Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/00601ff6-622b-3df4-bb4a-bd12e1855e34.roa
File:                     00601ff6-622b-3df4-bb4a-bd12e1855e34.roa (raw, json)
Hash identifier:          wVvC9f0hju71C6P2JbL9AuwyLyHRaqV8snMbNmkyv98=
Subject key identifier:   19:9E:BC:DD:BB:8B:BB:39:03:F3:7A:36:4A:20:39:0D:92:52:90:CC
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328576D51CC73C042CFC16FFC945940
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/00601ff6-622b-3df4-bb4a-bd12e1855e34.roa
Signing time:             Fri 31 Jan 2020 17:09:38 +0000
ROA not before:           Fri 24 Jan 2020 05:00:00 +0000
ROA not after:            Thu 05 May 2022 04:00:00 +0000
asID:                     36734
IP address blocks:        63.216.64.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:fc:94:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Jan 24 05:00:00 2020 GMT
            Not After : May  5 04:00:00 2022 GMT
        Subject: CN=eade973c-80c9-45e2-9041-cd2f8d11ac2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e9:ec:c3:14:51:6f:27:4f:6c:52:e5:03:49:
                    33:05:94:5e:28:c5:7b:33:18:e2:7f:d4:2c:83:6a:
                    9c:8e:7f:d1:d8:66:b7:bf:91:63:80:2c:0a:cf:8f:
                    70:12:49:b4:a2:07:ed:d9:f5:7c:ce:c1:e8:ae:86:
                    f0:4b:e9:3a:fb:4a:06:08:45:00:f8:85:16:cd:e6:
                    ce:03:77:67:69:e8:eb:33:03:34:64:3c:85:dd:0b:
                    72:7f:9b:f5:70:7d:13:29:52:71:bb:c0:97:9a:c7:
                    a4:bc:74:ea:28:1b:2c:2c:6c:14:a3:a3:6d:5a:13:
                    e8:99:79:78:b3:57:f8:f7:2a:64:42:2b:14:88:48:
                    1c:4c:a6:7c:cb:20:a7:f3:a7:e8:77:eb:61:45:c6:
                    d6:11:0f:ce:fb:28:1d:59:dd:53:12:f6:a9:4d:3a:
                    0d:8d:3f:fd:01:54:c1:a6:5b:1a:28:8f:28:ff:8e:
                    c6:2a:67:aa:98:23:27:01:38:80:2e:6c:d1:80:84:
                    58:41:11:c9:fa:38:73:d2:0c:ee:98:82:3b:57:9b:
                    43:07:3b:d9:77:23:77:80:34:a1:d3:5e:f4:1e:5e:
                    a5:49:c3:50:92:78:7e:23:3c:a5:a3:a7:38:4f:84:
                    8e:de:c4:12:00:34:b7:3d:9f:c3:d9:62:7a:66:a0:
                    e1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9E:BC:DD:BB:8B:BB:39:03:F3:7A:36:4A:20:39:0D:92:52:90:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/00601ff6-622b-3df4-bb4a-bd12e1855e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.216.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:8b:ef:34:b4:95:65:56:f8:20:04:63:6f:a8:88:6e:b2:8a:
         8d:c2:01:18:d1:b5:b4:1a:c2:52:10:e4:96:fe:d9:3a:79:48:
         21:73:18:e6:e2:4b:9f:db:1f:03:b8:cc:14:5f:fa:a2:a9:ba:
         8a:5b:e3:bd:21:4b:08:c8:f4:8f:e1:b7:04:52:8d:72:14:20:
         0e:c2:c6:d0:88:4a:10:09:2d:e5:34:e2:3e:4d:8f:8e:9f:98:
         f4:98:02:1f:fe:db:f3:9d:73:12:51:a8:74:97:04:04:79:2a:
         95:34:04:dd:10:2d:95:ec:c2:b0:27:4f:7e:c9:26:ce:ee:66:
         ea:34:ab:9b:09:d7:bc:04:01:a5:d5:59:91:0b:70:0f:25:73:
         82:9c:e2:fe:1b:be:08:c3:d3:ca:95:2d:e1:77:dc:3b:fd:47:
         a2:63:97:a0:fa:71:ca:c4:17:a6:ad:35:7b:ba:48:44:56:7f:
         f6:6f:21:01:47:28:88:7d:2d:65:bd:fe:f1:3d:ce:c0:07:52:
         b0:73:95:be:b2:f7:54:2a:35:ce:0a:7c:3b:77:5a:0b:1e:d8:
         60:c6:17:9b:e3:61:31:b5:13:00:a2:ec:54:f6:08:9c:fa:a7:
         19:f1:83:bd:a0:81:f5:46:db:d3:2c:d2:99:d0:5b:75:e5:cb:
         6c:55:3d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----