Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/22e99b60-b30f-3467-bde4-e31e8fc680ac.roa
File:                     22e99b60-b30f-3467-bde4-e31e8fc680ac.roa (raw, json)
Hash identifier:          wRscegy/kO+lBvqRnUo0NZ3FG+vAh8OqsE+DtSVhW68=
Subject key identifier:   57:70:71:2D:E6:5D:C1:CD:C7:B9:03:EC:39:D1:2C:05:B1:2D:1F:9B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A50FBABF533641F2D704380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/22e99b60-b30f-3467-bde4-e31e8fc680ac.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     30032
IP address blocks:        2001:470:91::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:50:fb:ab:f5:33:64:1f:2d:70:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=5c859e14-a2a3-486f-b13f-c63c74099036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cd:b5:c9:77:6c:ef:0d:09:dc:e8:be:38:5d:
                    98:91:6b:e0:e0:fd:14:af:00:ec:c9:05:0a:00:51:
                    46:18:e5:d0:af:0e:c4:31:4d:8e:01:25:38:a7:0f:
                    b4:36:3c:34:71:9b:65:93:69:0b:a8:b0:a2:8d:30:
                    24:16:46:d5:ac:30:4c:68:69:7c:97:e3:e4:a5:b4:
                    f8:d6:98:c4:6c:f6:c0:59:4e:ba:32:af:0e:a2:7c:
                    e3:b6:85:bd:79:36:6e:88:17:1e:b3:0f:9f:59:c8:
                    45:77:14:3c:96:2b:42:c1:23:fb:8c:0b:03:03:2f:
                    fb:99:8b:fa:73:86:00:b1:7f:67:1d:c4:e7:8d:ac:
                    41:c3:c3:33:39:d4:9a:30:e4:69:74:73:da:ea:69:
                    c2:a5:79:81:68:12:bb:1a:88:38:43:61:75:48:4a:
                    40:87:7a:81:f4:e2:c1:73:10:41:b0:b2:bc:c7:b4:
                    2e:f1:67:f9:34:62:1f:a6:17:d2:61:3a:b8:29:a5:
                    09:54:82:8e:5a:cd:39:97:4a:2e:93:cc:d4:05:11:
                    04:5f:2a:d9:80:ba:9c:21:c9:00:00:b3:a0:45:29:
                    5b:1a:08:d0:fe:70:5b:21:18:ea:66:02:70:a2:54:
                    8d:ec:2f:15:94:69:cd:fb:f5:d4:41:72:44:50:69:
                    46:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:70:71:2D:E6:5D:C1:CD:C7:B9:03:EC:39:D1:2C:05:B1:2D:1F:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/22e99b60-b30f-3467-bde4-e31e8fc680ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:91::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:06:29:33:e2:bd:5e:5d:73:13:c2:b5:7d:41:8b:0f:9d:26:
         ec:a5:e5:71:5d:90:e5:d6:3a:0d:fe:16:81:3b:52:85:03:7c:
         e7:ab:00:f5:55:9d:4f:27:82:79:4a:89:a8:95:8f:4e:e4:28:
         14:2b:fb:a3:80:b1:d9:86:e0:a4:7e:0b:62:f4:32:06:08:96:
         53:40:b1:23:d7:1a:bd:0a:f6:2c:d6:98:cc:97:9a:0d:3f:01:
         38:0c:5f:c3:d1:55:41:59:2e:3a:60:69:81:6d:1f:d8:dc:6b:
         43:38:31:07:01:b4:3a:2b:0e:45:cf:74:66:0d:aa:76:dd:01:
         1d:7b:c3:6b:23:5d:a7:02:99:6b:38:1e:ca:4b:0f:df:3a:a6:
         af:60:d3:6f:27:bb:39:95:ec:a1:76:15:98:77:b3:13:e8:88:
         09:71:8a:2e:f0:3c:eb:09:32:b6:53:ee:06:37:93:17:34:48:
         ff:9e:cb:a5:94:c2:0d:d9:e3:9b:a6:c1:ca:12:0e:ed:5a:a4:
         02:b1:b2:8d:19:c3:f5:04:d3:c0:88:5e:77:b8:04:44:af:aa:
         16:cf:e8:fb:fa:c3:b0:ba:5f:a9:f9:ee:c6:bb:9b:4d:d4:b6:
         fa:8c:e4:c3:bf:3a:77:07:2c:ab:0c:50:5d:30:c1:85:09:bc:
         8a:40:ce:d4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEFKUPur9TNkHy1wQ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
NWM4NTllMTQtYTJhMy00ODZmLWIxM2YtYzYzYzc0MDk5MDM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws21yXds7w0J3Oi+OF2YkWvg4P0UrwDsyQUK
AFFGGOXQrw7EMU2OASU4pw+0Njw0cZtlk2kLqLCijTAkFkbVrDBMaGl8l+PkpbT4
1pjEbPbAWU66Mq8OonzjtoW9eTZuiBcesw+fWchFdxQ8litCwSP7jAsDAy/7mYv6
c4YAsX9nHcTnjaxBw8MzOdSaMORpdHPa6mnCpXmBaBK7Gog4Q2F1SEpAh3qB9OLB
cxBBsLK8x7Qu8Wf5NGIfphfSYTq4KaUJVIKOWs05l0ouk8zUBREEXyrZgLqcIckA
ALOgRSlbGgjQ/nBbIRjqZgJwolSN7C8VlGnN+/XUQXJEUGlGZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFdwcS3mXcHNx7kD7DnRLAWxLR+bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjJlOTliNjAtYjMwZi0z
NDY3LWJkZTQtZTMxZThmYzY4MGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADcGKTPivV5dcxPCtX1Biw+dJuyl5XFdkOXWOg3+FoE7UoUDfOer
APVVnU8ngnlKiaiVj07kKBQr+6OAsdmG4KR+C2L0MgYIllNAsSPXGr0K9izWmMyX
mg0/ATgMX8PRVUFZLjpgaYFtH9jca0M4MQcBtDorDkXPdGYNqnbdAR17w2sjXacC
mWs4HspLD986pq9g028nuzmV7KF2FZh3sxPoiAlxii7wPOsJMrZT7gY3kxc0SP+e
y6WUwg3Z45umwcoSDu1apAKxso0Zw/UE08CIXne4BESvqhbP6Pv6w7C6X6n57sa7
m03UtvqM5MO/OncHLKsMUF0wwYUJvIpAztQ=
-----END CERTIFICATE-----