Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f52404c-69c2-3f65-9c32-d649c37a1bbb.roa
File:                     3f52404c-69c2-3f65-9c32-d649c37a1bbb.roa (raw, json)
Hash identifier:          lnVHWWsisWdco3/4yrRyC0BvYYHslnhOJvyPGX8IcPI=
Subject key identifier:   20:F5:E4:3F:76:F9:F2:D1:19:BF:5C:DE:54:6E:58:54:12:6F:B1:B3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A50C8B6CD2B8D30B44E2540
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f52404c-69c2-3f65-9c32-d649c37a1bbb.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     17197
IP address blocks:        2001:470:9a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:50:c8:b6:cd:2b:8d:30:b4:4e:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=2752e9bf-52d6-4764-95c8-711f043c442b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:06:22:15:22:0a:34:88:82:2f:db:4e:0f:56:
                    86:4f:cf:7f:cc:df:f1:23:8a:f0:b6:10:45:b7:59:
                    3c:9e:68:66:6c:e8:e1:f2:75:5b:57:c8:d5:f2:1a:
                    d7:b9:cc:f3:1a:5c:99:91:9c:ea:9e:26:6e:b1:f7:
                    8b:e5:62:57:fb:8c:17:2c:8a:96:af:a3:d7:b2:7f:
                    0b:51:c7:ec:6b:03:2c:ac:96:20:6d:0f:83:27:72:
                    f4:dd:e9:98:86:23:3d:70:3f:1b:28:9f:ad:af:cc:
                    e2:5b:5d:8f:27:b9:cc:a2:b2:87:28:b7:81:dd:a5:
                    6e:c4:44:73:2c:12:6b:74:82:fb:34:31:7b:df:c3:
                    09:7c:6d:1f:0b:5a:05:3f:7e:17:91:03:8e:b1:f0:
                    eb:f3:c0:53:05:8e:6c:2c:0a:8a:94:13:f3:35:b6:
                    4f:23:36:b0:39:a4:ba:d9:0a:9b:86:c8:0a:48:42:
                    92:fa:d3:a5:2f:ef:5c:cd:7e:1a:b5:be:44:44:48:
                    50:0d:de:a9:fb:ff:af:55:c6:f6:a2:7c:28:bb:84:
                    5f:72:34:82:1b:87:37:66:e7:e5:1b:c4:34:ed:42:
                    4a:93:31:16:71:11:b8:52:ff:69:dd:7f:cc:ef:ae:
                    81:f3:0b:53:cf:83:4e:14:c5:6c:e1:30:6f:48:c6:
                    fc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F5:E4:3F:76:F9:F2:D1:19:BF:5C:DE:54:6E:58:54:12:6F:B1:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f52404c-69c2-3f65-9c32-d649c37a1bbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:9a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:6a:0e:d8:1d:e1:de:ca:2a:ff:c6:41:1e:04:f0:08:d3:fa:
         e4:5c:5c:55:04:3b:46:42:2e:3e:37:da:55:02:d6:e4:0e:e1:
         60:52:f1:31:a2:cc:4d:0b:d7:2d:89:1e:71:82:cf:bc:77:b9:
         89:42:33:d7:64:96:c1:58:7e:09:7d:ea:af:a5:a3:32:1c:93:
         58:83:1b:63:f8:e9:dc:c7:ce:29:60:8c:4e:8c:d5:6b:70:0d:
         af:37:ce:b8:06:0b:16:37:0f:d2:6a:ed:18:f4:7f:61:22:7c:
         44:7c:e4:59:45:ef:4d:43:28:88:ef:b8:25:79:16:e4:da:13:
         e3:e4:a6:5a:fe:10:05:d2:e6:ff:0b:03:87:50:52:5b:c2:d0:
         6a:50:04:af:2d:e0:3f:bd:f2:2a:8b:a6:78:b6:d9:6c:0d:63:
         3c:92:54:6d:68:22:ed:15:86:f0:34:f0:e2:34:23:62:a9:ef:
         f9:88:fd:2c:f0:1b:bc:61:f9:dd:5a:af:11:ac:39:84:c7:02:
         9d:a3:6e:6f:a9:96:a2:a8:b2:2d:0c:57:dd:d1:88:99:a2:6f:
         81:eb:fc:39:55:8f:29:57:8d:fc:eb:60:9f:30:12:e8:01:ca:
         81:a6:7c:21:dc:42:dc:4d:f9:75:1b:30:88:a7:a7:84:40:b5:
         49:d8:f4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----