Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/130f8c12-6655-38cb-b6a9-d3c8f114f3a7.roa
File:                     130f8c12-6655-38cb-b6a9-d3c8f114f3a7.roa (raw, json)
Hash identifier:          6SXuJM7Jx4txB2z0oNQPwXMrtDsuxuPa4nvR2+P6sqI=
Subject key identifier:   06:F7:F2:D8:1E:6C:DC:2A:96:FE:45:CA:72:FA:6A:40:54:62:65:62
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFADB13466270A6E27280E940
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/130f8c12-6655-38cb-b6a9-d3c8f114f3a7.roa
Signing time:             Fri 19 Nov 2021 05:00:00 +0000
ROA not before:           Fri 19 Nov 2021 05:00:00 +0000
ROA not after:            Thu 19 May 2022 04:00:00 +0000
asID:                     398872
IP address blocks:        2001:470:2f::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fa:db:13:46:62:70:a6:e2:72:80:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 19 05:00:00 2021 GMT
            Not After : May 19 04:00:00 2022 GMT
        Subject: CN=b3f3dc48-56c8-4ef2-8906-b82bc473fff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9a:24:09:3c:f2:05:e9:8d:76:3d:1d:6a:26:
                    10:6d:4a:f7:6d:61:26:9e:0e:f7:fd:71:21:69:da:
                    21:72:1a:34:ef:c6:d4:7a:ac:6a:82:d6:ba:58:f6:
                    8a:0e:60:d1:7f:40:29:ea:13:50:25:13:d0:97:83:
                    8c:74:e8:84:87:50:98:50:8a:dd:11:99:11:99:41:
                    87:9f:8f:5a:e0:4b:16:14:7f:f2:56:0a:49:d7:0c:
                    e0:e5:e9:c5:55:10:c6:c5:d8:58:c2:14:34:58:d3:
                    a4:dc:4a:95:5a:c6:e8:ab:c6:75:f5:53:db:df:0f:
                    ec:73:7e:55:40:d9:54:65:a0:89:fc:73:a4:4f:3e:
                    a1:5f:42:86:10:78:8e:81:c4:c5:f8:76:e8:1f:ca:
                    e9:41:d2:0d:28:88:30:6f:36:25:4d:8e:9a:74:5f:
                    69:42:33:f9:fa:eb:55:9a:1e:51:2e:9c:27:eb:e1:
                    28:7f:cb:61:ca:2b:af:c0:2d:62:a3:cc:24:8e:b1:
                    ac:59:ac:35:71:55:1a:21:38:d5:d4:af:9a:77:60:
                    38:39:c1:aa:9e:71:a6:d1:21:f4:57:f2:06:96:6e:
                    e1:55:b4:fa:3f:af:56:55:54:c3:40:80:d9:15:27:
                    1c:22:fd:ba:22:83:8d:9d:67:b4:d6:cc:bd:2f:f6:
                    79:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F7:F2:D8:1E:6C:DC:2A:96:FE:45:CA:72:FA:6A:40:54:62:65:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/130f8c12-6655-38cb-b6a9-d3c8f114f3a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:28:c2:6d:18:0b:5a:fc:be:9d:a5:9c:07:fb:c0:27:7b:e1:
         5a:d6:8c:77:4f:5a:f8:98:65:7e:85:e2:c8:17:41:29:c4:fa:
         6d:95:0a:9d:ba:1c:fc:a8:4d:9d:7d:f9:5d:eb:ad:60:80:09:
         8a:ff:02:bc:e8:cf:78:f1:19:8a:13:69:65:b9:d2:c7:18:72:
         fa:91:d1:9a:f6:70:6b:10:db:87:4a:3e:ef:88:e9:7b:55:46:
         a5:e2:a7:ae:1e:14:fa:43:52:6e:9d:86:9c:52:01:23:58:dc:
         46:d9:c4:40:1c:36:18:2e:e3:a9:dd:01:f6:9c:40:e7:21:57:
         b5:92:8b:54:96:16:08:ef:8a:04:73:a3:7c:37:6c:9b:fc:32:
         eb:c0:ff:84:58:fc:6f:b8:9b:5a:cc:72:87:a8:85:5c:b7:f5:
         8b:2c:05:8a:f0:fc:fa:ef:8d:6b:51:23:d9:5f:62:81:01:51:
         ee:ce:e4:31:bc:09:d4:d0:81:eb:43:0a:65:9f:6d:66:4f:23:
         35:08:97:bc:a3:73:08:e3:53:6e:3e:35:8e:31:55:bb:5c:bd:
         38:b6:99:5d:23:38:a9:68:61:60:b7:b1:41:6c:9c:e7:39:89:
         5d:95:8b:c0:23:7d:94:d3:fa:b4:c9:0d:38:7b:4e:c2:da:7e:
         72:8c:95:82
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDv62xNGYnCm4nKA6UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIxMTExOTA1MDAwMFoXDTIyMDUxOTA0MDAwMFowLzEtMCsGA1UEAxMk
YjNmM2RjNDgtNTZjOC00ZWYyLTg5MDYtYjgyYmM0NzNmZmYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJokCTzyBemNdj0daiYQbUr3bWEmng73/XEh
adohcho078bUeqxqgta6WPaKDmDRf0Ap6hNQJRPQl4OMdOiEh1CYUIrdEZkRmUGH
n49a4EsWFH/yVgpJ1wzg5enFVRDGxdhYwhQ0WNOk3EqVWsboq8Z19VPb3w/sc35V
QNlUZaCJ/HOkTz6hX0KGEHiOgcTF+HboH8rpQdINKIgwbzYlTY6adF9pQjP5+utV
mh5RLpwn6+Eof8thyiuvwC1io8wkjrGsWaw1cVUaITjV1K+ad2A4OcGqnnGm0SH0
V/IGlm7hVbT6P69WVVTDQIDZFSccIv26IoONnWe01sy9L/Z53wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAb38tgebNwqlv5FynL6akBUYmViMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTMwZjhjMTItNjY1NS0z
OGNiLWI2YTktZDNjOGYxMTRmM2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAv
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKAowm0YC1r8vp2lnAf7wCd74VrWjHdPWviYZX6F4sgXQSnE+m2V
Cp26HPyoTZ19+V3rrWCACYr/Arzoz3jxGYoTaWW50scYcvqR0Zr2cGsQ24dKPu+I
6XtVRqXip64eFPpDUm6dhpxSASNY3EbZxEAcNhgu46ndAfacQOchV7WSi1SWFgjv
igRzo3w3bJv8MuvA/4RY/G+4m1rMcoeohVy39YssBYrw/PrvjWtRI9lfYoEBUe7O
5DG8CdTQgetDCmWfbWZPIzUIl7yjcwjjU24+NY4xVbtcvTi2mV0jOKloYWC3sUFs
nOc5iV2Vi8AjfZTT+rTJDTh7TsLafnKMlYI=
-----END CERTIFICATE-----