Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6a2d882d-0e78-3a23-b734-1ce848a40a22.roa
File:                     6a2d882d-0e78-3a23-b734-1ce848a40a22.roa (raw, json)
Hash identifier:          YaxlTAIXB+xYaCo0cg4cIldmHFJBDHqY66Bsu6UdUJs=
Subject key identifier:   E3:FB:4E:FA:4F:D7:66:00:1A:C3:C7:71:ED:5D:A4:D5:86:E7:04:2C
Certificate issuer:       /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial:       010D0C9F4328576D51CC73C042CFC1715009CBF2
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6a2d882d-0e78-3a23-b734-1ce848a40a22.roa
Signing time:             Mon 06 Apr 2020 15:09:11 +0000
ROA not before:           Mon 10 Feb 2020 05:00:00 +0000
ROA not after:            Sun 10 Jul 2022 04:00:00 +0000
asID:                     32710
IP address blocks:        164.153.130.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:50:09:cb:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
        Validity
            Not Before: Feb 10 05:00:00 2020 GMT
            Not After : Jul 10 04:00:00 2022 GMT
        Subject: CN=dfc703e0-730a-4cb9-9ccc-460edd76c1e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:69:b9:c3:55:84:db:fa:d7:69:f3:ac:03:51:
                    8b:26:47:32:32:ef:be:5a:7e:41:57:89:7a:7c:e2:
                    3a:e2:90:54:24:da:47:dc:f9:29:42:f0:60:e8:14:
                    b3:a0:25:44:4b:15:0b:9a:42:b6:ae:a6:32:8e:c7:
                    24:f3:f8:81:e0:e2:f5:b1:66:87:f4:ec:fd:1c:e2:
                    42:87:01:84:4f:91:77:2b:b1:29:37:b6:12:ac:ec:
                    0e:1a:91:77:99:b7:45:58:c3:db:76:e3:ea:35:54:
                    ca:12:3a:bb:3e:26:ba:15:dc:5f:cd:c0:04:5b:55:
                    22:2f:bc:d9:ed:f4:95:0e:e2:e4:e0:83:13:9f:4e:
                    3a:51:d8:cd:e5:33:00:cf:0e:00:92:97:0a:e4:5a:
                    2f:1b:36:dc:81:52:ca:fb:c0:a1:74:6e:6e:ec:f9:
                    a8:f3:41:11:e4:b0:ae:da:e4:d1:8f:f6:7a:5b:8c:
                    f6:a8:e1:98:4d:35:da:5b:84:23:01:f9:76:33:1c:
                    86:1d:19:93:c7:2b:ba:31:2c:7d:c9:a3:ea:d3:cd:
                    66:f7:03:59:5b:3a:90:c7:59:2e:14:8b:a8:9d:40:
                    b8:25:64:7c:2a:41:4d:38:f1:dc:a5:03:69:a4:47:
                    4d:00:1e:be:5c:73:be:ea:8e:95:34:98:ef:e8:b4:
                    bb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FB:4E:FA:4F:D7:66:00:1A:C3:C7:71:ED:5D:A4:D5:86:E7:04:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6a2d882d-0e78-3a23-b734-1ce848a40a22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:be:f5:7a:31:8c:8e:d8:f0:9f:48:cc:8b:44:d7:8c:14:25:
         46:3f:8d:b6:40:77:28:0d:2d:f4:7c:d4:e3:46:9a:c7:2d:dd:
         f2:9a:a3:59:38:69:fa:e2:77:bc:e5:70:85:77:3f:0e:d5:fd:
         16:ae:d0:2e:cc:ab:20:6f:83:9e:b1:03:58:b0:bf:ce:fc:47:
         a5:ec:9c:1e:d9:7c:41:38:3a:62:92:18:88:f6:3f:ea:fd:10:
         ff:e6:61:91:92:6b:a9:1d:17:5a:86:e0:0e:16:32:07:57:1b:
         be:39:d3:98:46:1a:da:39:c5:06:49:05:1e:43:1f:fe:99:c5:
         84:e4:c5:a0:21:32:08:ed:f9:62:b9:14:ae:46:63:39:42:b7:
         b6:e7:58:bf:b4:a2:a6:1c:f6:b8:45:76:91:a6:e6:ed:b6:ad:
         1c:0a:aa:54:9a:28:1e:eb:63:b0:22:ab:7c:39:29:b1:a2:03:
         7a:80:ee:26:f2:18:1e:a3:04:d5:01:b3:93:de:75:82:d6:61:
         25:e5:d3:85:17:3b:86:2e:82:e2:67:b0:e6:0e:c2:b9:4b:81:
         c8:f6:39:77:eb:f5:7f:b1:a8:22:19:07:3a:02:13:3e:e3:3b:
         35:07:30:89:1c:d6:19:f7:eb:a9:bf:95:ee:c6:eb:96:4a:e4:
         de:ab:34:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----