Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/81a78558-546a-3cf8-bae9-3d724f2ad59a.roa
File:                     81a78558-546a-3cf8-bae9-3d724f2ad59a.roa (raw, json)
Hash identifier:          VkXX8uX6qdHP7Y4RRqJr8oht7B9g+n4lXBUFtC40KfM=
Subject key identifier:   54:D5:8C:8F:BD:E7:08:87:C3:CC:3D:FD:2D:4E:61:01:D1:0A:4D:99
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328583C71E42CBDAADAE621C1104100
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/81a78558-546a-3cf8-bae9-3d724f2ad59a.roa
Signing time:             Sat 01 Jan 2022 05:00:00 +0000
ROA not before:           Sat 01 Jan 2022 05:00:00 +0000
ROA not after:            Tue 10 Jan 2023 05:00:00 +0000
asID:                     21957
IP address blocks:        2605:f440:5652::/47 maxlen: 47

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:71:e4:2c:bd:aa:da:e6:21:c1:10:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Jan  1 05:00:00 2022 GMT
            Not After : Jan 10 05:00:00 2023 GMT
        Subject: CN=9e25ae95-676c-46c0-bd48-57171598bbd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:1e:59:3a:73:30:8c:01:ca:05:60:ae:e5:
                    12:bf:b3:e3:8d:a8:43:b9:58:69:80:73:fb:a5:cd:
                    cf:9e:9a:28:77:2f:a9:6d:46:38:be:8c:99:ec:ab:
                    23:3b:ab:12:25:4a:1a:6f:78:ff:fa:e6:5a:2a:c7:
                    b5:f9:f2:78:27:cd:8e:19:e0:81:74:72:f7:a5:78:
                    80:bb:c6:cf:27:4a:14:dc:19:3a:24:84:8c:55:68:
                    9b:73:01:09:28:13:13:9d:97:06:31:1a:73:42:55:
                    dd:eb:2c:13:da:38:db:e0:6a:ce:c3:c5:f5:ac:85:
                    ab:72:ad:9a:9c:af:08:a6:86:50:35:f3:ab:63:7f:
                    73:8f:78:36:63:bb:ee:1e:10:6b:f6:5a:23:e3:d1:
                    11:07:7f:86:c7:7a:47:50:80:89:02:94:5d:33:b0:
                    63:30:18:50:63:78:b1:3f:cb:1a:80:cb:18:d4:03:
                    87:54:03:bd:fa:15:ac:99:1a:95:ba:2a:5a:69:70:
                    d1:65:c0:76:c7:ba:d4:a9:e5:86:9f:26:65:4e:1d:
                    cb:13:36:94:31:49:88:67:2f:a4:73:62:9e:15:cb:
                    66:ff:9a:35:e3:4f:54:28:e3:96:a8:d3:c4:6d:a0:
                    66:05:64:3e:33:8c:0a:9b:da:2c:45:f6:1c:c3:ce:
                    0a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D5:8C:8F:BD:E7:08:87:C3:CC:3D:FD:2D:4E:61:01:D1:0A:4D:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/81a78558-546a-3cf8-bae9-3d724f2ad59a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:5652::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:15:a8:cd:04:7f:05:3a:8a:40:e5:2e:c3:97:ad:47:f9:92:
         9c:33:bc:85:78:54:7b:75:9b:63:3c:60:83:3c:3e:89:d0:af:
         a0:0c:b8:be:8f:c9:41:8f:48:40:76:46:ae:e2:e7:12:18:3f:
         5d:67:55:a4:76:25:46:33:d9:b8:97:e6:1b:70:37:a6:73:2e:
         80:a8:4d:60:50:1a:be:fc:2a:ad:ae:b0:59:33:c9:2b:44:61:
         d6:d1:86:06:66:e3:44:61:58:05:96:b5:ed:cd:2f:90:1d:6e:
         57:49:71:3c:dd:29:98:0c:9c:c2:f9:4b:82:69:7b:af:40:1a:
         db:e0:f9:78:7c:11:a3:f1:1f:91:32:fd:0e:fb:14:42:ea:16:
         e2:e9:24:3d:ac:44:08:10:de:c2:74:3a:79:fc:80:8b:b6:aa:
         f9:fe:87:20:54:a0:44:da:48:e8:82:29:57:88:a5:8c:fd:c5:
         26:b8:81:cd:ea:bb:6e:39:ca:88:73:c1:ef:76:7c:b1:de:b6:
         5a:e1:5d:cd:2f:69:6e:8f:01:8f:df:bb:60:d6:58:d3:f2:ef:
         d9:2d:c2:3f:5f:04:55:98:c7:ec:e2:66:f4:b7:99:08:f9:36:
         91:76:f9:e6:de:b4:78:e6:ce:24:ed:eb:42:e3:88:2d:68:e6:
         07:22:3e:db
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDxx5Cy9qtrmIcEQQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4
ZjcyMB4XDTIyMDEwMTA1MDAwMFoXDTIzMDExMDA1MDAwMFowLzEtMCsGA1UEAxMk
OWUyNWFlOTUtNjc2Yy00NmMwLWJkNDgtNTcxNzE1OThiYmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthYeWTpzMIwBygVgruUSv7PjjahDuVhpgHP7
pc3Pnpoody+pbUY4voyZ7KsjO6sSJUoab3j/+uZaKse1+fJ4J82OGeCBdHL3pXiA
u8bPJ0oU3Bk6JISMVWibcwEJKBMTnZcGMRpzQlXd6ywT2jjb4GrOw8X1rIWrcq2a
nK8IpoZQNfOrY39zj3g2Y7vuHhBr9loj49ERB3+Gx3pHUICJApRdM7BjMBhQY3ix
P8sagMsY1AOHVAO9+hWsmRqVuipaaXDRZcB2x7rUqeWGnyZlTh3LEzaUMUmIZy+k
c2KeFctm/5o1409UKOOWqNPEbaBmBWQ+M4wKm9osRfYcw84KxwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFTVjI+95wiHw8w9/S1OYQHRCk2ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk
MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvODFhNzg1NTgtNTQ2YS0z
Y2Y4LWJhZTktM2Q3MjRmMmFkNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4
NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw
OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2
N2JmMDhmNzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgX0QFZS
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF0VqM0EfwU6ikDlLsOXrUf5kpwzvIV4VHt1m2M8YIM8PonQr6AM
uL6PyUGPSEB2Rq7i5xIYP11nVaR2JUYz2biX5htwN6ZzLoCoTWBQGr78Kq2usFkz
yStEYdbRhgZm40RhWAWWte3NL5AdbldJcTzdKZgMnML5S4Jpe69AGtvg+Xh8EaPx
H5Ey/Q77FELqFuLpJD2sRAgQ3sJ0Onn8gIu2qvn+hyBUoETaSOiCKVeIpYz9xSa4
gc3qu245yohzwe92fLHetlrhXc0vaW6PAY/fu2DWWNPy79ktwj9fBFWYx+ziZvS3
mQj5NpF2+ebetHjmziTt60LjiC1o5gciPts=
-----END CERTIFICATE-----