Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/10dfb744-2d4d-344f-b7df-8aa54cbe587d.roa
File:                     10dfb744-2d4d-344f-b7df-8aa54cbe587d.roa (raw, json)
Hash identifier:          PQwRJW4WvWPcmL98oASbiTXwstLzkT8MJMR+QgOqs3I=
Subject key identifier:   B9:E6:51:90:15:A0:6E:04:A6:4F:B5:61:76:56:94:3B:C6:3C:24:94
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D7935BBA8E000A184D7AB8ED8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/10dfb744-2d4d-344f-b7df-8aa54cbe587d.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     50763
IP address blocks:        2001:470:60::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:35:bb:a8:e0:00:a1:84:d7:ab:8e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=8f245197-7602-41e6-8cb3-cb03a74b47a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:38:12:63:61:e2:b1:28:d8:94:27:61:7c:0c:
                    5d:e6:c6:79:96:a9:94:1c:0c:2d:58:1b:40:f2:38:
                    d5:e8:ca:dc:76:c6:e8:5f:28:66:72:c1:ff:9a:e1:
                    35:b1:71:bd:64:93:f8:fc:bf:52:fa:5d:24:f9:a2:
                    d6:c2:f2:02:c2:06:97:2d:51:40:94:a2:cd:dc:16:
                    18:36:64:df:c1:61:fa:d5:c8:06:eb:48:cd:8b:fa:
                    77:87:43:26:54:5f:84:45:ad:ed:8e:5f:48:9a:30:
                    b0:0d:d2:1a:9a:a3:1b:2f:14:5b:38:28:17:83:c6:
                    26:81:4b:11:59:97:da:3a:f5:9b:b2:e5:bb:98:e8:
                    25:5b:5a:69:78:80:69:df:b7:a4:d0:41:eb:61:32:
                    f8:46:b9:26:20:c6:e5:4e:30:e2:1f:7d:82:ef:36:
                    35:c2:41:59:03:9f:9d:13:58:cd:f7:bd:1d:b8:c6:
                    e0:22:38:e6:11:2b:d5:4d:15:7d:6b:d5:00:16:b9:
                    00:f9:04:89:cb:26:63:a8:72:62:1e:34:03:9c:af:
                    f7:7c:c3:d2:e9:c4:e0:a7:34:4c:a0:bb:f5:e8:c8:
                    3e:7e:e2:03:a8:e0:2b:72:58:eb:b7:5f:46:67:70:
                    7c:3d:16:47:ab:3c:17:00:2e:07:37:27:91:76:d3:
                    2b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E6:51:90:15:A0:6E:04:A6:4F:B5:61:76:56:94:3B:C6:3C:24:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/10dfb744-2d4d-344f-b7df-8aa54cbe587d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:60::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:b2:5c:ac:f3:b0:e6:3b:fa:a4:1e:20:9e:90:d7:96:68:83:
         67:35:5b:11:34:8a:5f:95:de:ae:0b:97:94:49:7c:e5:21:f9:
         ba:a8:60:37:4b:fd:ef:4c:45:37:b8:e8:42:78:bc:37:64:a2:
         1d:8e:e4:e4:c2:6d:59:be:e4:58:09:de:ad:6c:44:37:22:6c:
         85:4b:89:b8:ab:ea:2d:be:3d:b6:ca:71:8a:8a:d8:0a:4d:60:
         79:b3:02:8c:c7:55:b3:70:bd:01:b6:ca:b8:20:65:7c:4b:5c:
         d2:1e:ef:54:af:62:9c:01:75:f1:3f:e5:3f:86:1e:45:e5:5e:
         3e:a5:bc:ee:21:08:03:ee:90:c5:d7:90:e9:5f:ba:ce:f3:da:
         1d:21:c3:25:b1:00:b6:fd:1b:3e:be:40:71:e8:21:89:c9:47:
         13:98:de:d4:cf:d5:cd:0b:7a:68:7b:d1:3d:f9:75:9d:b5:4a:
         dd:ca:27:69:81:ca:48:ce:3d:5c:11:59:73:47:8f:a4:18:64:
         55:4b:5a:f7:8b:ca:a4:dd:3c:bc:5d:45:6d:41:b1:a3:cc:e7:
         14:f5:e2:e8:79:10:74:a4:9d:0c:8d:5b:6d:22:76:38:34:8b:
         d6:08:a4:63:15:8a:ba:3c:a0:dc:94:5b:88:1e:16:f3:b6:d2:
         57:4a:c1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----