Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d1b1a31-5914-3034-9d61-7fff5f3d76d6.roa
File:                     2d1b1a31-5914-3034-9d61-7fff5f3d76d6.roa (raw, json)
Hash identifier:          fG4jkAXsm+tRuFzmluCX67MrZlScjhn61CAW9dZUHeI=
Subject key identifier:   6A:EF:22:58:C6:69:02:C5:68:83:B8:3A:35:F5:71:0C:FF:6A:81:46
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583FC4DE0140EBB439CCED3EBE00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d1b1a31-5914-3034-9d61-7fff5f3d76d6.roa
Signing time:             Mon 31 Oct 2022 12:00:00 +0000
ROA not before:           Mon 31 Oct 2022 12:00:00 +0000
ROA not after:            Mon 01 May 2023 04:00:00 +0000
asID:                     399976
IP address blocks:        2001:470:8f::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c4:de:01:40:eb:b4:39:cc:ed:3e:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 31 12:00:00 2022 GMT
            Not After : May  1 04:00:00 2023 GMT
        Subject: CN=166e48b3-a5b9-4f9e-8196-d42e4c59691c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:55:c9:81:e1:1b:2b:0f:b0:ac:b3:8a:d6:d8:
                    a5:d3:b7:e5:b3:d7:87:8d:16:3b:e1:83:54:9b:35:
                    c0:5f:cd:2a:f3:ca:d2:7c:b7:79:7b:66:9d:b6:eb:
                    b2:98:9a:17:66:e0:9e:51:ce:b3:c7:b2:bc:d9:84:
                    22:16:82:c9:e2:74:6b:5d:cd:94:17:cf:69:ad:c4:
                    8b:4d:07:41:ec:ce:b0:ad:77:63:f3:cd:cf:70:fb:
                    3e:36:8b:75:2c:3b:3f:9d:25:93:15:fc:b8:c2:a0:
                    d6:da:80:62:22:a4:ce:04:75:4a:90:03:7b:6f:6d:
                    fb:7f:98:80:bc:58:6b:f2:e6:9c:85:c0:ea:32:8a:
                    94:75:bb:7f:b5:fd:62:ca:99:cf:19:07:c7:12:9d:
                    c2:d5:7d:d3:91:90:2e:11:7d:2a:9a:0d:6b:65:4e:
                    85:11:2c:43:f6:39:b9:3e:d0:97:31:e6:60:b6:ac:
                    96:94:d7:dc:1f:24:3e:4e:34:b4:7a:d1:c4:a2:a9:
                    a5:ac:f8:5f:6e:ff:0e:33:da:68:bc:5b:4a:76:4f:
                    e4:de:8a:e1:84:82:c6:c6:e2:1e:5c:0d:b2:9f:50:
                    ea:25:83:47:a9:d8:ad:17:2e:9a:93:4a:a7:b8:b2:
                    73:a7:46:9c:09:96:33:ef:54:f2:61:a8:d0:8c:e6:
                    ef:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EF:22:58:C6:69:02:C5:68:83:B8:3A:35:F5:71:0C:FF:6A:81:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d1b1a31-5914-3034-9d61-7fff5f3d76d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:8f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:41:87:0c:b9:12:a2:8b:14:0f:38:b3:c2:71:2f:0e:94:8e:
         f5:fa:40:20:75:3d:17:5a:6e:af:4d:8e:32:d8:ff:1f:66:15:
         a6:0b:32:ec:1f:5f:d1:92:ad:ac:63:64:bf:87:f9:04:4d:47:
         d3:c2:d0:4e:39:79:f0:82:25:be:95:ee:27:6d:53:8e:e0:37:
         18:2b:57:1a:96:36:48:b4:67:ab:a7:34:5f:2f:69:b3:f4:fb:
         ff:59:76:be:b6:f8:20:2b:b1:93:a7:a3:b8:51:d2:75:4b:c4:
         59:ad:b7:70:6b:fd:ab:ab:a7:18:22:5a:9f:63:4f:84:4c:c8:
         3c:52:31:fa:55:ff:a3:ff:ea:60:52:24:b5:2a:c4:7f:e1:4f:
         51:6b:ad:22:8e:06:52:be:cb:61:ff:d3:42:a9:cd:b1:53:9f:
         c5:f2:ef:40:4b:74:8d:ef:3e:43:85:8f:b6:dc:64:8d:9e:2c:
         e9:eb:81:7c:8b:ab:72:65:f2:0c:32:b4:74:cd:49:7a:7c:35:
         44:ae:a9:9d:d9:8e:ff:8a:e5:1e:be:7e:75:6e:07:52:92:79:
         b2:1d:fd:be:98:10:1d:b8:80:53:26:27:6a:32:d5:55:81:91:
         df:57:d2:39:c0:b3:41:fc:b3:45:26:8a:58:b4:9b:26:60:45:
         b6:51:55:71
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD/E3gFA67Q5zO0+vgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMTAzMTEyMDAwMFoXDTIzMDUwMTA0MDAwMFowLzEtMCsGA1UEAxMk
MTY2ZTQ4YjMtYTViOS00ZjllLTgxOTYtZDQyZTRjNTk2OTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVXJgeEbKw+wrLOK1til07fls9eHjRY74YNU
mzXAX80q88rSfLd5e2adtuuymJoXZuCeUc6zx7K82YQiFoLJ4nRrXc2UF89prcSL
TQdB7M6wrXdj883PcPs+Not1LDs/nSWTFfy4wqDW2oBiIqTOBHVKkAN7b237f5iA
vFhr8uachcDqMoqUdbt/tf1iypnPGQfHEp3C1X3TkZAuEX0qmg1rZU6FESxD9jm5
PtCXMeZgtqyWlNfcHyQ+TjS0etHEoqmlrPhfbv8OM9povFtKdk/k3orhhILGxuIe
XA2yn1DqJYNHqditFy6ak0qnuLJzp0acCZYz71TyYajQjObvewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGrvIljGaQLFaIO4OjX1cQz/aoFGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmQxYjFhMzEtNTkxNC0z
MDM0LTlkNjEtN2ZmZjVmM2Q3NmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFxBhwy5EqKLFA84s8JxLw6UjvX6QCB1PRdabq9NjjLY/x9mFaYL
MuwfX9GSraxjZL+H+QRNR9PC0E45efCCJb6V7idtU47gNxgrVxqWNki0Z6unNF8v
abP0+/9Zdr62+CArsZOno7hR0nVLxFmtt3Br/aurpxgiWp9jT4RMyDxSMfpV/6P/
6mBSJLUqxH/hT1FrrSKOBlK+y2H/00KpzbFTn8Xy70BLdI3vPkOFj7bcZI2eLOnr
gXyLq3Jl8gwytHTNSXp8NUSuqZ3Zjv+K5R6+fnVuB1KSebId/b6YEB24gFMmJ2oy
1VWBkd9X0jnAs0H8s0Umili0myZgRbZRVXE=
-----END CERTIFICATE-----