Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/118b96d9-145f-3e27-9f07-d64e2a8ff6e0.roa
File:                     118b96d9-145f-3e27-9f07-d64e2a8ff6e0.roa (raw, json)
Hash identifier:          stlrgD637S3a0CeNy6igKUK/BrgJdEK4rdU10ROJlHY=
Subject key identifier:   1F:C6:21:EB:38:32:38:54:93:FA:88:4C:EA:7E:FF:A5:F4:6B:29:EB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D7936284541EFD60CDF2875C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/118b96d9-145f-3e27-9f07-d64e2a8ff6e0.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     395717
IP address blocks:        2001:470:143::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:36:28:45:41:ef:d6:0c:df:28:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=b19ec4bf-7333-4ae4-9d4e-2716bf863edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:71:35:29:e1:a2:88:7c:57:bc:f5:5c:8f:04:
                    e2:39:12:0f:ab:75:9f:48:a7:7f:72:4e:81:54:4b:
                    3f:35:bc:0b:b4:4e:62:13:75:fc:3f:50:6c:c8:b4:
                    d4:ea:ab:ef:bd:e0:74:da:9e:d9:a1:4c:96:87:dd:
                    b8:5d:5f:29:59:29:97:c4:66:7f:05:31:d2:1f:37:
                    08:1b:02:30:a9:3e:35:da:8b:a5:22:c1:63:d5:8d:
                    d0:10:cd:bf:f0:4c:64:83:c9:1b:93:56:09:50:fa:
                    22:89:0e:df:bd:e8:93:3c:18:f7:9c:82:ba:45:7c:
                    b0:6e:a3:06:ef:61:8d:cc:8d:f6:92:53:fd:25:fa:
                    9f:6f:3e:9a:cc:57:8f:1c:4d:53:e2:2e:0b:5b:19:
                    a5:08:ea:f3:4d:78:9d:62:c9:2f:2c:79:46:7b:ec:
                    f8:26:8a:71:9f:e6:08:a7:c0:1e:66:93:c2:1d:30:
                    2f:39:eb:27:38:d7:75:7d:7b:97:ca:a4:36:94:1e:
                    b2:24:e0:36:30:6a:61:dc:3f:48:88:a4:f6:58:9e:
                    92:0b:62:3e:72:b6:db:a3:cf:d2:1a:8d:95:2c:6a:
                    75:d3:aa:90:ef:83:ca:22:b8:ed:79:01:4a:3d:84:
                    05:dc:d9:fe:2b:eb:ab:4b:a3:e9:d0:78:d2:e4:e9:
                    8d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C6:21:EB:38:32:38:54:93:FA:88:4C:EA:7E:FF:A5:F4:6B:29:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/118b96d9-145f-3e27-9f07-d64e2a8ff6e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:143::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:10:d6:aa:42:71:05:40:48:1b:93:a7:dc:7b:92:f2:58:8a:
         83:7f:ba:1e:a3:02:eb:4d:e8:94:11:f3:01:20:b6:ce:42:23:
         8b:0c:2a:1b:a8:7f:32:6c:60:68:01:14:f0:1d:96:0b:6c:86:
         1e:44:b2:09:fb:a4:73:c6:7f:f9:da:bc:e5:a0:40:e9:8d:9e:
         ea:a1:dc:6b:5d:2f:be:b3:4d:be:bb:fb:ec:33:02:dd:2a:d5:
         f6:02:ec:83:24:15:31:76:04:47:96:c6:c7:69:35:45:78:bc:
         42:79:0b:c4:cc:6f:a6:d2:37:de:48:a2:22:7f:a5:9f:57:1c:
         3b:d3:2b:5c:cf:df:e0:c1:b9:e6:fc:38:0d:43:d2:c1:3b:ad:
         ae:9d:ce:38:f4:a4:08:9f:88:08:da:0c:ce:59:88:c9:8f:5b:
         de:4b:89:41:6d:69:e3:13:92:e8:50:f1:bd:4f:22:dc:3a:37:
         50:1d:6b:5c:d4:7c:48:1a:2b:db:60:f7:29:27:8a:b1:36:08:
         f9:9a:6b:19:47:5f:22:e1:9d:e4:d1:3f:9c:0f:10:d3:dc:58:
         70:c6:a9:38:fa:12:78:56:b7:b5:bc:f2:43:a5:9a:18:34:0a:
         57:ea:24:44:e1:19:4e:fc:cc:54:81:69:5e:4c:0f:da:ff:c8:
         82:ed:ca:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----