Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20cef11d-4842-38a1-b367-56cc90dbbd84.roa
File:                     20cef11d-4842-38a1-b367-56cc90dbbd84.roa (raw, json)
Hash identifier:          Hl/zJL111bv6Lhx0grOCX4GnsaHUoM7hUxGwx7ZYJt4=
Subject key identifier:   79:4B:7A:3D:40:F9:EA:F2:06:02:6F:CF:31:21:EA:58:43:FC:18:9D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285841B73110361AFA21FC5DE60700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20cef11d-4842-38a1-b367-56cc90dbbd84.roa
Signing time:             Fri 28 Apr 2023 12:00:00 +0000
ROA not before:           Fri 28 Apr 2023 12:00:00 +0000
ROA not after:            Sun 29 Oct 2023 04:00:00 +0000
asID:                     399090
IP address blocks:        2001:470:116::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:b7:31:10:36:1a:fa:21:fc:5d:e6:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 28 12:00:00 2023 GMT
            Not After : Oct 29 04:00:00 2023 GMT
        Subject: CN=335152c2-6c18-4f26-a64a-cb264702c2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:18:66:18:01:a0:66:72:43:41:20:d6:a2:
                    e7:8a:15:cd:ff:8d:2a:82:42:7b:9d:9f:16:8a:f4:
                    57:90:1f:a2:37:09:7a:97:1d:92:a6:ca:8a:9c:77:
                    31:33:b9:38:da:df:96:41:50:fe:35:e6:2c:7f:64:
                    29:d5:07:34:45:3a:79:8b:6c:cd:a0:42:02:b0:29:
                    65:42:e3:1c:9e:ee:6a:fd:6a:78:b2:b7:e2:82:ce:
                    43:8e:84:ee:78:6e:07:cd:0c:fa:e3:5d:26:7a:95:
                    c9:e3:e8:2f:6b:91:10:8f:cf:12:ab:7e:ea:b2:b3:
                    ba:13:4b:fe:25:d0:ca:cb:ac:66:92:f8:a6:e3:74:
                    80:b3:5e:22:0c:51:63:bd:ce:93:67:f6:dd:d9:ee:
                    7b:89:ee:32:a4:88:db:ff:3a:aa:96:08:ec:b6:5d:
                    82:06:9b:68:6e:2d:a9:2e:09:d3:23:2e:19:c9:35:
                    2c:b2:32:22:81:55:e4:a9:da:96:66:fa:c2:22:ce:
                    04:da:36:98:d3:b5:d2:bc:e0:d6:3b:10:8e:fe:36:
                    bd:a5:8d:59:7a:1a:e0:3e:dd:49:75:77:f6:42:0f:
                    9e:7b:10:89:20:12:c4:80:67:4e:fb:3b:87:c1:7e:
                    d6:6a:92:f6:39:63:51:fa:c5:07:c4:09:c5:bb:41:
                    88:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4B:7A:3D:40:F9:EA:F2:06:02:6F:CF:31:21:EA:58:43:FC:18:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20cef11d-4842-38a1-b367-56cc90dbbd84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:116::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d3:04:83:c5:f0:2d:33:d2:fa:0f:19:f0:87:92:20:f8:5d:
         05:2f:d0:c1:42:50:bb:aa:61:7f:88:a5:c3:16:81:7a:07:98:
         2e:3b:12:5a:44:63:4f:2f:0f:f9:dd:79:68:d6:57:8f:12:ba:
         e2:6f:f1:21:65:b9:6a:e2:39:69:a3:cd:c4:2b:62:9e:0d:4a:
         70:38:56:9a:30:d0:1f:17:a9:8d:f5:5f:38:95:64:65:51:62:
         b0:07:e8:61:29:97:08:47:df:90:6e:63:fb:1a:93:aa:c5:ec:
         37:82:c5:55:67:29:04:a3:63:a1:50:33:ed:b0:29:e6:3d:7c:
         20:19:19:e6:01:cd:bf:24:7c:d4:ad:8a:f5:08:3f:99:cd:4c:
         bc:4c:48:3b:5e:26:7d:0c:3e:9a:fc:27:33:aa:a4:5c:8e:21:
         f3:23:69:38:1a:79:fc:ce:4e:0f:e7:57:d6:52:19:db:79:cc:
         dd:90:9f:16:3e:d7:2e:f2:31:c2:75:8c:09:82:d2:35:55:77:
         64:25:0b:c8:cb:69:ab:1c:cf:1d:63:05:05:3b:b9:15:6c:4d:
         4e:66:76:90:2e:3d:9c:48:3d:ff:f0:14:76:0a:76:c2:b7:85:
         15:bf:2f:4f:fb:2e:44:d0:f5:5a:1b:56:8b:02:11:71:69:4b:
         30:aa:42:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----