Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4f2f9d97-df6d-3074-b3f9-ceddff5bc3e5.roa
File:                     4f2f9d97-df6d-3074-b3f9-ceddff5bc3e5.roa (raw, json)
Hash identifier:          CqJN8Aq2ajf5Z0ajb53ysnjojhMCbm1WXxQQVcie72Q=
Subject key identifier:   20:EE:87:93:10:37:56:52:51:27:2B:50:A6:52:64:71:63:C7:A1:63
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328583B241072571B18EA27D8648E20
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4f2f9d97-df6d-3074-b3f9-ceddff5bc3e5.roa
Signing time:             Wed 11 Aug 2021 04:00:00 +0000
ROA not before:           Wed 11 Aug 2021 04:00:00 +0000
ROA not after:            Tue 05 Sep 2023 04:00:00 +0000
asID:                     206628
IP address blocks:        2602:fd50:20::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:24:10:72:57:1b:18:ea:27:d8:64:8e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Aug 11 04:00:00 2021 GMT
            Not After : Sep  5 04:00:00 2023 GMT
        Subject: CN=dd565178-366a-43a1-b796-ef23a98a7a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ce:3b:49:9b:86:a1:dd:fe:10:07:dc:e2:61:
                    19:a3:8c:01:cf:9d:87:0f:e5:29:cf:c1:35:68:0c:
                    20:d0:48:b4:e3:03:fa:20:fc:29:82:20:fb:8a:c9:
                    df:1c:48:48:74:9e:87:a0:db:d9:24:f0:36:4c:05:
                    d3:79:66:49:41:bd:1c:29:5a:58:1c:e5:15:4f:a6:
                    38:19:37:7b:d5:1b:dd:73:3c:be:fc:6a:ed:a0:55:
                    b1:de:b8:c8:a3:93:69:3f:5e:73:78:ef:53:1a:c7:
                    7c:eb:ba:73:66:d0:6d:9a:e7:17:c7:af:f5:f8:cb:
                    51:fe:89:40:2a:ce:80:32:d5:59:0d:3f:2e:74:e0:
                    86:9b:c7:bb:b9:1d:69:28:5c:f4:67:2a:f8:a0:ee:
                    75:3e:49:c1:7e:75:4e:1a:af:dd:44:69:6b:c6:7c:
                    45:aa:f5:84:04:5e:d1:7f:dd:4d:ed:5f:40:7b:80:
                    37:41:f7:f7:31:ba:ce:51:5a:7f:68:9b:52:fc:01:
                    ea:1a:7a:4d:5c:0d:8e:09:db:ed:d3:13:fb:8b:07:
                    a6:a6:18:4b:35:b9:23:57:48:c4:01:03:73:fa:18:
                    e6:1d:3a:2c:54:75:61:66:f9:ca:23:2e:69:9b:95:
                    90:b5:80:da:33:3f:fe:3d:9b:d8:f1:bc:0e:f2:ae:
                    69:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EE:87:93:10:37:56:52:51:27:2B:50:A6:52:64:71:63:C7:A1:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4f2f9d97-df6d-3074-b3f9-ceddff5bc3e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd50:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a1:95:d7:1c:78:bf:12:83:97:d2:21:7f:dc:92:d2:5c:bc:
         7f:3f:0f:b3:32:e1:a5:4b:ea:bb:3b:60:8d:b5:17:27:07:84:
         47:7d:b3:6b:41:19:79:ab:69:76:33:c9:51:14:a3:b7:87:8a:
         44:29:02:99:f3:f8:cd:79:cb:a1:ac:3f:38:36:db:60:49:56:
         74:92:56:74:0c:94:b4:2a:94:0a:e2:84:9a:8e:84:fe:bf:5f:
         e2:fa:d3:71:38:ca:cd:76:cd:eb:28:97:a1:c3:92:69:25:95:
         19:f4:97:82:b6:9c:db:58:7e:30:40:f1:36:f3:c7:c6:d5:00:
         b3:ed:ae:66:74:17:2b:73:8c:29:12:78:ee:74:cf:5b:8f:e6:
         84:b5:c7:7f:a2:23:1c:f8:ab:a5:b2:68:12:cf:23:6f:a0:5e:
         59:de:e3:ba:67:1d:71:24:70:f2:5a:85:18:4a:16:26:38:c8:
         63:0c:c5:27:9b:c9:0c:47:86:d7:19:dd:79:c7:7e:4b:7e:52:
         58:15:5b:c2:31:a4:79:99:6c:33:40:2e:cc:1c:83:34:2e:6d:
         c1:54:59:a4:7a:92:2e:30:6e:ef:89:0c:d3:36:e1:9f:48:92:
         70:60:e3:99:9f:0f:0b:10:c2:96:28:65:e5:ff:be:6b:52:5c:
         08:e6:4c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----