Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/9749ea8d-9728-318d-b4c4-8728320e6670.roa
File:                     9749ea8d-9728-318d-b4c4-8728320e6670.roa (raw, json)
Hash identifier:          T29GZlrqu4YmnkP1EVih7MuFPXKSCMXtOPSXgUXEmvw=
Subject key identifier:   CD:15:E2:34:B7:A1:61:C9:AC:6C:1E:62:AF:60:A0:A7:63:6C:1D:9C
Certificate issuer:       /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial:       010D0C9F4328576D51CC73C042CFC173EF2AC78B
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/9749ea8d-9728-318d-b4c4-8728320e6670.roa
Signing time:             Mon 22 Jun 2020 04:00:00 +0000
ROA not before:           Mon 22 Jun 2020 04:00:00 +0000
ROA not after:            Thu 17 Nov 2022 05:00:00 +0000
asID:                     14413
IP address blocks:        2620:109:c000::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:ef:2a:c7:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
        Validity
            Not Before: Jun 22 04:00:00 2020 GMT
            Not After : Nov 17 05:00:00 2022 GMT
        Subject: CN=348db427-e16b-456b-947b-21d0ce9984d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d9:53:da:a3:e9:9d:ef:26:8f:2c:01:fb:03:
                    80:6e:cc:0e:4d:43:70:51:f9:ea:1c:1e:67:05:31:
                    de:f3:1c:0e:25:bc:d9:11:e6:3b:e5:a9:ce:9a:50:
                    f3:f8:5f:28:d9:36:df:72:55:78:65:8d:76:11:cd:
                    d7:2d:de:14:ef:ba:29:7a:53:cf:a0:22:28:50:a5:
                    f8:0a:95:4a:23:d7:a0:87:28:d1:cd:82:39:e5:11:
                    5b:ae:e3:da:98:dc:0a:d0:81:85:ab:28:50:f1:2a:
                    85:60:88:fc:be:92:44:16:a0:d3:da:83:7c:6f:cc:
                    50:f9:78:92:dc:71:5f:14:3d:2e:c9:89:c4:bd:f8:
                    6d:54:b6:b6:7e:0d:5c:b2:78:b1:1d:20:27:c1:df:
                    6b:08:d3:81:2c:4c:10:47:66:49:6a:da:74:e8:24:
                    26:e4:fc:67:e3:ae:0e:4d:cd:de:5e:77:0e:96:42:
                    f9:0f:d5:c5:49:df:a2:b4:21:4f:eb:9f:74:ea:59:
                    fc:32:cc:b2:35:fe:6f:e5:92:49:39:3b:9a:7c:73:
                    14:81:cc:35:da:36:bb:5d:9f:a1:44:ca:65:4a:8b:
                    81:09:eb:d3:da:b0:33:b8:50:df:c0:4b:88:8c:60:
                    0e:a6:ba:0c:e3:c4:86:99:b2:3c:99:a4:57:13:9e:
                    7f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:15:E2:34:B7:A1:61:C9:AC:6C:1E:62:AF:60:A0:A7:63:6C:1D:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/9749ea8d-9728-318d-b4c4-8728320e6670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl

            X509v3 Authority Key Identifier:
                keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:109:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:9b:45:68:ec:62:80:63:87:cc:04:a2:28:7d:dc:53:dd:fc:
         21:de:c7:08:7a:f4:93:ff:c6:a6:9b:04:ff:f9:b7:ea:24:0f:
         5e:c7:d1:a1:bf:9f:bd:61:89:ab:d8:2c:71:c9:70:28:4d:0e:
         2c:cd:db:24:91:11:a4:39:20:9d:46:14:33:ec:f4:62:5a:ee:
         66:26:db:68:66:8b:94:85:1a:cd:ae:3f:33:9d:d4:6f:0e:85:
         58:4e:a4:87:84:f0:a7:5c:63:32:4b:94:4f:6c:3f:2d:c0:8e:
         72:ef:d5:18:a6:56:9a:5b:1f:c2:36:26:98:d7:3a:fd:91:2e:
         f7:2f:63:5b:5d:e0:1c:75:63:54:d8:ec:df:61:dc:09:93:61:
         86:f7:1d:6b:9d:ff:92:ba:81:03:ab:8b:0b:ec:fa:79:ae:1d:
         e6:33:80:be:74:6c:1c:f8:e3:9b:80:02:d8:d4:00:eb:2e:da:
         6c:c1:ab:b1:cf:5b:f0:e4:77:75:f3:0e:4b:a7:1b:f1:d1:3a:
         3c:88:4a:e0:df:33:60:c3:26:bd:bf:75:7f:c9:11:8c:8a:c0:
         d4:17:d7:16:2a:2d:d2:f5:13:64:e0:6d:d7:55:94:03:66:82:
         e1:a1:cf:ba:11:5a:8f:9d:98:be:3b:66:ea:cc:33:c6:98:62:
         44:45:82:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----