Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/273a3fbf-04f3-32b8-ac14-66dc84843e0e.roa
File:                     273a3fbf-04f3-32b8-ac14-66dc84843e0e.roa (raw, json)
Hash identifier:          PF6bImtPcNclFiS8JxFfWaNFRdQusk5uLQMUBemRPnI=
Subject key identifier:   25:B4:F0:E7:CA:F4:8C:00:F9:A1:44:EE:30:FD:53:EA:6D:8E:A0:C5
Certificate issuer:       /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial:       010D0C9F43285837748BB349A72AB0D72110A480
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/273a3fbf-04f3-32b8-ac14-66dc84843e0e.roa
Signing time:             Tue 07 Jul 2020 04:00:00 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Tue 03 Jan 2023 05:00:00 +0000
asID:                     398292
IP address blocks:        2602:fd23:2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:74:8b:b3:49:a7:2a:b0:d7:21:10:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Jan  3 05:00:00 2023 GMT
        Subject: CN=dfd236ff-7b73-4631-9eff-d2f56ab153be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:17:cb:a7:89:9c:c4:18:ee:78:b1:bd:ac:66:
                    ac:c3:cf:cb:4e:11:41:e0:15:4a:0e:78:0a:a7:10:
                    b3:b0:4b:9f:de:ab:37:4a:a9:72:60:14:8f:54:4a:
                    23:e0:33:47:d3:e1:c6:a4:71:41:ed:54:47:25:b0:
                    52:51:fc:2f:81:a1:c8:d0:d8:e3:b6:d9:53:68:ab:
                    9d:11:92:68:50:6a:13:a8:c8:be:da:ef:45:a8:83:
                    ae:22:73:b9:fc:e2:15:02:6e:75:6e:02:55:3c:2b:
                    a8:4f:d7:f6:70:3f:08:73:7a:93:a0:d3:23:3e:6e:
                    a0:93:f5:fc:d0:1a:b3:e5:77:b9:3b:00:9d:39:ac:
                    f2:14:c1:26:84:a0:90:a5:5d:cc:7a:2e:d3:25:57:
                    9e:07:ad:69:4b:f6:30:a4:01:e4:bd:8e:c3:6b:50:
                    c1:d3:c3:fb:05:b0:67:ba:f4:40:a0:34:d1:dd:11:
                    9b:0e:5a:18:c5:5e:85:62:91:10:52:0a:97:65:6a:
                    fc:ed:65:c0:87:72:ab:2d:5c:c0:68:2c:c2:ad:17:
                    8b:26:f6:e3:c5:ca:17:2f:2a:47:0d:67:99:03:00:
                    87:31:cb:56:71:81:ae:2f:64:4e:84:e8:53:23:54:
                    78:dc:24:23:65:eb:b5:f5:45:e2:90:7d:cc:c8:c1:
                    34:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B4:F0:E7:CA:F4:8C:00:F9:A1:44:EE:30:FD:53:EA:6D:8E:A0:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/273a3fbf-04f3-32b8-ac14-66dc84843e0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd23:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:e0:88:a4:11:a0:61:78:0a:ab:f9:f1:76:14:dd:05:24:86:
         5d:7f:1b:b4:b9:59:27:4e:7a:25:c2:b7:f9:e4:53:08:ca:d5:
         b0:8e:a2:e8:5f:9c:40:2b:e5:62:2a:02:72:c6:65:cb:c3:93:
         c9:63:bd:50:1b:42:df:e6:be:78:99:9f:21:a9:7a:5f:3a:0f:
         61:b1:03:f8:e8:84:50:d9:6c:1b:9f:09:a7:e0:dc:84:a9:da:
         fa:4f:74:79:97:ce:30:ac:6d:bf:39:5e:3f:f6:66:b3:9b:7a:
         ba:72:a6:5c:68:aa:21:ba:74:5f:67:da:b3:40:8c:e5:ec:3a:
         7c:bb:1b:f8:1c:4e:e5:42:10:86:01:f4:d0:89:c0:10:df:73:
         1c:40:5c:aa:23:9b:4f:a6:bb:c3:76:ab:bd:5e:e3:64:71:81:
         fd:5e:90:33:60:6b:93:1a:79:b6:d8:a9:ad:54:85:69:ec:85:
         98:cb:09:92:7a:c1:99:e4:8e:25:72:34:e9:84:21:4d:8e:9c:
         2c:34:07:71:61:9b:da:f4:ec:55:73:04:b1:b4:be:21:e4:ae:
         59:be:82:d1:61:ee:b8:2b:d8:cd:64:8b:fe:25:73:7f:12:f9:
         14:11:48:9b:c3:76:e2:bc:9a:bd:8e:4b:84:cd:b3:72:37:cd:
         40:03:76:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----