Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/51f60051-143c-3245-b534-97c2444a487f.roa
File:                     51f60051-143c-3245-b534-97c2444a487f.roa (raw, json)
Hash identifier:          0EHZaOxPU8OQunG5GMwMB1F2nn43Aulgv1qnkoI41QU=
Subject key identifier:   E0:DC:5C:C9:75:9C:02:05:00:66:58:28:88:ED:E1:56:61:4B:25:6C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D7935BBBC6A851E644947A0C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/51f60051-143c-3245-b534-97c2444a487f.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     50763
IP address blocks:        2001:470:5f::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:35:bb:bc:6a:85:1e:64:49:47:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=1f20f417-f6a9-44cd-9765-d3140667f28e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1e:b8:78:1e:20:1f:5b:cf:39:62:96:4b:99:
                    e1:84:69:cb:a4:f4:f8:81:55:76:df:7d:b2:40:83:
                    48:90:3b:69:39:fe:bb:8b:85:77:86:52:60:95:b7:
                    e0:8b:f6:c5:52:6b:31:ee:13:a7:22:d4:b7:5c:5b:
                    9a:1b:7f:35:b4:0b:1a:00:93:c6:9a:0a:73:1d:2a:
                    6c:ab:d1:be:15:ca:f3:d9:63:76:15:26:bf:91:b5:
                    6a:ac:87:e1:c7:8a:b0:a2:11:d4:13:39:bf:6f:b6:
                    05:e1:51:58:6b:3c:42:aa:67:cb:18:ba:9d:3b:0f:
                    d7:64:7a:ca:36:fa:d8:3e:0e:79:70:01:6d:ca:47:
                    a7:45:cf:b8:e3:f2:c3:53:83:4a:b8:ad:95:2f:f0:
                    0a:75:da:d8:39:54:e7:1f:1e:0c:50:70:82:9b:cc:
                    7f:40:0b:14:8e:a7:f2:6b:15:86:35:a7:ba:2d:52:
                    cf:43:32:1b:a9:a8:48:8f:8b:a6:8c:68:1c:2d:83:
                    18:dc:bd:3c:1c:8c:38:ea:0b:b0:fd:77:02:3f:a4:
                    31:a1:eb:f3:70:20:42:9d:95:99:77:0a:19:5e:50:
                    cb:1c:ed:8b:f1:cc:09:d5:2a:99:32:3b:07:64:ed:
                    e0:69:19:e9:54:dc:96:1c:91:d8:e5:31:83:36:3c:
                    02:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DC:5C:C9:75:9C:02:05:00:66:58:28:88:ED:E1:56:61:4B:25:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/51f60051-143c-3245-b534-97c2444a487f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:5f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:e9:d0:75:46:46:e8:80:d9:0b:71:e2:40:e5:4b:43:4d:c8:
         eb:36:aa:07:8d:1a:f5:68:5c:78:41:c3:95:17:4d:e4:1e:ec:
         15:81:b0:b4:22:a9:d7:39:05:fc:95:b8:3e:ca:a6:99:2c:fd:
         bf:a5:f4:34:1e:38:ce:d2:c2:0c:14:a6:e5:5e:50:cb:27:05:
         46:3f:a7:3f:0d:f1:a9:0f:10:45:37:ff:8a:a5:04:31:93:7d:
         99:cc:d0:2f:8d:44:20:e8:2f:31:1b:d6:94:8e:23:b7:cd:84:
         82:ca:c8:86:e9:fe:d0:ac:c8:27:bc:18:f1:8b:5c:76:5b:79:
         5a:43:ef:d2:4e:12:16:64:d5:36:99:df:09:3a:93:5b:77:de:
         03:ff:ee:03:44:85:89:47:9d:a5:ff:a6:8f:1a:90:6f:77:9e:
         4b:9c:9d:b5:8a:26:7b:30:c5:5a:85:7b:e4:59:d8:36:ad:dc:
         af:1c:78:a6:29:19:af:ce:b4:9c:51:ea:9d:b4:dd:f4:4d:15:
         4a:b9:60:ed:c7:8b:3a:94:0c:37:c0:d2:45:84:83:15:ec:0c:
         76:af:dc:41:6d:b0:ce:66:fd:45:32:39:f8:c2:b1:39:e9:b3:
         ec:e9:41:c6:af:2e:fe:89:f6:f4:d5:7d:fb:97:a9:8c:43:3f:
         dc:25:23:a2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD15Nbu8aoUeZElHoMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDQwNTA0MDAwMFoXDTIyMTAwNTA0MDAwMFowLzEtMCsGA1UEAxMk
MWYyMGY0MTctZjZhOS00NGNkLTk3NjUtZDMxNDA2NjdmMjhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh64eB4gH1vPOWKWS5nhhGnLpPT4gVV2332y
QINIkDtpOf67i4V3hlJglbfgi/bFUmsx7hOnItS3XFuaG381tAsaAJPGmgpzHSps
q9G+Fcrz2WN2FSa/kbVqrIfhx4qwohHUEzm/b7YF4VFYazxCqmfLGLqdOw/XZHrK
NvrYPg55cAFtykenRc+44/LDU4NKuK2VL/AKddrYOVTnHx4MUHCCm8x/QAsUjqfy
axWGNae6LVLPQzIbqahIj4umjGgcLYMY3L08HIw46guw/XcCP6QxoevzcCBCnZWZ
dwoZXlDLHO2L8cwJ1SqZMjsHZO3gaRnpVNyWHJHY5TGDNjwCuQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFODcXMl1nAIFAGZYKIjt4VZhSyVsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTFmNjAwNTEtMTQzYy0z
MjQ1LWI1MzQtOTdjMjQ0NGE0ODdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABf
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALfp0HVGRuiA2Qtx4kDlS0NNyOs2qgeNGvVoXHhBw5UXTeQe7BWB
sLQiqdc5BfyVuD7Kppks/b+l9DQeOM7SwgwUpuVeUMsnBUY/pz8N8akPEEU3/4ql
BDGTfZnM0C+NRCDoLzEb1pSOI7fNhILKyIbp/tCsyCe8GPGLXHZbeVpD79JOEhZk
1TaZ3wk6k1t33gP/7gNEhYlHnaX/po8akG93nkucnbWKJnswxVqFe+RZ2Dat3K8c
eKYpGa/OtJxR6p203fRNFUq5YO3HizqUDDfA0kWEgxXsDHav3EFtsM5m/UUyOfjC
sTnps+zpQcavLv6J9vTVffuXqYxDP9wlI6I=
-----END CERTIFICATE-----