Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4dec7b4a-a2c1-33f2-9064-82c7a38f4650.roa
File:                     4dec7b4a-a2c1-33f2-9064-82c7a38f4650.roa (raw, json)
Hash identifier:          y2kc/R9yQJukV8CLC9jm71SQWG2YSplOzPw3QI1/9VI=
Subject key identifier:   47:63:AA:99:8C:AC:01:DC:BD:05:31:58:9F:5F:7E:8C:56:48:DF:48
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648DF91F249C292D176ADAC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4dec7b4a-a2c1-33f2-9064-82c7a38f4650.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     33309
IP address blocks:        2001:470:5f::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8d:f9:1f:24:9c:29:2d:17:6a:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=fba25b6b-ea56-49d6-90e0-7fec4eaac23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:17:b5:d2:a3:6f:9d:36:d4:91:08:f0:84:8a:
                    88:52:b0:08:f4:1a:dd:b5:ac:b4:cf:b0:55:1e:37:
                    0b:74:b1:45:52:d9:f9:85:56:d8:a0:01:6d:fa:d0:
                    1d:ff:5c:2e:57:38:a0:e7:c1:67:35:2e:64:56:b2:
                    7d:9c:a4:d9:b1:2f:bb:10:aa:f7:23:8b:83:c0:26:
                    a8:54:79:58:f5:d9:a7:fe:d5:9a:1c:79:b6:d1:c0:
                    cb:3d:63:c1:f5:8e:bd:6a:c7:1c:32:02:59:92:30:
                    0e:a8:03:d1:f0:dd:3a:96:9e:48:c1:a6:c7:94:e5:
                    48:4c:ee:9c:52:a6:6d:22:9c:b8:09:45:b1:36:e9:
                    d0:a1:72:61:d7:f6:ad:5a:7d:1d:6c:14:36:e6:ba:
                    49:4b:78:c4:6d:83:80:5a:54:3a:c5:e4:86:5f:25:
                    fe:5a:3a:91:be:58:da:59:5b:e3:4d:84:a7:4e:6a:
                    28:45:09:68:82:4e:46:fe:a7:a1:27:bc:f6:f3:27:
                    48:85:6b:d0:5c:f3:5f:f1:79:b2:ca:4d:d3:f2:96:
                    15:9c:23:ee:24:b3:b1:a8:67:42:84:9a:2d:9d:d9:
                    ae:2f:dd:16:a7:0c:64:1c:01:63:9c:96:fb:3c:e0:
                    d4:de:e3:4f:7f:3a:da:84:86:ab:d2:d0:da:aa:7b:
                    0a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:63:AA:99:8C:AC:01:DC:BD:05:31:58:9F:5F:7E:8C:56:48:DF:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4dec7b4a-a2c1-33f2-9064-82c7a38f4650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:5f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:8a:5b:95:98:ab:00:b1:e6:b5:5c:6b:1a:4e:3a:0a:9a:48:
         f7:46:97:2c:58:e2:b4:f4:7d:bf:29:84:d1:cc:0e:80:38:35:
         0b:62:9b:22:a9:07:d5:7a:74:78:cd:27:74:3c:00:98:fe:94:
         3c:3d:0a:30:77:a0:2f:49:f1:15:44:70:89:3a:0e:d9:4a:57:
         23:eb:09:a9:91:e7:08:df:b6:e9:a1:1a:a9:bf:b7:a6:40:ad:
         bb:00:1c:19:71:f2:0b:26:c1:1f:43:0c:26:17:47:ad:0b:2c:
         33:e2:06:24:b0:9a:fe:fc:dc:c5:ed:8c:6e:e3:11:dd:87:00:
         be:98:d9:dc:0d:5a:10:10:1a:91:b6:9b:da:2b:94:1f:b2:62:
         20:c4:e6:dd:ed:4c:15:73:34:e4:a7:ba:f2:16:00:51:16:a5:
         c4:c5:d8:a8:77:90:02:b7:d6:5e:bd:cc:d7:da:70:c8:1a:9a:
         6f:b0:f1:5f:0c:dc:a1:d3:1e:9f:36:5c:44:39:f5:35:36:a5:
         c3:1a:ad:2a:6f:5c:81:a2:7f:2c:e7:cd:f6:57:38:01:76:88:
         4a:2e:6b:59:f6:6b:c4:da:df:47:d0:cf:ed:d2:04:68:18:fc:
         f8:18:1c:9c:e9:8a:aa:83:1c:d2:2d:3a:37:b5:ff:46:78:24:
         79:fa:f3:39
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD9kjfkfJJwpLRdq2sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDkyNzEyMDAwMFoXDTIzMDMyODA0MDAwMFowLzEtMCsGA1UEAxMk
ZmJhMjViNmItZWE1Ni00OWQ2LTkwZTAtN2ZlYzRlYWFjMjNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRe10qNvnTbUkQjwhIqIUrAI9Brdtay0z7BV
HjcLdLFFUtn5hVbYoAFt+tAd/1wuVzig58FnNS5kVrJ9nKTZsS+7EKr3I4uDwCao
VHlY9dmn/tWaHHm20cDLPWPB9Y69asccMgJZkjAOqAPR8N06lp5IwabHlOVITO6c
UqZtIpy4CUWxNunQoXJh1/atWn0dbBQ25rpJS3jEbYOAWlQ6xeSGXyX+WjqRvlja
WVvjTYSnTmooRQlogk5G/qehJ7z28ydIhWvQXPNf8Xmyyk3T8pYVnCPuJLOxqGdC
hJotndmuL90WpwxkHAFjnJb7PODU3uNPfzrahIar0tDaqnsKNwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEdjqpmMrAHcvQUxWJ9ffoxWSN9IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGRlYzdiNGEtYTJjMS0z
M2YyLTkwNjQtODJjN2EzOGY0NjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABf
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADCKW5WYqwCx5rVcaxpOOgqaSPdGlyxY4rT0fb8phNHMDoA4NQti
myKpB9V6dHjNJ3Q8AJj+lDw9CjB3oC9J8RVEcIk6DtlKVyPrCamR5wjftumhGqm/
t6ZArbsAHBlx8gsmwR9DDCYXR60LLDPiBiSwmv783MXtjG7jEd2HAL6Y2dwNWhAQ
GpG2m9orlB+yYiDE5t3tTBVzNOSnuvIWAFEWpcTF2Kh3kAK31l69zNfacMgamm+w
8V8M3KHTHp82XEQ59TU2pcMarSpvXIGifyznzfZXOAF2iEoua1n2a8Ta30fQz+3S
BGgY/PgYHJzpiqqDHNItOje1/0Z4JHn68zk=
-----END CERTIFICATE-----