Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/6f5241e5-d950-3189-bc06-3b9ca75ef59d.roa
File:                     6f5241e5-d950-3189-bc06-3b9ca75ef59d.roa (raw, json)
Hash identifier:          hcG9QK2PeyngJytxcY8n9QRrPbwS7ikG76GcxlvzCDI=
Subject key identifier:   2F:8A:D0:46:54:7C:7E:40:26:C0:76:A1:AE:71:16:1F:F4:F7:70:47
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328576D51CC73C042CFC17344AD281A
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/6f5241e5-d950-3189-bc06-3b9ca75ef59d.roa
Signing time:             Sun 12 Jul 2020 20:17:45 +0000
ROA not before:           Thu 28 May 2020 04:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     53667
IP address blocks:        2605:6400::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:44:ad:28:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May 28 04:00:00 2020 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=b37fe037-129f-4385-a739-51551ebb593a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5b:59:3c:f6:a0:33:fe:46:3e:0a:c8:78:ba:
                    24:25:0b:0c:42:2a:5c:f2:08:aa:22:47:36:60:94:
                    30:c2:3e:c1:e4:d4:4c:72:14:73:9d:6a:e5:7f:60:
                    81:4f:4d:97:55:39:aa:38:be:94:5f:a6:42:fb:f9:
                    8a:02:51:c8:23:f1:7e:ae:40:b0:3f:2d:f4:0e:7e:
                    79:b0:47:d4:0c:25:80:4b:10:56:cb:cd:96:98:cc:
                    50:28:21:ca:6f:ce:8b:93:8a:43:dc:80:59:95:40:
                    06:01:9c:9a:0f:26:60:f3:42:46:74:d9:a1:29:73:
                    b4:ed:ca:d6:42:a8:90:09:bb:1d:5e:ab:ad:8e:b7:
                    48:85:7b:b7:bd:8b:21:13:de:9b:5e:55:89:40:72:
                    1a:fa:89:7c:1a:d4:48:f1:c8:4b:fe:81:30:3f:f8:
                    2e:1a:ed:6c:06:55:06:af:42:ab:e2:1f:28:3f:82:
                    0e:a2:0d:3e:74:dc:99:eb:6c:bb:a4:d4:14:88:6f:
                    ec:5f:c6:c9:2a:9c:60:d5:75:c6:fa:50:e5:fd:2a:
                    69:0c:3e:6b:66:33:f6:2d:89:01:fa:bf:ca:79:7c:
                    12:22:71:4a:e0:e2:db:50:0a:9e:84:0f:a6:b0:85:
                    0d:70:9f:0a:a4:c4:e6:9e:dd:f1:49:cd:f4:91:b7:
                    06:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8A:D0:46:54:7C:7E:40:26:C0:76:A1:AE:71:16:1F:F4:F7:70:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/6f5241e5-d950-3189-bc06-3b9ca75ef59d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:11:ed:c1:0d:37:5b:39:3b:ab:4e:3b:6f:6e:c4:ec:48:cf:
         2d:fa:95:6d:e2:59:f2:ae:d9:f5:6c:77:f8:31:06:26:1a:b8:
         81:60:8b:3d:bd:99:76:90:3d:03:ed:2e:d5:e5:19:ed:18:14:
         da:27:c6:83:38:7c:6b:b6:b4:48:f3:9d:75:6f:83:7f:06:de:
         e4:2d:43:f7:df:8d:b7:81:b1:b8:fa:91:7c:95:71:27:d2:28:
         08:50:71:8f:aa:7a:c3:a4:c4:7b:cd:a3:34:43:41:05:b3:9f:
         50:e6:36:04:cb:07:42:7e:7a:6f:3e:51:1c:3e:78:b3:77:f9:
         63:7b:66:ca:77:b3:8a:c3:e8:08:71:ba:c6:71:17:1b:b4:03:
         db:1e:f6:cd:fd:97:68:90:62:e7:a1:4a:4c:f9:39:0d:91:a8:
         22:63:de:c4:c9:68:3e:f4:63:2c:ad:13:94:0c:e9:29:23:95:
         8e:a2:6d:f9:af:5e:15:ec:cb:49:31:16:6d:6f:59:fb:d5:bc:
         a9:7f:84:14:7d:2a:d3:38:c0:88:38:6d:88:aa:ca:12:c0:2a:
         00:ea:32:8e:09:f4:94:0e:4f:30:03:53:0e:07:03:84:68:4b:
         17:03:8c:37:dc:ed:02:83:67:e8:48:f4:31:c6:82:0f:4d:c7:
         f1:9f:8f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----