Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f955c57-c3de-3856-aad0-442ed2b0237e.roa
File:                     1f955c57-c3de-3856-aad0-442ed2b0237e.roa (raw, json)
Hash identifier:          897elL9QQH/+JDdA/2WcEnx3s61z8OGWEGS+BB5ENHQ=
Subject key identifier:   DF:FD:C4:2D:9C:48:C6:29:07:C3:4A:88:F2:39:3E:47:C4:34:41:DB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A512848EAAF3A5CC06BD740
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f955c57-c3de-3856-aad0-442ed2b0237e.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     7784
IP address blocks:        2001:470:f3::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:51:28:48:ea:af:3a:5c:c0:6b:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=ee1bc0f3-958d-45e1-9bfa-1ab5d076cf13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0a:77:3d:a5:63:46:25:85:a3:e8:14:c0:85:
                    20:3c:91:69:f5:ff:df:f7:8e:b7:c5:a3:e3:c1:3d:
                    a8:8a:f7:4d:83:7a:12:c8:5e:d8:0f:a7:26:20:f0:
                    fd:4d:eb:89:96:50:e8:df:ca:02:94:a3:c6:2e:e7:
                    30:37:cc:71:99:98:11:d2:2d:b8:8d:0c:ef:98:a9:
                    cf:3a:32:0b:c4:a3:74:dc:7b:4a:23:b9:e1:26:d5:
                    fc:83:11:8b:4a:e0:32:0b:5f:d4:42:c9:11:32:94:
                    ce:60:34:fc:c0:70:c0:b4:e4:8f:3c:1a:1c:b3:62:
                    39:60:97:bd:7b:46:f8:95:57:1f:47:e4:3f:c3:4d:
                    18:fe:de:1b:87:7d:3b:7a:60:4d:30:96:ef:46:c0:
                    2c:44:e9:4d:b8:fe:ef:9f:46:f6:d7:ec:eb:90:0c:
                    cf:a5:44:6a:11:1c:a6:c8:56:38:7b:f0:9c:e7:ec:
                    5b:34:b7:5b:1d:a0:95:76:54:d6:78:09:b1:b8:75:
                    bd:98:fd:dd:bd:a4:8f:fb:9a:5d:4a:f4:f6:fc:ad:
                    f3:07:99:2e:21:3d:cd:c5:39:18:84:1a:51:85:53:
                    28:a9:b1:4c:03:a5:ad:96:0e:dc:33:af:58:87:29:
                    b4:a9:78:4e:8c:76:71:8f:47:5e:b1:a5:d9:8b:e5:
                    5b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FD:C4:2D:9C:48:C6:29:07:C3:4A:88:F2:39:3E:47:C4:34:41:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f955c57-c3de-3856-aad0-442ed2b0237e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:f3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:6c:c1:7d:39:97:34:30:0e:a3:fa:75:70:ed:45:9b:54:49:
         31:24:ac:13:68:4d:8c:1f:82:f3:a1:3c:b6:d2:4c:28:68:ac:
         22:cc:7a:20:91:fa:e7:f6:cc:cb:6f:1d:c1:61:d1:59:9e:23:
         ec:a2:f2:06:ea:0b:25:ae:c6:fe:27:6b:49:a7:b1:96:29:c5:
         2e:d2:81:4a:7f:a6:34:ff:b2:e2:6e:88:7e:4e:5f:89:0c:19:
         52:c0:5e:e5:38:7b:61:bc:70:a4:76:37:3a:4a:92:cd:dc:70:
         b8:98:92:d0:9b:f8:a4:c6:72:72:4f:7d:14:fc:47:a3:78:bf:
         98:55:a6:1f:e2:e1:ea:db:94:4e:cb:4f:d1:12:70:90:59:f6:
         02:9e:86:fb:7c:04:3d:d6:3b:17:45:f1:9a:6a:4e:24:e2:c2:
         13:6e:4b:60:aa:92:2c:8c:be:cf:13:39:a8:b4:69:9c:6a:a4:
         56:98:7c:e2:dc:a1:63:c8:3f:3a:90:85:84:fb:77:62:58:25:
         e2:eb:40:e0:c7:54:52:b6:45:41:78:b4:b1:18:85:e8:e6:78:
         30:7a:fe:6a:ee:28:54:32:2b:f1:e3:e8:0b:68:9f:14:fc:26:
         3b:9f:a6:60:9d:38:54:34:23:58:25:3e:5e:1a:e3:c5:e4:21:
         a6:db:cb:d9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEFKUShI6q86XMBr10AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZWUxYmMwZjMtOTU4ZC00NWUxLTliZmEtMWFiNWQwNzZjZjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAp3PaVjRiWFo+gUwIUgPJFp9f/f9463xaPj
wT2oivdNg3oSyF7YD6cmIPD9TeuJllDo38oClKPGLucwN8xxmZgR0i24jQzvmKnP
OjILxKN03HtKI7nhJtX8gxGLSuAyC1/UQskRMpTOYDT8wHDAtOSPPBocs2I5YJe9
e0b4lVcfR+Q/w00Y/t4bh307emBNMJbvRsAsROlNuP7vn0b21+zrkAzPpURqERym
yFY4e/Cc5+xbNLdbHaCVdlTWeAmxuHW9mP3dvaSP+5pdSvT2/K3zB5kuIT3NxTkY
hBpRhVMoqbFMA6Wtlg7cM69Yhym0qXhOjHZxj0desaXZi+VbMwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN/9xC2cSMYpB8NKiPI5PkfENEHbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWY5NTVjNTctYzNkZS0z
ODU2LWFhZDAtNDQyZWQyYjAyMzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADz
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEJswX05lzQwDqP6dXDtRZtUSTEkrBNoTYwfgvOhPLbSTChorCLM
eiCR+uf2zMtvHcFh0VmeI+yi8gbqCyWuxv4na0mnsZYpxS7SgUp/pjT/suJuiH5O
X4kMGVLAXuU4e2G8cKR2NzpKks3ccLiYktCb+KTGcnJPfRT8R6N4v5hVph/i4erb
lE7LT9EScJBZ9gKehvt8BD3WOxdF8ZpqTiTiwhNuS2CqkiyMvs8TOai0aZxqpFaY
fOLcoWPIPzqQhYT7d2JYJeLrQODHVFK2RUF4tLEYhejmeDB6/mruKFQyK/Hj6Ato
nxT8JjufpmCdOFQ0I1glPl4a48XkIabby9k=
-----END CERTIFICATE-----