Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e7aaeff2-fb45-33e0-bf2c-108ff6ee1272.roa
File:                     e7aaeff2-fb45-33e0-bf2c-108ff6ee1272.roa (raw, json)
Hash identifier:          BuLdZyzH9+KugaVPKqY5DOjRTfUKYZpR95HPdarsiBE=
Subject key identifier:   54:5C:4A:FF:C5:57:CA:80:8D:5C:B7:2D:1E:0B:61:99:82:0A:D8:B4
Certificate issuer:       /CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
Certificate serial:       010D0C9F43285839B8D0DF7ADB67126A914D7B20
Authority key identifier: D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e7aaeff2-fb45-33e0-bf2c-108ff6ee1272.roa
Signing time:             Mon 26 Apr 2021 04:00:00 +0000
ROA not before:           Mon 26 Apr 2021 04:00:00 +0000
ROA not after:            Sat 29 Jul 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        2620:33:c000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:b8:d0:df:7a:db:67:12:6a:91:4d:7b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
        Validity
            Not Before: Apr 26 04:00:00 2021 GMT
            Not After : Jul 29 04:00:00 2023 GMT
        Subject: CN=82dffa37-9afa-41d7-9150-d1d175e148c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b8:46:81:6b:a4:b4:99:41:83:fe:9a:27:8d:
                    c5:30:a6:46:cb:25:0a:15:f7:cb:99:a1:a8:c1:14:
                    53:06:a1:7c:26:38:2c:2d:ac:d1:04:4a:d7:6a:0a:
                    4b:77:ff:12:64:42:64:73:7b:a7:9c:6f:4c:37:79:
                    12:23:e2:c0:a7:e1:53:2c:28:c5:12:2e:0e:07:da:
                    63:9d:63:2c:b5:d0:a4:e3:4b:79:2e:6a:6c:4b:a1:
                    1a:4a:20:dd:82:a6:72:47:e7:d5:77:57:ad:2a:b7:
                    c2:fa:45:ff:89:8b:30:73:e6:f6:c8:9c:f1:ce:2f:
                    bc:46:46:82:68:7e:58:5d:09:57:bf:95:34:fb:39:
                    32:01:ea:ea:84:63:87:50:ee:52:0f:f3:28:28:44:
                    1a:a9:8f:7e:90:71:19:82:9d:e3:e3:61:62:76:fe:
                    7a:c3:b5:88:6d:77:70:55:d1:48:ac:3b:46:c9:f0:
                    2c:63:54:8f:3d:eb:7c:9e:55:4c:d8:96:e2:2f:dc:
                    37:bb:96:bd:ab:0e:62:20:ad:b9:3d:9a:6a:93:4e:
                    dd:69:da:58:bc:96:4d:cb:6c:04:58:d5:9e:3a:1c:
                    8c:0f:a4:09:fc:fb:b7:7b:51:d2:30:40:e9:0f:9d:
                    b1:ba:01:99:50:a6:cc:6a:0b:d2:d3:43:1c:96:26:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5C:4A:FF:C5:57:CA:80:8D:5C:B7:2D:1E:0B:61:99:82:0A:D8:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e7aaeff2-fb45-33e0-bf2c-108ff6ee1272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl

            X509v3 Authority Key Identifier:
                keyid:D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:33:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:91:72:ea:ba:43:28:15:e8:6f:61:98:95:21:90:2e:91:1e:
         18:04:7f:5b:46:77:41:79:c0:f1:aa:19:45:67:2b:b7:72:d4:
         e4:02:74:83:34:8e:d5:f8:03:30:8a:64:ac:4e:ed:1e:82:11:
         06:1a:cc:11:99:d8:74:c6:6a:ab:f3:dc:7d:f3:a3:e2:16:62:
         29:50:e5:15:82:94:2c:de:64:8c:da:57:3a:f0:ee:b1:e8:7c:
         3f:74:7a:6a:75:4f:b6:13:8f:11:c5:95:82:60:25:0d:22:df:
         61:71:dc:d1:8d:fe:24:fd:db:f6:c3:0c:67:0c:af:0d:78:dd:
         33:cd:50:e7:12:eb:6a:56:77:d4:92:99:3c:83:4d:08:0b:57:
         bd:91:f4:aa:fa:98:6a:f7:91:65:1b:97:ee:6d:4f:4a:d4:9a:
         f0:56:01:c2:55:cd:05:69:d4:b8:76:00:e0:11:52:7c:a7:cb:
         04:9a:3f:06:06:d6:82:09:52:38:77:e2:aa:db:56:e6:ca:19:
         bb:38:36:8f:9d:b9:f1:ff:4b:07:d3:a3:d9:6a:48:3d:4c:b8:
         71:00:a7:9a:07:68:f6:0f:e1:6f:c2:64:24:09:e6:0f:3c:5e:
         92:b6:62:d7:ef:62:9a:b7:2f:85:59:70:79:07:9a:b9:a9:09:
         21:a5:ec:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----