Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/08975f28-d603-37d7-8648-3e272b878ce4.roa
File:                     08975f28-d603-37d7-8648-3e272b878ce4.roa (raw, json)
Hash identifier:          tXwZaoGLhbaWAIVWP8vMYMAIMuIRG5EyrsA8E9iu5Ys=
Subject key identifier:   0E:74:03:F9:AC:B2:84:0E:44:B7:45:CC:4A:E9:8A:42:7B:F0:DA:71
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA6971EA2DCD563CC356D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/08975f28-d603-37d7-8648-3e272b878ce4.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     393763
IP address blocks:        2001:470:79::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:97:1e:a2:dc:d5:63:cc:35:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=1caedb92-b742-45cc-828f-f61af0708618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:66:27:84:7b:57:83:8f:b2:b1:35:38:64:5b:
                    72:4d:08:ca:fd:c9:33:e9:82:f9:6b:2a:4b:4b:2f:
                    7d:6d:51:7b:76:64:49:46:41:b6:14:80:23:90:ea:
                    7d:ae:03:8c:13:f0:fd:3d:97:34:ed:02:43:6d:99:
                    0c:e8:84:75:30:8a:40:ec:9a:ab:73:e4:3e:df:c2:
                    de:9e:71:87:55:50:31:b7:6b:7e:39:a9:7b:5e:6f:
                    0e:0c:9d:b0:aa:94:ce:8d:95:c9:ed:eb:d8:27:76:
                    18:5b:47:fe:4e:83:dd:83:b6:9a:09:4d:c4:13:1d:
                    85:ef:6b:e6:24:06:73:79:b1:a6:53:30:9e:bf:eb:
                    a9:d2:ce:ce:eb:fb:b5:e3:de:7a:4f:44:93:14:46:
                    2f:96:74:c7:47:fd:2b:64:33:4c:fd:c1:74:a4:6d:
                    88:c3:6a:a9:83:7f:79:5d:cd:a9:ff:c4:03:ca:3e:
                    49:c9:aa:fa:31:1e:11:fc:d9:eb:c2:89:49:29:cf:
                    ff:00:14:39:46:30:9d:8c:07:57:2f:48:e0:e2:29:
                    d0:56:db:ea:fd:0f:81:d4:3c:44:bd:b5:49:34:d1:
                    46:cb:c5:b1:29:36:e4:90:0c:2f:cc:cd:bd:f6:5c:
                    ed:e0:8d:f3:f4:78:c1:61:8f:c6:97:b5:fd:79:6e:
                    bf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:74:03:F9:AC:B2:84:0E:44:B7:45:CC:4A:E9:8A:42:7B:F0:DA:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/08975f28-d603-37d7-8648-3e272b878ce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:79::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:36:bc:09:dd:ec:35:0c:a8:64:35:83:fe:66:39:a2:29:e5:
         c3:ac:10:d5:ed:7d:c7:a9:cc:15:90:83:14:d3:ed:a5:db:60:
         60:25:94:a9:2c:ed:72:e9:12:8d:80:d2:41:4b:3a:6c:0c:30:
         de:9b:2c:1c:db:ef:10:af:84:7a:a9:2d:57:15:16:f9:f1:00:
         00:9b:92:02:e0:58:5a:ca:d8:e3:6f:da:4d:d0:f2:41:f6:e6:
         6d:ff:66:69:2b:a3:1f:1e:79:62:a9:20:95:42:24:a6:c5:24:
         68:66:e6:01:49:0a:6b:c4:60:9b:94:fe:fd:05:86:fb:2c:5d:
         77:f9:cb:3d:f5:1c:9a:d4:30:03:d7:38:fc:ab:b2:3b:62:94:
         82:5d:56:c2:9e:96:42:80:92:51:a1:bb:06:d8:ed:0b:bd:7b:
         7f:ba:e5:4a:b6:54:3d:a4:34:05:2d:75:e2:87:47:77:90:c3:
         24:32:71:43:f8:ac:94:8e:70:c4:20:7f:12:13:6a:20:50:95:
         20:8a:67:47:c2:bc:97:26:bb:e5:48:fa:ad:48:04:f6:55:40:
         f5:91:cd:6f:66:2f:25:95:84:86:21:0e:27:e8:96:ca:2d:15:
         28:82:36:7a:7d:c7:8c:81:34:e8:8f:cc:83:e9:93:28:e8:10:
         43:2f:60:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----