Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/046883ba-b809-3885-8a98-e654c102d2a1.roa
File:                     046883ba-b809-3885-8a98-e654c102d2a1.roa (raw, json)
Hash identifier:          y5KaUu3YnXFumurVDeHVa7FaNmwFlAoosGAClL8/POk=
Subject key identifier:   9C:D8:76:9F:DD:89:6A:09:CB:EA:0C:DE:C5:C5:AB:F2:8D:50:D3:02
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837F7DC4BD5EF6CAA4CE8C09E10
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/046883ba-b809-3885-8a98-e654c102d2a1.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        154.20.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:f7:dc:4b:d5:ef:6c:aa:4c:e8:c0:9e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=91777c90-7107-4463-8d58-c82495892c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d7:ba:be:21:3e:84:88:85:d7:8b:55:33:7a:
                    8b:3f:6f:58:f1:cc:e6:d9:95:63:31:42:12:ed:09:
                    da:77:a8:37:c3:bf:e9:80:1d:ce:2f:96:97:3d:f8:
                    21:5a:f9:48:9e:77:d5:51:17:c6:e4:44:1b:b7:1e:
                    45:25:0e:02:33:8c:90:cf:62:d0:08:62:b2:56:61:
                    db:ea:fc:42:88:0e:88:00:17:47:16:bd:53:a8:a8:
                    a8:51:e3:ce:e6:67:9e:a9:e7:ac:27:9c:13:38:37:
                    37:c9:20:09:1b:c1:47:42:c6:c3:11:58:4a:fa:5a:
                    e4:fd:58:cd:51:6d:7e:1d:2f:cf:fa:ec:81:7a:e1:
                    e1:b6:e9:0b:73:07:77:06:0c:8f:4a:1d:3b:a8:61:
                    d0:9b:46:16:99:86:a9:11:68:d1:06:df:40:92:24:
                    2c:26:a1:8f:79:78:40:c0:b2:a8:e0:04:eb:0e:2f:
                    a5:eb:48:b6:a1:1a:f2:2a:c6:8c:21:db:3e:0f:b4:
                    c1:29:b8:66:76:2e:be:23:16:42:8f:a5:b3:0d:e6:
                    fd:d7:3a:9d:b1:b3:46:00:d4:bd:ee:1f:33:95:b2:
                    f2:26:2c:fc:10:8b:cc:2f:a6:25:1a:3a:c7:69:83:
                    a1:e7:6f:d7:37:a9:26:b1:63:a7:73:10:5a:04:cd:
                    49:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D8:76:9F:DD:89:6A:09:CB:EA:0C:DE:C5:C5:AB:F2:8D:50:D3:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/046883ba-b809-3885-8a98-e654c102d2a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.20.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f5:a8:ff:18:32:fe:e3:37:b9:b1:67:36:65:5c:47:ad:8b:b9:
         65:92:bd:06:f6:a4:9d:56:c9:a4:f6:89:81:fc:8f:d9:40:af:
         98:99:a3:f8:de:f6:c4:8b:62:e7:a9:b2:0c:6b:17:50:5f:bf:
         c9:d6:18:d9:61:3a:7b:2b:46:21:fc:a0:56:4f:d5:48:5b:a3:
         58:42:a4:dc:a7:03:31:18:6a:7a:1a:60:fd:87:bf:d7:98:9a:
         c3:7f:31:51:e9:a2:2f:41:17:19:5c:24:a0:dd:43:2c:88:22:
         1d:b1:06:e1:39:b9:f4:e5:de:4a:dd:ae:2e:d5:a6:2a:b4:0f:
         49:3d:fe:5c:23:10:30:6f:02:69:44:c4:3d:53:2a:c4:6e:bf:
         fb:1a:b6:fb:5e:65:b2:ce:c4:3e:30:19:61:c8:00:86:cd:01:
         7e:ff:c0:36:6e:82:87:30:db:87:06:5c:c6:47:7a:6e:bb:fa:
         b7:3b:77:7a:57:d6:97:41:91:18:91:b8:79:ac:2a:45:5b:e2:
         01:fc:ae:9d:a7:e0:f1:2e:df:3d:58:0b:a4:aa:0a:e3:f8:ca:
         ce:13:7e:77:bd:d1:1a:88:3d:c3:57:53:a0:08:42:a4:3f:93:
         66:26:e3:24:bd:34:3b:46:a8:ff:bd:c7:e6:28:7f:31:ad:a5:
         1f:e5:1f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----