Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdf7eae3-1726-4868-ac7d-c2c68e6dd895/6ffb9d1b-be05-3299-ba4d-1aade46b5c36.roa
File:                     6ffb9d1b-be05-3299-ba4d-1aade46b5c36.roa (raw, json)
Hash identifier:          kLETdHWAD43y2H9EaEk29fd8EGOYesm23TdLy/cC2Mg=
Subject key identifier:   1E:78:22:6A:C7:4D:A7:E4:AE:14:39:E2:A2:61:95:3A:34:24:B3:70
Certificate issuer:       /CN=fdf7eae3-1726-4868-ac7d-c2c68e6dd895
Certificate serial:       010D0C9F432858382D9735C2A1D12A35C455DE00
Authority key identifier: A3:B5:01:9D:F4:88:EF:A7:AC:A1:62:2C:13:40:BD:AB:CD:8A:88:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdf7eae3-1726-4868-ac7d-c2c68e6dd895.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdf7eae3-1726-4868-ac7d-c2c68e6dd895/6ffb9d1b-be05-3299-ba4d-1aade46b5c36.roa
Signing time:             Mon 30 Nov 2020 05:00:00 +0000
ROA not before:           Mon 30 Nov 2020 05:00:00 +0000
ROA not after:            Fri 10 Mar 2023 05:00:00 +0000
asID:                     36165
IP address blocks:        2606:5c0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:2d:97:35:c2:a1:d1:2a:35:c4:55:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdf7eae3-1726-4868-ac7d-c2c68e6dd895
        Validity
            Not Before: Nov 30 05:00:00 2020 GMT
            Not After : Mar 10 05:00:00 2023 GMT
        Subject: CN=67371e43-8a55-4da9-9035-6c9e92cbfb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2a:ba:19:55:7b:7e:7d:19:3d:17:c7:53:53:
                    66:2f:37:68:11:c7:da:6d:a1:db:eb:b6:82:9a:00:
                    b6:91:a5:6c:04:61:fc:d1:f4:e0:86:2f:c2:e1:62:
                    e1:4e:76:c0:1f:ad:ac:8c:12:a5:43:18:34:d3:fe:
                    90:37:67:4f:e2:63:43:30:e5:52:29:34:63:bf:56:
                    57:ea:81:3f:90:b1:2c:0e:5a:8e:86:85:4b:95:53:
                    bd:4b:99:90:df:41:38:a5:97:0b:f3:90:29:8b:13:
                    9c:19:2d:ce:11:38:3a:51:0b:f4:b6:0f:95:08:53:
                    fe:07:da:38:23:34:55:fb:98:f5:39:0c:24:7d:9c:
                    ab:d0:19:f9:5a:fe:5b:c2:1f:54:85:4b:8c:74:3f:
                    09:4d:86:cc:f5:1f:c8:1e:3e:f0:81:22:0e:e8:4b:
                    2c:88:cd:1d:fe:b5:39:66:96:3b:74:20:89:8a:26:
                    ba:5b:e6:9b:1f:28:78:03:f3:df:73:ca:be:2e:ae:
                    7a:38:a6:02:d3:3d:4f:43:c3:42:68:fe:a3:bf:1a:
                    7e:73:5c:d7:9a:9f:b0:1a:98:46:6d:60:73:46:7b:
                    85:1e:8c:25:02:1f:e8:74:b5:d3:3b:2b:80:49:d1:
                    2a:4a:e7:93:63:38:ca:d6:9e:62:f8:cb:d2:5d:72:
                    74:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:78:22:6A:C7:4D:A7:E4:AE:14:39:E2:A2:61:95:3A:34:24:B3:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdf7eae3-1726-4868-ac7d-c2c68e6dd895/6ffb9d1b-be05-3299-ba4d-1aade46b5c36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdf7eae3-1726-4868-ac7d-c2c68e6dd895/fdf7eae3-1726-4868-ac7d-c2c68e6dd895.crl

            X509v3 Authority Key Identifier:
                keyid:A3:B5:01:9D:F4:88:EF:A7:AC:A1:62:2C:13:40:BD:AB:CD:8A:88:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdf7eae3-1726-4868-ac7d-c2c68e6dd895.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:6e:2f:58:a5:ae:ff:7e:3a:61:62:98:e0:40:13:d5:0e:ae:
         b3:bb:89:ea:9c:0c:7b:8e:4b:c3:83:a6:04:19:92:bb:f9:53:
         0e:2d:ad:12:51:77:b2:15:3e:69:89:9d:fb:eb:4e:ea:2c:8b:
         c2:ba:ba:79:b8:d1:bd:f5:66:90:d6:ea:3c:1d:ce:48:a1:4a:
         9f:cc:01:69:00:95:26:0e:e2:7f:6e:a6:db:e1:c6:87:67:67:
         05:04:3e:a3:df:07:8d:a7:ca:6a:5c:5e:cb:60:f2:68:1c:8f:
         f3:2f:42:de:b8:41:11:8d:21:45:e0:8b:f8:e3:15:8f:39:08:
         b1:8f:f6:28:3b:84:a1:c4:7a:c0:e2:6e:63:db:85:f6:08:20:
         5e:89:1a:99:a5:c0:88:c7:0f:f2:dd:eb:df:9b:cc:7d:e1:61:
         ac:54:d2:0b:ea:bf:9a:e9:bf:18:15:63:55:17:c5:6e:ca:33:
         6c:44:91:12:27:19:8d:f4:f7:14:36:a6:47:74:56:47:32:3c:
         29:12:dc:7e:44:0a:6e:e1:17:b3:3a:7c:ee:4e:7d:c3:38:93:
         42:ca:b0:56:80:14:35:48:b9:ce:54:67:d6:4e:96:6c:10:dd:
         25:88:f5:c5:22:70:69:7e:0a:c2:5d:89:dc:58:18:39:19:81:
         73:98:d5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----