Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e827f98-14f4-3aa7-a466-4866cd2151c4.roa
File:                     0e827f98-14f4-3aa7-a466-4866cd2151c4.roa (raw, json)
Hash identifier:          8QY5Y8OiX7F6OA8WLc92B+O/qPrghtJJb3CTTthGN8E=
Subject key identifier:   CE:03:4A:B8:E9:F9:77:FA:2A:D2:7A:47:AF:00:D2:B0:07:C7:E9:F1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA6D6F9B7B6347B83421580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e827f98-14f4-3aa7-a466-4866cd2151c4.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     53813
IP address blocks:        2001:470:8e::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:d6:f9:b7:b6:34:7b:83:42:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=1117e260-be49-42af-82ca-0d40cfadebf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:25:45:b8:37:e8:e8:60:96:31:d7:08:c9:55:
                    07:77:f1:63:6d:d4:05:04:94:f7:42:1d:9a:a6:f0:
                    db:3a:6b:7c:5b:2c:3c:b0:a5:54:2a:d9:71:60:51:
                    be:dc:96:21:e4:0b:34:7f:6a:54:4d:23:85:2b:18:
                    60:ae:b2:00:a7:9b:00:8c:08:77:25:2f:ed:e9:11:
                    73:d2:eb:84:cc:3e:f7:f9:98:24:ef:f6:7c:f1:18:
                    43:f3:99:09:01:a6:b0:6a:36:fa:c6:8c:b8:86:bf:
                    19:57:61:2b:84:63:31:9b:ed:c0:84:e9:68:ec:da:
                    0d:b8:77:60:98:b3:dc:0f:e7:94:d9:7a:48:dd:a0:
                    3f:ff:1c:60:91:f6:bd:d0:c6:42:ed:b8:b8:57:78:
                    e1:21:24:ed:c1:2d:c5:ab:f9:eb:b9:df:69:c9:3e:
                    3e:47:4d:b4:71:d7:0a:e3:7d:1c:b8:8a:fb:a9:4f:
                    01:27:ca:b7:10:32:d0:b5:93:c7:a0:d4:64:d0:ed:
                    9c:25:00:bc:f5:2e:56:4e:a3:bf:9f:bf:a9:a7:b0:
                    aa:68:67:b0:b8:f7:83:73:cd:95:88:ce:ec:4d:58:
                    f9:93:c8:42:4c:24:63:da:54:68:49:87:75:28:db:
                    15:24:f9:1e:9b:09:0e:7e:1c:19:29:5f:89:81:82:
                    e6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:03:4A:B8:E9:F9:77:FA:2A:D2:7A:47:AF:00:D2:B0:07:C7:E9:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e827f98-14f4-3aa7-a466-4866cd2151c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:8e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:fd:fe:23:71:dc:19:fc:d6:58:fa:54:1e:d8:e9:1e:38:44:
         4c:98:20:1d:52:a1:97:3d:21:44:04:db:19:89:a6:3f:ae:ff:
         d5:6a:c6:f0:8a:6b:4c:b1:14:c6:53:f3:e0:b6:06:1f:cb:fd:
         35:cc:7a:41:de:a8:ed:b4:70:41:28:58:e2:92:e9:c7:8a:3f:
         da:65:06:9b:d9:49:d6:c5:66:02:01:04:9d:e4:7b:13:eb:50:
         8b:bd:78:e0:0b:20:c6:c5:d2:fe:91:26:1d:3f:31:b1:1b:cc:
         35:c7:af:f2:41:56:6d:5c:b4:fa:fe:a5:fe:19:6b:57:f8:e4:
         c0:d7:95:bc:7a:55:8b:5e:e8:f8:cd:72:22:8e:46:84:22:ee:
         bf:4c:c3:ee:70:05:9b:8c:5e:8c:3d:36:c4:58:2a:8c:41:72:
         ef:1b:23:a1:ea:63:e4:44:81:ad:93:d3:c4:42:10:1a:0e:25:
         9f:a3:57:f3:86:05:e7:0a:32:a0:9d:e0:4d:a9:37:18:00:29:
         6e:96:d0:f0:b3:8a:db:6e:a6:c4:5f:fd:4f:58:3d:58:3d:3e:
         b1:4c:4f:13:a1:b1:62:30:b2:24:0b:db:5f:84:20:92:fd:85:
         35:ca:dc:f4:38:2b:f6:6e:0f:d7:f3:d9:e7:4c:16:89:30:c7:
         39:c7:05:14
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDv9ptb5t7Y0e4NCFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIxMTEyMDA1MDAwMFoXDTIyMDUyMDA0MDAwMFowLzEtMCsGA1UEAxMk
MTExN2UyNjAtYmU0OS00MmFmLTgyY2EtMGQ0MGNmYWRlYmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiVFuDfo6GCWMdcIyVUHd/FjbdQFBJT3Qh2a
pvDbOmt8Wyw8sKVUKtlxYFG+3JYh5As0f2pUTSOFKxhgrrIAp5sAjAh3JS/t6RFz
0uuEzD73+Zgk7/Z88RhD85kJAaawajb6xoy4hr8ZV2ErhGMxm+3AhOlo7NoNuHdg
mLPcD+eU2XpI3aA//xxgkfa90MZC7bi4V3jhISTtwS3Fq/nrud9pyT4+R020cdcK
430cuIr7qU8BJ8q3EDLQtZPHoNRk0O2cJQC89S5WTqO/n7+pp7CqaGewuPeDc82V
iM7sTVj5k8hCTCRj2lRoSYd1KNsVJPkemwkOfhwZKV+JgYLmdwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM4DSrjp+Xf6KtJ6R68A0rAHx+nxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGU4MjdmOTgtMTRmNC0z
YWE3LWE0NjYtNDg2NmNkMjE1MWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJb9/iNx3Bn81lj6VB7Y6R44REyYIB1SoZc9IUQE2xmJpj+u/9Vq
xvCKa0yxFMZT8+C2Bh/L/TXMekHeqO20cEEoWOKS6ceKP9plBpvZSdbFZgIBBJ3k
exPrUIu9eOALIMbF0v6RJh0/MbEbzDXHr/JBVm1ctPr+pf4Za1f45MDXlbx6VYte
6PjNciKORoQi7r9Mw+5wBZuMXow9NsRYKoxBcu8bI6HqY+REga2T08RCEBoOJZ+j
V/OGBecKMqCd4E2pNxgAKW6W0PCzittupsRf/U9YPVg9PrFMTxOhsWIwsiQL21+E
IJL9hTXK3PQ4K/ZuD9fz2edMFokwxznHBRQ=
-----END CERTIFICATE-----