Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/e04e284f-0b7f-3dcf-a9a5-9f74320433af.roa
File:                     e04e284f-0b7f-3dcf-a9a5-9f74320433af.roa (raw, json)
Hash identifier:          FStbCCuJSYSLJBjPOWZ4bHQ96CTNq7HHUKOYYkuGprw=
Subject key identifier:   DE:A7:A0:D2:EC:ED:8A:EC:BF:B9:F9:BC:6F:94:C1:49:54:14:36:07
Certificate issuer:       /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial:       010D0C9F43285838BB255EBD4E076A8AF534E200
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/e04e284f-0b7f-3dcf-a9a5-9f74320433af.roa
Signing time:             Mon 25 Jan 2021 05:00:00 +0000
ROA not before:           Mon 25 Jan 2021 05:00:00 +0000
ROA not after:            Sun 30 Apr 2023 04:00:00 +0000
asID:                     36445
IP address blocks:        104.255.12.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:bb:25:5e:bd:4e:07:6a:8a:f5:34:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
        Validity
            Not Before: Jan 25 05:00:00 2021 GMT
            Not After : Apr 30 04:00:00 2023 GMT
        Subject: CN=a6d87694-e89a-40bf-98e3-232b5a4472de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0b:fa:ab:96:0b:ec:8a:a4:ae:1d:74:23:7a:
                    49:ed:5e:f7:81:1d:93:cd:77:76:d1:af:c1:f0:3f:
                    a5:7e:79:02:4e:e7:fc:a3:2e:22:75:84:04:96:b0:
                    9b:7e:4a:19:65:a7:47:e6:c7:bf:b6:7e:38:98:00:
                    a6:72:13:62:c0:34:b1:50:80:01:fe:6f:07:51:c3:
                    57:91:d8:9c:ff:00:08:fc:30:ce:6c:bb:f1:4d:7a:
                    ad:c0:2d:5c:3d:26:63:02:d7:9b:ad:12:51:61:d7:
                    68:6d:fc:44:44:a4:a8:79:ba:91:d4:0e:b4:88:2c:
                    7d:03:58:b3:e3:ae:11:82:24:48:17:86:89:ff:c1:
                    f0:1f:0c:2c:bd:fb:3e:a2:8c:d1:88:60:79:de:6d:
                    78:32:a9:99:44:25:5e:f7:b8:0e:47:d9:ed:4f:9e:
                    1e:94:78:05:21:62:73:8a:15:44:ca:a3:e3:6b:9f:
                    98:fa:93:62:cd:f2:9b:c1:a0:18:13:c9:73:6e:4d:
                    f9:06:01:c3:27:a2:27:ae:38:3d:1d:cf:77:96:46:
                    31:52:c4:a4:c2:a5:e4:19:40:f0:f2:8b:d5:3e:9e:
                    a6:19:b1:1a:9d:03:4c:2e:c2:1f:0f:30:b1:27:60:
                    cd:24:9b:91:0b:73:1e:73:5a:e8:6e:78:54:92:11:
                    33:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A7:A0:D2:EC:ED:8A:EC:BF:B9:F9:BC:6F:94:C1:49:54:14:36:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/e04e284f-0b7f-3dcf-a9a5-9f74320433af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl

            X509v3 Authority Key Identifier:
                keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:ea:0b:ba:ba:05:eb:dc:ab:f7:f9:a7:69:92:f6:57:64:5c:
         8f:4c:ea:9f:71:12:3a:68:c9:72:b6:de:b7:42:89:ec:c7:56:
         4f:61:a7:2c:af:af:41:15:5a:fd:e2:b9:28:af:6b:1f:f3:7f:
         24:56:5e:a4:98:a6:63:12:28:8e:44:fe:a4:08:5a:79:9c:37:
         60:dc:aa:78:de:d3:7a:bc:68:f8:c6:99:37:8a:88:8c:70:2d:
         28:54:31:56:06:31:92:af:9b:9f:84:48:ad:c4:7d:b4:30:29:
         8c:64:54:8d:5d:15:03:6a:b5:8d:d6:85:4f:a9:13:67:41:fb:
         b3:10:c3:19:82:7f:ac:e6:61:03:bd:13:25:a0:ae:6a:dd:0d:
         7d:bf:65:09:d5:73:bf:8d:6e:1b:b3:c3:d0:b2:e7:d4:30:f9:
         99:db:d1:14:cf:2c:4a:3e:7f:c7:a6:e3:65:e6:52:4e:9d:83:
         0a:a4:53:17:f0:9e:28:9c:97:0b:f9:67:3b:ef:a2:81:12:7d:
         70:82:98:ec:6f:1a:14:c4:30:42:5c:a1:2f:2b:5f:fb:e7:df:
         83:ae:41:f1:9b:05:01:3d:de:93:fc:4b:d8:9a:9d:3a:69:49:
         64:ee:c4:b4:44:f9:2b:5b:8d:9c:d6:f8:62:2f:8b:84:c0:64:
         80:6f:34:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----