Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/ec7d37d7-572a-3dd2-882b-a8598630424c.roa
File:                     ec7d37d7-572a-3dd2-882b-a8598630424c.roa (raw, json)
Hash identifier:          LE//VSB1uFh3Bl88UMjXo4R19kYn/6sbWsPOH+uNoC4=
Subject key identifier:   77:9A:5F:73:37:2A:06:06:A7:4A:8A:8B:3D:E3:D8:C6:CF:AF:B6:20
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F4328583739452572733B065EAFE85840
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/ec7d37d7-572a-3dd2-882b-a8598630424c.roa
Signing time:             Tue 08 Sep 2020 04:00:00 +0000
ROA not before:           Tue 08 Sep 2020 04:00:00 +0000
ROA not after:            Tue 13 Dec 2022 05:00:00 +0000
asID:                     35950
IP address blocks:        204.156.72.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:39:45:25:72:73:3b:06:5e:af:e8:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: Sep  8 04:00:00 2020 GMT
            Not After : Dec 13 05:00:00 2022 GMT
        Subject: CN=5608c4f6-31e1-4630-a572-6303d58133ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:86:ae:62:8c:42:66:f6:d8:ec:11:86:04:12:
                    a8:1a:0d:21:08:1d:57:f3:00:fd:2b:ba:7e:cc:60:
                    fd:c1:e6:df:0e:bb:34:ee:b6:84:59:28:5e:f6:29:
                    7c:a1:c5:d6:57:6a:f2:62:29:a1:1d:ce:84:7b:46:
                    14:a2:d1:f2:e9:7e:c3:1d:97:e5:6c:e8:c9:11:b3:
                    b0:db:11:be:b9:eb:29:c3:9a:78:69:06:a6:bc:a2:
                    92:60:84:a8:02:37:12:54:fb:ca:cf:c8:42:cb:dc:
                    b3:46:7f:ef:c0:41:ce:b9:36:b5:83:d1:8a:5c:39:
                    84:65:b8:10:5f:47:3a:91:2e:3d:d7:d6:68:46:06:
                    e4:e1:68:8d:ba:ea:7e:1f:8e:74:0a:f0:58:4f:b4:
                    31:9e:b5:f5:a2:f8:7f:85:3b:67:b2:a2:d1:21:13:
                    b3:e4:c3:3d:96:54:c3:95:20:60:21:92:97:57:5a:
                    d8:b0:fd:12:9a:b6:6c:9d:69:2b:40:ec:98:f0:bf:
                    6c:f3:bc:bd:c3:b0:16:b7:e6:b2:44:bf:9e:4c:1f:
                    8b:bd:db:66:7e:3b:13:4c:a7:ec:45:ee:f9:74:ee:
                    65:6d:b9:09:7e:de:be:73:0c:11:46:e3:ae:d3:89:
                    0a:6c:c5:dc:0c:9a:51:6e:03:7e:44:ae:9e:a5:60:
                    5b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9A:5F:73:37:2A:06:06:A7:4A:8A:8B:3D:E3:D8:C6:CF:AF:B6:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/ec7d37d7-572a-3dd2-882b-a8598630424c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.156.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:5e:a8:35:4d:41:5d:89:25:fc:92:68:ef:11:01:e0:b8:ba:
         2a:ea:d2:a6:ba:4e:61:d4:37:cd:f6:bd:cf:2a:0b:68:d0:db:
         ba:e2:ea:6a:ee:23:47:30:87:e3:b2:06:aa:76:18:d6:48:12:
         61:7e:4b:7b:50:a7:c8:13:76:04:3d:14:97:ac:d6:97:ed:62:
         f7:95:20:16:3d:6d:70:f8:e7:32:fa:3d:21:7f:04:eb:a4:fb:
         9e:ab:cc:c1:99:09:52:34:53:15:c7:df:a2:f2:7d:97:f5:74:
         43:c5:58:88:31:d9:26:8f:77:34:d4:85:f7:0f:01:7d:ca:38:
         49:2d:87:2a:01:f0:1e:8f:09:5a:f0:3d:bd:0c:49:67:ed:d1:
         dc:5b:fa:94:1e:f5:4a:48:2a:bb:c2:10:67:6a:5e:8d:d2:2b:
         be:b3:2f:9c:08:b5:3a:6b:d0:1a:b6:f4:68:77:23:92:05:7a:
         57:64:21:c4:57:e8:2c:d8:69:72:95:78:af:e8:c8:2c:b5:4c:
         84:2e:92:3c:9c:8a:78:77:9d:f5:63:6d:b2:57:81:fc:d6:7e:
         29:1f:2f:96:ad:a2:00:14:d7:5e:01:5c:b2:70:0f:82:65:8b:
         dc:58:da:75:60:1d:45:eb:b8:fa:ce:53:7d:a5:43:b3:df:5e:
         c0:a7:f7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----