Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/46351f5e-d1fd-321a-a239-01169dfb6c9b.roa
File:                     46351f5e-d1fd-321a-a239-01169dfb6c9b.roa (raw, json)
Hash identifier:          fJW3NDBYj9eO/PNPNRj+zmU+51+3fyU65bw3CrengSc=
Subject key identifier:   A2:AC:AF:37:9D:0E:39:69:35:69:F7:7F:E7:90:CD:31:81:03:BD:CE
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D418F62988453C497E496BFA
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/46351f5e-d1fd-321a-a239-01169dfb6c9b.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Mon 06 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        2001:56b:3fe0::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d4:18:f6:29:88:45:3c:49:7e:49:6b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  6 05:00:00 2023 GMT
        Subject: CN=3820d8e4-42f6-4646-aa88-1fd94baf9b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c7:10:83:35:48:53:76:a0:1d:9b:98:7e:93:
                    00:14:d3:14:35:2d:00:41:b8:02:fc:bb:23:2e:22:
                    18:ca:76:55:ef:7b:8a:6a:2c:d8:e7:e9:10:81:16:
                    4f:66:a4:ec:89:ee:01:63:1c:2c:19:2a:52:c6:83:
                    75:09:dd:cb:68:95:16:67:18:9b:c3:42:5c:88:7e:
                    df:1c:5b:4c:a9:4e:3a:33:23:d5:64:55:18:df:48:
                    fc:01:8d:5a:68:5f:ed:10:5f:4d:ca:4a:80:49:97:
                    6e:1e:23:67:63:24:42:0c:23:64:fd:99:b8:96:0c:
                    16:f6:3d:df:a2:e8:ab:0b:7f:07:67:a8:8f:fc:e5:
                    f9:22:28:77:ca:5a:e6:8c:76:ef:e0:2d:1d:a6:17:
                    90:fc:9b:98:f9:64:fc:14:76:70:b0:de:93:21:86:
                    74:b0:56:9d:30:c9:07:56:1b:e1:40:ba:ed:f8:2c:
                    7e:42:7b:15:1c:bd:cb:c3:18:db:66:fa:c2:e3:a6:
                    3d:a1:52:af:46:8d:37:18:e8:14:eb:c9:71:52:69:
                    e6:01:ba:83:9e:22:94:d6:24:61:81:34:5b:e4:39:
                    94:80:ae:bd:50:21:86:7b:81:9b:55:f2:34:c0:4f:
                    3c:11:2b:e2:37:fb:77:87:33:4c:3b:18:07:54:57:
                    28:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AC:AF:37:9D:0E:39:69:35:69:F7:7F:E7:90:CD:31:81:03:BD:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/46351f5e-d1fd-321a-a239-01169dfb6c9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:3fe0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a9:64:9c:b4:ff:74:2b:70:f7:f7:03:43:55:fe:18:81:1c:
         5c:13:8f:69:8a:9f:e0:69:84:cf:f2:53:a5:82:70:ef:f7:80:
         b5:b8:07:70:54:4f:df:e2:d6:95:a2:22:76:0f:c4:af:06:26:
         b8:c3:ff:87:22:52:4a:2e:f6:b4:0f:78:61:0a:a8:5d:b6:e9:
         d8:00:4c:d7:5a:ee:18:cf:53:fd:0b:ec:aa:2b:65:e7:50:f1:
         f6:4e:c9:9f:e3:6a:03:bd:c3:9c:8a:fc:61:88:49:fc:57:e1:
         34:c0:23:33:62:db:9e:cd:4e:17:6b:46:32:c8:d6:9d:50:63:
         24:41:a8:f5:54:f7:c6:0a:bc:3f:b0:c7:a6:88:c4:df:50:a6:
         a1:03:d2:c0:16:71:25:dd:54:9b:b5:29:2d:66:6a:80:c2:97:
         2f:37:94:5c:a2:0a:e3:ee:dc:68:1c:08:f5:3d:65:30:5a:a5:
         b3:43:57:9e:c6:4c:fa:6c:f5:10:59:cd:3f:91:72:98:e8:36:
         b5:f6:22:c3:34:87:4d:91:ae:bd:9b:3b:8a:d4:74:a9:68:2a:
         68:52:3f:b5:b2:be:40:cd:02:c8:7d:eb:0e:5c:62:d5:25:8e:
         fa:a6:bf:b8:02:8b:fb:96:c9:ab:ff:2d:e9:4a:d5:a1:89:44:
         93:34:09:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----