Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/893aacfe-bf59-38d8-8416-80c7a270401e.roa
File:                     893aacfe-bf59-38d8-8416-80c7a270401e.roa (raw, json)
Hash identifier:          E5lgR5wNxNeckdeuawXTbdDfPH+VFrZNgGBbIDcfJC0=
Subject key identifier:   75:87:4E:23:0E:79:0C:6C:3E:EC:24:BD:2E:B8:3B:38:C5:D7:4F:7C
Certificate issuer:       /CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176
Certificate serial:       010D0C9F43285838AB2FD64AA33EE2E75BA41E40
Authority key identifier: 6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/893aacfe-bf59-38d8-8416-80c7a270401e.roa
Signing time:             Fri 04 Dec 2020 05:00:00 +0000
ROA not before:           Fri 04 Dec 2020 05:00:00 +0000
ROA not after:            Mon 24 Apr 2023 04:00:00 +0000
asID:                     397898
IP address blocks:        2602:fccd::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ab:2f:d6:4a:a3:3e:e2:e7:5b:a4:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176
        Validity
            Not Before: Dec  4 05:00:00 2020 GMT
            Not After : Apr 24 04:00:00 2023 GMT
        Subject: CN=3ab98725-6e3e-4cc8-bc3a-f3b7b1478880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:04:e7:34:2b:30:27:98:22:e0:c7:b4:55:d1:
                    d1:3f:f4:cd:db:13:39:bf:1f:a7:2f:11:60:10:c5:
                    f3:c1:7d:e6:44:65:ff:af:ce:00:5a:c3:6e:7b:66:
                    c9:12:5f:81:bc:46:32:3e:9d:6c:8d:a0:45:48:a0:
                    97:5c:4d:5d:c6:eb:b0:ba:4b:8e:9a:ea:dd:33:9c:
                    07:7a:7d:a2:3e:17:57:18:69:2c:d1:62:4f:6a:7b:
                    25:15:7e:68:55:b4:a6:cb:3d:73:5f:d8:82:13:31:
                    fc:28:e1:b3:4b:4d:32:3d:9e:ef:4b:36:ab:0e:a3:
                    95:01:cb:31:56:ec:0a:2f:84:c0:04:51:74:b5:b9:
                    81:6b:26:35:88:69:b7:96:ea:ae:d2:da:14:28:ec:
                    7d:92:1b:b1:fc:fc:d4:72:5e:f7:3f:75:18:94:d2:
                    97:45:e0:71:8e:f3:3b:53:0d:1e:4f:b8:d6:ea:d8:
                    a4:00:b2:22:c3:50:2a:cb:4c:56:0d:1e:fc:cd:7a:
                    47:59:a2:f1:9a:a2:86:9d:ee:83:df:48:d0:fc:c5:
                    fa:61:7e:e2:ca:8c:19:30:c6:b3:ad:5e:e7:8d:4a:
                    46:c1:9f:56:53:e6:6d:d8:a6:5e:38:c9:46:72:bf:
                    19:91:b4:79:21:74:81:77:96:22:34:a7:eb:9c:e5:
                    9d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:87:4E:23:0E:79:0C:6C:3E:EC:24:BD:2E:B8:3B:38:C5:D7:4F:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/893aacfe-bf59-38d8-8416-80c7a270401e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl

            X509v3 Authority Key Identifier:
                keyid:6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fccd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:6a:7b:81:99:e0:48:7e:5f:80:eb:bc:94:94:6d:04:03:7e:
         e4:6b:8f:84:48:97:5d:71:8c:40:0f:1c:55:ad:e8:26:4c:30:
         72:f7:70:a3:c4:56:c3:1b:8b:1b:07:2a:28:37:8e:72:d8:af:
         0c:e0:67:2a:87:94:14:46:30:eb:5d:7b:6b:49:a9:c1:9e:26:
         ce:d9:ba:d8:ee:df:c3:40:42:89:9e:1f:e2:23:22:9c:fa:d6:
         60:48:23:37:3c:b4:67:7c:79:e4:10:24:c6:51:c0:f5:3b:f8:
         46:5d:a4:cf:04:70:a4:57:af:77:72:50:75:da:5b:97:79:ec:
         ab:71:68:01:de:9f:ca:83:a1:3b:e6:81:8f:56:29:f4:b1:7a:
         9c:db:48:fd:cd:55:51:47:58:95:15:ca:bd:7a:c3:0a:ef:6b:
         7b:e8:c9:1b:c1:48:27:93:54:a1:3b:c2:43:87:bf:c6:a0:f6:
         1d:e0:28:79:61:09:57:d9:6d:24:7a:45:17:ed:d5:23:76:b4:
         a4:c7:40:b0:fb:6a:86:c7:16:26:b6:34:fa:87:c7:0c:a5:0c:
         82:c7:6c:09:d3:dc:31:36:44:8d:a4:06:d4:11:e5:41:c4:5d:
         9c:3d:3d:83:b0:88:29:17:84:73:e8:59:63:41:f1:9e:34:bf:
         85:cf:fa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----