Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3761951f-ac97-4bc3-b32b-5cd038cca268/8f3bf1b6-bfbd-3de3-b33c-5266ef4f0da9.roa
File:                     8f3bf1b6-bfbd-3de3-b33c-5266ef4f0da9.roa (raw, json)
Hash identifier:          sFxoLY99HA5EbeBHtuK4B06iAE0wHP8Xi76S2dE4YIk=
Subject key identifier:   C3:19:4C:34:A9:84:FD:60:BF:F8:57:C5:55:1A:19:0A:3B:BD:C1:62
Certificate issuer:       /CN=3761951f-ac97-4bc3-b32b-5cd038cca268
Certificate serial:       010D0C9F4328576D51CC73C042CFC17302967200
Authority key identifier: 20:AF:26:7A:A6:E7:80:F8:04:F6:28:A6:27:76:D8:68:63:7B:FE:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3761951f-ac97-4bc3-b32b-5cd038cca268.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3761951f-ac97-4bc3-b32b-5cd038cca268/8f3bf1b6-bfbd-3de3-b33c-5266ef4f0da9.roa
Signing time:             Tue 30 Jun 2020 00:18:00 +0000
ROA not before:           Mon 04 May 2020 04:00:00 +0000
ROA not after:            Sun 02 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2620:131:1065::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:02:96:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3761951f-ac97-4bc3-b32b-5cd038cca268
        Validity
            Not Before: May  4 04:00:00 2020 GMT
            Not After : Oct  2 04:00:00 2022 GMT
        Subject: CN=0d92e776-3d18-421d-b609-7767ab776a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:7f:a9:1f:e1:77:75:23:e6:d3:74:76:0a:
                    64:09:ed:e3:73:79:02:08:f9:8d:8c:64:1b:ad:2b:
                    29:38:25:11:d0:c5:0b:65:7d:4e:9c:79:e8:b1:50:
                    0f:2d:36:b7:98:39:85:49:82:8f:f9:eb:89:a4:cc:
                    05:ad:35:2f:b7:cd:13:7f:3e:24:b0:3c:15:ca:97:
                    49:cf:07:74:03:b2:17:89:ab:a2:d8:37:3c:ce:7f:
                    ba:42:5d:e0:7a:5e:e5:1b:ee:a8:5d:67:50:63:c3:
                    0a:6c:92:6a:e0:13:48:35:27:0d:d3:12:53:68:59:
                    fc:17:79:96:f0:3e:04:20:b9:d3:c1:5b:93:fe:bf:
                    a4:f1:43:a1:c8:2e:ec:4c:4a:3b:bc:c0:ba:28:28:
                    a6:2f:27:f6:b6:ed:18:2b:de:f3:c9:3c:85:89:ef:
                    07:05:60:e2:5d:af:29:de:1a:5c:8a:dc:81:3e:a8:
                    fb:ed:03:6f:75:5c:33:69:b4:69:c2:dd:61:6c:91:
                    f5:51:da:ef:d7:29:78:e5:e4:c7:1e:83:91:c0:e5:
                    2b:c4:4b:f5:94:50:67:ab:18:ab:af:8e:dc:35:2d:
                    20:65:4f:78:18:fe:5a:ac:f3:f5:dd:22:e9:da:df:
                    8b:0b:95:2c:17:d4:71:e6:6b:32:00:7d:18:ae:f6:
                    03:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:19:4C:34:A9:84:FD:60:BF:F8:57:C5:55:1A:19:0A:3B:BD:C1:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3761951f-ac97-4bc3-b32b-5cd038cca268/8f3bf1b6-bfbd-3de3-b33c-5266ef4f0da9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3761951f-ac97-4bc3-b32b-5cd038cca268/3761951f-ac97-4bc3-b32b-5cd038cca268.crl

            X509v3 Authority Key Identifier:
                keyid:20:AF:26:7A:A6:E7:80:F8:04:F6:28:A6:27:76:D8:68:63:7B:FE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3761951f-ac97-4bc3-b32b-5cd038cca268.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:131:1065::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:b5:85:fa:47:f2:66:1c:2e:56:1f:09:16:4a:b6:21:c9:17:
         7d:22:b8:0e:33:40:66:56:79:61:3a:0d:52:33:af:99:81:b0:
         b6:4a:a4:d7:df:63:54:b5:8d:a4:4f:02:64:51:4a:07:37:2a:
         5a:a1:bc:0e:67:5c:1e:36:64:d7:3b:f4:7f:b8:82:1b:64:f3:
         06:3a:b1:e7:3b:7a:3b:bf:92:bf:f8:2a:1a:4d:2e:33:88:e0:
         1d:6b:4a:1e:0e:be:e8:7e:a4:d5:bf:b2:52:52:86:d4:cf:9b:
         7b:73:c0:b3:bc:d2:8e:5a:97:5e:f9:ec:6a:64:3b:f3:23:0c:
         07:71:04:36:3c:6f:30:76:e2:4c:bd:04:26:0c:9e:fe:63:5f:
         ad:d9:8f:5a:e1:8b:cb:78:60:ca:cb:cd:7b:a9:5b:f7:78:df:
         3f:b9:84:3d:62:18:5c:30:9c:14:bc:9b:1d:8a:a5:85:7b:3a:
         9e:06:ab:dd:34:08:26:71:d2:1e:1e:3f:bb:99:84:07:7b:97:
         90:d7:0b:63:54:e9:67:48:fd:fc:b9:7e:9a:8f:0e:75:0a:2a:
         46:9a:cb:e2:2b:2f:26:e1:a4:d0:30:eb:d4:c1:6a:b7:c9:46:
         89:b9:6f:6a:61:17:b2:45:1c:5c:c0:51:ec:25:ac:2c:c1:f5:
         b7:63:6d:f7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSygAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcwKWcgAwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDM3NjE5NTFmLWFjOTctNGJjMy1iMzJiLTVjZDAzOGNjYTI2
ODAeFw0yMDA1MDQwNDAwMDBaFw0yMjEwMDIwNDAwMDBaMC8xLTArBgNVBAMTJDBk
OTJlNzc2LTNkMTgtNDIxZC1iNjA5LTc3NjdhYjc3NmExYTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAL4Af6kf4Xd1I+bTdHYKZAnt43N5Agj5jYxkG60r
KTglEdDFC2V9Tpx56LFQDy02t5g5hUmCj/nriaTMBa01L7fNE38+JLA8FcqXSc8H
dAOyF4mrotg3PM5/ukJd4Hpe5RvuqF1nUGPDCmySauATSDUnDdMSU2hZ/Bd5lvA+
BCC508Fbk/6/pPFDocgu7ExKO7zAuigopi8n9rbtGCve88k8hYnvBwVg4l2vKd4a
XIrcgT6o++0Db3VcM2m0acLdYWyR9VHa79cpeOXkxx6DkcDlK8RL9ZRQZ6sYq6+O
3DUtIGVPeBj+Wqzz9d0i6drfiwuVLBfUceZrMgB9GK72A1UCAwEAAaOCA1gwggNU
MB0GA1UdDgQWBBTDGUw0qYT9YL/4V8VVGhkKO73BYjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzc2MTk1
MWYtYWM5Ny00YmMzLWIzMmItNWNkMDM4Y2NhMjY4LzhmM2JmMWI2LWJmYmQtM2Rl
My1iMzNjLTUyNjZlZjRmMGRhOS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzM3NjE5NTFmLWFjOTctNGJjMy1iMzJi
LTVjZDAzOGNjYTI2OC8zNzYxOTUxZi1hYzk3LTRiYzMtYjMyYi01Y2QwMzhjY2Ey
NjguY3JsMB8GA1UdIwQYMBaAFCCvJnqm54D4BPYopid22Ghje/6GMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvMzc2MTk1MWYtYWM5Ny00YmMzLWIzMmItNWNkMDM4
Y2NhMjY4LmNlcjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYgATEQZTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEB
CwOCAQEAWrWF+kfyZhwuVh8JFkq2IckXfSK4DjNAZlZ5YToNUjOvmYGwtkqk199j
VLWNpE8CZFFKBzcqWqG8DmdcHjZk1zv0f7iCG2TzBjqx5zt6O7+Sv/gqGk0uM4jg
HWtKHg6+6H6k1b+yUlKG1M+be3PAs7zSjlqXXvnsamQ78yMMB3EENjxvMHbiTL0E
Jgye/mNfrdmPWuGLy3hgysvNe6lb93jfP7mEPWIYXDCcFLybHYqlhXs6ngar3TQI
JnHSHh4/u5mEB3uXkNcLY1TpZ0j9/Ll+mo8OdQoqRprL4isvJuGk0DDr1MFqt8lG
iblvamEXskUcXMBR7CWsLMH1t2Nt9w==
-----END CERTIFICATE-----