Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/073b46de-1fad-3a0f-b00c-66589ef4797e.roa
File:                     073b46de-1fad-3a0f-b00c-66589ef4797e.roa (raw, json)
Hash identifier:          hp82pWmD10hy5HHckW4dgWSHyD7bdjyfgyUM4/FkhE0=
Subject key identifier:   3E:37:32:89:32:CF:4A:3A:99:22:D9:0C:0C:8A:FB:61:86:5F:F8:33
Certificate issuer:       /CN=9ff43aab-c8c2-4f23-91e5-373be2462e9f
Certificate serial:       010D0C9F432858379C3E03E2A4C71A27D1642180
Authority key identifier: 56:45:75:A6:DC:99:39:16:88:BC:D3:FE:86:9A:FD:9C:E9:FD:74:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/073b46de-1fad-3a0f-b00c-66589ef4797e.roa
Signing time:             Thu 15 Oct 2020 04:00:00 +0000
ROA not before:           Thu 15 Oct 2020 04:00:00 +0000
ROA not after:            Wed 18 Jan 2023 05:00:00 +0000
asID:                     18140
IP address blocks:        2620:e6:c000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:9c:3e:03:e2:a4:c7:1a:27:d1:64:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff43aab-c8c2-4f23-91e5-373be2462e9f
        Validity
            Not Before: Oct 15 04:00:00 2020 GMT
            Not After : Jan 18 05:00:00 2023 GMT
        Subject: CN=39631670-46fd-4150-9921-068e627b7fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:47:6a:cd:48:37:04:27:69:36:e0:2d:ef:
                    32:0c:45:96:02:00:0e:65:12:c8:86:4b:13:b6:2a:
                    fb:f8:25:67:8d:6d:18:39:96:3e:af:67:02:ae:05:
                    49:86:8b:f5:9e:d7:ec:78:8d:7a:fe:d6:68:9a:0e:
                    7b:c3:ff:0f:55:10:2a:9a:d7:fc:5c:46:b2:21:aa:
                    06:78:ae:23:03:0a:41:d9:ce:bf:80:8f:f2:d7:93:
                    a7:8f:6f:3d:47:81:5d:3e:8f:c6:8e:90:1d:38:e7:
                    34:c8:77:dc:57:60:ce:79:3a:32:31:fe:f3:4d:d2:
                    52:af:6d:a2:35:76:d7:5b:25:1c:0d:cc:18:f9:94:
                    91:42:e8:ce:06:76:3f:2e:d9:a7:0c:13:8b:59:2c:
                    d5:82:65:81:2a:6c:a0:7e:6c:9e:d6:84:b3:3d:31:
                    3b:96:96:0f:58:9c:b2:e7:9d:40:b5:f9:bd:ec:82:
                    b0:ec:cc:eb:76:f1:fa:13:8f:d3:d2:39:a9:62:44:
                    9a:7d:80:7c:86:a3:80:5f:63:f1:43:2a:fc:80:0d:
                    76:5d:5a:51:c1:32:c6:2d:6c:1e:89:76:d6:b0:f1:
                    fc:a3:38:5c:e8:1c:74:60:1a:1f:d4:8d:8f:66:17:
                    e4:5a:6c:81:34:79:db:d2:0b:c5:4c:48:02:ee:af:
                    01:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:37:32:89:32:CF:4A:3A:99:22:D9:0C:0C:8A:FB:61:86:5F:F8:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/073b46de-1fad-3a0f-b00c-66589ef4797e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/9ff43aab-c8c2-4f23-91e5-373be2462e9f.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:75:A6:DC:99:39:16:88:BC:D3:FE:86:9A:FD:9C:E9:FD:74:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:e6:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ab:ad:82:3b:0e:d5:51:f9:eb:b0:92:76:ab:79:69:dd:31:
         1d:ab:11:b5:5c:2e:df:6d:5c:db:80:cd:a1:41:03:29:4d:af:
         00:c4:2c:5d:f5:29:85:37:a4:35:79:f3:4c:fe:19:b2:e3:cf:
         e7:b4:aa:48:32:30:aa:b9:da:f9:63:2d:1c:25:31:06:9d:e6:
         a0:9d:d1:54:1b:fe:22:20:39:3c:58:ed:ac:e4:5f:bb:b9:35:
         0c:6c:b4:9f:f3:1e:6f:96:38:57:21:93:68:30:e9:57:06:0a:
         9c:73:e1:83:86:c7:db:ee:80:84:2f:bb:5b:d7:f7:8a:9f:ce:
         dc:03:be:65:3f:d3:3a:51:69:04:04:b4:16:ce:88:66:d5:d2:
         33:1b:3b:4f:3f:a4:5e:ba:38:cb:31:22:69:84:e3:fb:29:57:
         6b:b9:83:ac:a2:71:0c:aa:f9:b8:85:35:b0:6d:96:1e:9f:a3:
         cb:b9:58:e6:c2:b3:51:c9:c2:1a:72:03:70:90:98:5b:c4:4c:
         72:7c:d0:39:e8:47:88:ef:38:e6:a1:9e:f8:24:6c:16:98:0d:
         9a:91:39:7a:d0:99:35:5f:ad:4d:dc:98:30:bf:4d:49:4b:90:
         40:c0:3f:08:4a:45:05:fc:e2:31:b6:fd:01:90:20:af:34:5b:
         e9:c5:50:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----