Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/ea59d126-e3fb-308b-a0d3-9795439ec71e.roa
File:                     ea59d126-e3fb-308b-a0d3-9795439ec71e.roa (raw, json)
Hash identifier:          w1x3LJwf9JTL+6cxixSWtKcexWffgoCXpFdVsGTkWas=
Subject key identifier:   03:E6:8D:3C:47:9F:59:8F:7D:7A:5D:DD:61:E1:D7:7A:51:C9:C4:A1
Certificate issuer:       /CN=55e7b8e0-0df5-4481-84e4-83619b05f966
Certificate serial:       010D0C9F4328583846996336F840E5B98A89EB80
Authority key identifier: 61:AA:90:72:0A:BC:38:A3:EE:E2:A2:55:8A:C1:C0:63:76:26:67:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/ea59d126-e3fb-308b-a0d3-9795439ec71e.roa
Signing time:             Mon 14 Dec 2020 05:00:00 +0000
ROA not before:           Mon 14 Dec 2020 05:00:00 +0000
ROA not after:            Sun 19 Mar 2023 04:00:00 +0000
asID:                     4906
IP address blocks:        2606:ec0:1000::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:46:99:63:36:f8:40:e5:b9:8a:89:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e7b8e0-0df5-4481-84e4-83619b05f966
        Validity
            Not Before: Dec 14 05:00:00 2020 GMT
            Not After : Mar 19 04:00:00 2023 GMT
        Subject: CN=f3c87b30-1ddd-4850-bce2-ab071d2425f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:08:b3:28:bf:2d:53:fe:3b:8f:45:f6:66:2e:
                    be:eb:c8:75:80:ea:db:25:01:f8:37:d1:14:77:7a:
                    66:a7:6d:ac:10:23:36:1f:6f:62:68:c0:dc:9d:00:
                    ff:a0:48:63:88:a9:ad:18:0f:3d:2a:ed:96:b1:f1:
                    12:3e:81:f4:5b:08:d5:2b:bd:87:c6:33:60:ca:15:
                    7d:b9:7c:cd:45:4a:2b:2d:12:11:37:07:38:8b:da:
                    ca:e7:ff:47:87:51:53:f5:f0:65:8f:e6:fb:7e:83:
                    f9:58:9c:7b:57:ab:99:5f:cb:46:05:66:75:00:3e:
                    ac:a4:37:70:28:7e:d4:10:8c:df:8c:1e:00:6b:58:
                    a2:43:c9:5b:08:f7:ed:83:7f:49:9e:6b:89:d0:38:
                    37:cc:c8:de:69:43:9e:4a:06:ba:0f:cb:59:75:b5:
                    34:4b:7c:ee:25:70:e1:eb:90:f8:f8:a4:ce:8e:9b:
                    39:94:e1:a0:2b:2e:c1:ff:69:73:a7:2e:ca:d9:03:
                    63:98:ca:3c:c4:84:7c:bf:5e:9a:ff:2f:f9:53:73:
                    99:ab:0c:d0:87:f9:59:f1:05:e3:3f:74:0a:e0:41:
                    fe:fb:59:29:ee:db:27:37:a4:e6:04:16:a4:2a:4e:
                    db:84:e1:c0:c9:d8:71:01:d1:44:f4:05:c6:bc:70:
                    78:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E6:8D:3C:47:9F:59:8F:7D:7A:5D:DD:61:E1:D7:7A:51:C9:C4:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/ea59d126-e3fb-308b-a0d3-9795439ec71e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/55e7b8e0-0df5-4481-84e4-83619b05f966.crl

            X509v3 Authority Key Identifier:
                keyid:61:AA:90:72:0A:BC:38:A3:EE:E2:A2:55:8A:C1:C0:63:76:26:67:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ec0:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:5e:5e:bc:bd:0d:ff:e4:03:3c:15:bf:82:48:93:59:e8:76:
         22:67:c7:02:13:d2:9d:9f:66:26:22:c2:8a:e0:c1:01:59:01:
         a1:4e:db:04:5c:10:f2:29:15:c3:fe:65:18:53:a8:b8:32:18:
         41:b6:b9:04:2c:ac:24:33:3f:f4:2b:67:23:ac:f6:17:48:bd:
         5d:33:61:e9:f5:bf:28:2c:b8:99:e9:9f:42:1f:3f:c3:68:c1:
         c5:29:42:14:78:2e:25:f8:54:ce:d6:d7:95:70:70:98:3f:d7:
         70:0b:00:7d:bb:2f:fb:ac:21:93:75:4c:e8:f1:6f:9a:31:75:
         fb:2d:de:3a:c0:7f:8a:3f:3d:d4:da:62:a0:31:0c:7c:05:cf:
         4a:d3:78:1b:eb:1d:39:ed:48:84:0e:e8:04:43:92:10:7f:75:
         2a:5c:56:25:70:73:48:1a:ea:bb:c0:5f:94:86:00:88:c2:1f:
         4a:d2:fd:32:f3:ed:41:6e:f0:e1:ba:7c:89:75:d5:b8:d1:76:
         ff:f6:c4:cb:98:8e:cd:51:19:c1:ce:b5:6e:79:10:60:e9:6f:
         44:a3:75:85:02:16:2a:b5:5e:86:3e:8c:24:ab:d6:5d:31:a9:
         f0:14:e7:56:56:5d:cd:c4:ee:6a:71:db:d0:83:3b:28:5f:d2:
         da:73:e9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----