Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32bdaf6c-6f56-34ba-bf6f-59046e38f2a9.roa
File:                     32bdaf6c-6f56-34ba-bf6f-59046e38f2a9.roa (raw, json)
Hash identifier:          FQqvTNajC6KA++o2r/ArYQqg+o3IKZ7mmR+YnKMWSus=
Subject key identifier:   E6:40:3D:21:1B:0B:EE:3C:61:63:74:43:9A:7D:2E:FD:41:B9:25:13
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648DCC786CF5B249AE90A980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32bdaf6c-6f56-34ba-bf6f-59046e38f2a9.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     15250
IP address blocks:        2001:470:ae::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8d:cc:78:6c:f5:b2:49:ae:90:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=a72d981c-8602-4bb3-9824-a42362c3a659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a3:b7:21:ab:6a:84:4f:4d:28:e3:7a:e0:fa:
                    a9:b0:c5:68:20:0a:10:01:d7:0a:4f:29:e0:b8:4c:
                    d3:55:78:14:4c:47:60:2a:2a:aa:27:1d:9e:29:93:
                    b2:dd:86:bc:96:6b:e1:ff:d7:79:0e:db:ea:25:3c:
                    1e:af:c9:0b:84:68:7e:d7:79:10:3f:85:82:c5:be:
                    3a:9d:15:1a:5a:25:c8:93:90:03:77:69:13:ea:ea:
                    7e:ab:6d:be:2e:81:66:a9:18:54:c7:07:fc:e8:6b:
                    c8:6f:d6:70:a7:b8:d5:64:79:a6:dd:6a:16:b0:6b:
                    65:53:c3:90:d6:f3:bf:6f:21:e5:96:b4:da:d3:6c:
                    af:fd:d7:d8:e5:75:13:ec:99:23:a8:65:93:10:3c:
                    8f:aa:32:6e:40:4a:41:9a:f9:01:17:dd:38:33:17:
                    00:f7:09:a0:55:1c:ad:48:af:f2:3b:6f:2a:f2:88:
                    f1:95:4b:45:c2:14:d6:8f:58:14:a2:8f:23:a6:0c:
                    06:39:f8:16:32:9f:c5:4c:8f:56:17:5e:97:67:1d:
                    80:40:75:60:bb:37:6a:fe:a6:0f:81:4f:de:e5:18:
                    69:0d:bd:e3:93:f2:a9:a2:2f:49:d6:83:d9:6e:01:
                    a7:ff:ef:ee:08:21:de:13:17:68:93:4d:f5:e7:30:
                    04:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:40:3D:21:1B:0B:EE:3C:61:63:74:43:9A:7D:2E:FD:41:B9:25:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32bdaf6c-6f56-34ba-bf6f-59046e38f2a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:ae::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:52:64:f7:11:3f:d1:73:28:8e:18:ac:16:c6:c1:0b:0b:3a:
         40:0e:06:0e:ec:e0:31:1b:44:a7:dd:8f:3f:22:2d:b0:d8:0b:
         78:c9:d1:f5:c4:68:da:23:c5:0a:56:98:74:9f:02:ea:b3:da:
         8b:b8:36:b8:24:9a:dc:e9:7a:f0:cb:b3:78:f2:40:23:69:95:
         b4:fa:37:07:cc:a6:59:12:64:6d:23:6e:29:83:eb:d6:53:1c:
         17:a1:2f:e9:e6:e0:db:99:46:de:b2:ba:b6:90:b7:6d:b6:13:
         04:38:fd:05:ab:40:06:31:57:17:b9:9b:fc:46:52:d5:a8:87:
         9d:2a:b0:5f:a1:6c:ed:52:60:26:0f:5b:d8:c5:1e:93:0e:e6:
         53:18:ce:31:ae:42:7b:0b:95:b3:65:73:94:29:23:c9:fc:b8:
         b1:39:d6:3f:80:46:f5:82:61:73:00:d7:c9:b3:ce:64:7c:4b:
         6c:f4:38:96:2b:10:ed:3b:00:6c:98:4e:a4:55:a3:58:f8:72:
         ae:17:af:7c:29:fa:80:d3:d5:ca:4e:dd:ca:0f:e8:05:cb:da:
         c9:3a:df:53:f4:19:2b:24:97:cf:dd:82:76:1a:c5:85:20:ac:
         f3:37:8f:6f:8a:ad:5c:36:39:62:f4:2f:8a:2f:b9:b2:35:76:
         60:77:56:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----