42d8-b59c-76233460e77e
Certificate serial:       010D0C9F43285838030050F45F8351101E7FA280
Authority key identifier: C7:70:E5:5B:48:DE:20:D2:31:12:7B:32:14:EF:CF:A4:E6:76:34:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e6bf25-e68b-42d8-b59c-76233460e77e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e6bf25-e68b-42d8-b59c-76233460e77e/fbeefb8c-b472-39be-8c08-464e9f5e0645.roa
Signing time:             Fri 20 Nov 2020 05:00:00 +0000
ROA not before:           Fri 20 Nov 2020 05:00:00 +0000
ROA not after:            Thu 23 Feb 2023 05:00:00 +0000
asID:                     398738
IP address blocks:        2602:fcf4::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:03:00:50:f4:5f:83:51:10:1e:7f:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e6bf25-e68b-42d8-b59c-76233460e77e
        Validity
            Not Before: Nov 20 05:00:00 2020 GMT
            Not After : Feb 23 05:00:00 2023 GMT
        Subject: CN=d9e54a18-915b-430d-8b37-a38869491cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f7:15:c1:42:a0:30:d5:81:6e:17:72:53:b2:
                    ec:1e:8b:8c:ba:1f:a2:7e:c4:42:6a:52:7a:53:b8:
                    60:97:f9:13:df:28:92:aa:ad:30:8a:d4:4d:3c:44:
                    f8:dc:ca:03:06:99:76:f8:6f:37:c1:c2:e6:6a:a4:
                    a0:ee:69:d1:cb:7a:70:ac:e4:78:b7:3b:69:c2:10:
                    88:9d:cf:d6:97:26:50:10:17:5a:a8:7a:2f:54:da:
                    73:ab:69:5f:fe:7d:f5:d4:cb:fc:03:17:47:3f:22:
                    97:29:6b:d4:d2:0d:52:5e:48:eb:1b:1e:86:88:65:
                    2c:c3:f6:ae:49:56:5b:ed:f5:8b:b0:bb:eb:b2:cf:
                    ff:23:08:57:58:65:21:76:e0:7b:26:12:36:f2:1f:
                    3d:55:c3:7b:fa:5e:37:2e:e6:42:5c:91:e2:7d:71:
                    63:49:88:54:9f:37:82:50:b9:d3:ea:7e:b8:4f:4b:
                    a0:35:b9:81:42:ef:1a:b9:fc:eb:2f:03:a5:1c:02:
                    38:6f:e5:0c:0a:ad:6a:9e:b6:da:14:19:6f:8f:be:
                    6e:ac:67:6c:81:d2:97:da:d5:f2:14:77:6f:cf:8e:
                    56:5d:44:24:07:09:ca:73:24:86:a3:8f:e8:03:eb:
                    31:98:5a:91:2d:e8:e5:bb:5e:0d:89:ad:42:0a:97:
                    d0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A5:DE:C8:A7:A9:BB:3E:2D:4D:79:89:90:37:B8:24:5F:5A:84:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e6bf25-e68b-42d8-b59c-76233460e77e/fbeefb8c-b472-39be-8c08-464e9f5e0645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e6bf25-e68b-42d8-b59c-76233460e77e/02e6bf25-e68b-42d8-b59c-76233460e77e.crl

            X509v3 Authority Key Identifier:
                keyid:C7:70:E5:5B:48:DE:20:D2:31:12:7B:32:14:EF:CF:A4:E6:76:34:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e6bf25-e68b-42d8-b59c-76233460e77e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcf4::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:22:35:f6:36:4f:46:59:c7:15:73:0b:83:ea:fb:f2:9a:87:
         d5:e6:66:aa:01:96:19:74:29:12:4d:89:1f:12:1e:9c:83:0a:
         dd:21:36:8f:06:a6:f3:cb:42:14:27:2e:ad:13:59:f9:fb:bc:
         10:95:0f:df:11:bc:42:6b:8f:18:9b:45:ba:23:00:7b:27:a3:
         6d:17:ba:09:5a:96:2c:31:79:96:fc:71:b4:34:74:d6:b9:0a:
         92:86:73:06:4a:ee:8f:4d:09:81:4d:87:dc:dc:dd:e3:4a:d2:
         a3:59:f6:88:fb:7e:63:96:b9:b2:27:f3:3d:a7:4f:cd:a8:37:
         15:cf:63:96:f4:2e:f7:02:0f:b6:19:8d:32:37:67:b7:cd:f1:
         98:77:8f:99:0d:97:ff:00:6e:fa:c6:da:84:55:df:a4:e7:c9:
         61:81:59:85:28:86:63:a7:e9:26:24:de:2d:c8:8b:78:ab:47:
         b3:2b:b9:3c:f1:da:be:99:65:e3:01:5b:e4:1c:37:d6:53:7d:
         bb:26:de:19:ad:83:aa:72:00:6f:01:b6:76:be:85:6a:f7:f2:
         0e:06:d2:4c:2e:6e:56:2c:34:70:88:34:04:1f:02:d7:c5:0d:
         4f:2a:ec:47:3b:4d:63:26:3d:62:a7:82:d1:f2:ee:66:77:86:
         e9:97:53:2f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWDgDAFD0X4NREB5/ooAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDJlNmJmMjUtZTY4Yi00MmQ4LWI1OWMtNzYyMzM0NjBl
NzdlMB4XDTIwMTEyMDA1MDAwMFoXDTIzMDIyMzA1MDAwMFowLzEtMCsGA1UEAxMk
ZDllNTRhMTgtOTE1Yi00MzBkLThiMzctYTM4ODY5NDkxY2RjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPcVwUKgMNWBbhdyU7LsHouMuh+ifsRCalJ6
U7hgl/kT3yiSqq0witRNPET43MoDBpl2+G83wcLmaqSg7mnRy3pwrOR4tztpwhCI
nc/WlyZQEBdaqHovVNpzq2lf/n311Mv8AxdHPyKXKWvU0g1SXkjrGx6GiGUsw/au
SVZb7fWLsLvrss//IwhXWGUhduB7JhI28h89VcN7+l43LuZCXJHifXFjSYhUnzeC
ULnT6n64T0ugNbmBQu8aufzrLwOlHAI4b+UMCq1qnrbaFBlvj75urGdsgdKX2tXy
FHdvz45WXUQkBwnKcySGo4/oA+sxmFqRLejlu14Nia1CCpfQZwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFK6l3sinqbs+LU15iZA3uCRfWoSVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMmU2
YmYyNS1lNjhiLTQyZDgtYjU5Yy03NjIzMzQ2MGU3N2UvZmJlZWZiOGMtYjQ3Mi0z
OWJlLThjMDgtNDY0ZTlmNWUwNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDJlNmJmMjUtZTY4Yi00MmQ4LWI1
OWMtNzYyMzM0NjBlNzdlLzAyZTZiZjI1LWU2OGItNDJkOC1iNTljLTc2MjMzNDYw
ZTc3ZS5jcmwwHwYDVR0jBBgwFoAUx3DlW0jeINIxEnsyFO/PpOZ2NFcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMmU2YmYyNS1lNjhiLTQyZDgtYjU5Yy03NjIz
MzQ2MGU3N2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL89AAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAdyI19jZPRlnHFXMLg+r78pqH1eZmqgGWGXQpEk2JHxIenIMK3SE2
jwam88tCFCcurRNZ+fu8EJUP3xG8QmuPGJtFuiMAeyejbRe6CVqWLDF5lvxxtDR0
1rkKkoZzBkruj00JgU2H3Nzd40rSo1n2iPt+Y5a5sifzPadPzag3Fc9jlvQu9wIP
thmNMjdnt83xmHePmQ2X/wBu+sbahFXfpOfJYYFZhSiGY6fpJiTeLciLeKtHsyu5
PPHavpll4wFb5Bw31lN9uybeGa2DqnIAbwG2dr6FavfyDgbSTC5uViw0cIg0BB8C
18UNTyrsRztNYyY9YqeC0fLuZneG6ZdTLw==
-----END CERTIFICATE-----