Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5431d371-98ae-39a3-9dcb-ff01b5f12d91.roa
File:                     5431d371-98ae-39a3-9dcb-ff01b5f12d91.roa (raw, json)
Hash identifier:          sUpXe/97ZU24WLNjWYr/vqyPg/UuqbTm/resNd8b5oQ=
Subject key identifier:   6C:8D:B8:6D:D4:17:43:E1:21:FF:86:DF:05:81:B1:B4:26:2C:07:93
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648EAB872A95CE082F48F200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5431d371-98ae-39a3-9dcb-ff01b5f12d91.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     6140
IP address blocks:        2001:470:111::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:ab:87:2a:95:ce:08:2f:48:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=ebc3e3b0-1537-4fb9-bfed-5bf5ca574794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2f:ca:5c:9c:b4:82:ba:1d:8f:ed:21:4e:a7:
                    2c:2f:bb:7e:08:73:46:53:45:34:c7:f1:4c:8c:cf:
                    86:47:a0:ad:28:bc:9e:0a:44:87:56:a8:b6:cd:0c:
                    71:0c:08:8c:16:cd:dc:92:91:78:ec:0c:03:4a:1c:
                    13:ea:52:3d:80:f5:2b:8e:87:1a:fa:fb:72:15:dd:
                    8f:bf:26:21:41:be:01:34:80:bb:9d:f1:98:e4:54:
                    49:22:d9:ba:f4:55:bb:8c:a0:f3:1c:a6:bd:5a:35:
                    db:2b:d4:10:b4:d7:d8:1c:1e:af:0e:2b:35:55:bb:
                    c3:4d:8d:24:4c:e7:a7:bb:6a:3f:6c:f2:27:1b:21:
                    a7:07:82:a9:86:d3:80:b1:ee:14:73:81:46:e2:06:
                    29:d7:11:95:f3:6c:0b:5b:80:9c:bc:d4:17:0e:cf:
                    90:d8:d7:7c:f6:b3:3e:dc:af:69:05:0b:44:dc:85:
                    2a:27:8b:1c:0e:c6:ac:bb:e7:cb:36:38:ba:dc:1d:
                    c5:69:ad:72:2f:60:63:d6:28:84:16:82:6a:43:be:
                    65:2f:5a:b7:0e:24:16:be:83:03:e6:4d:15:b3:bc:
                    7c:f7:9e:0a:80:84:d6:fc:4e:70:3f:88:04:12:70:
                    39:65:93:5a:80:6f:71:36:14:cc:71:03:9d:ca:13:
                    e3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8D:B8:6D:D4:17:43:E1:21:FF:86:DF:05:81:B1:B4:26:2C:07:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5431d371-98ae-39a3-9dcb-ff01b5f12d91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:111::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:69:ae:3a:a1:e5:78:70:13:3c:0f:a2:4d:db:32:6a:11:c0:
         e0:5f:49:9a:e1:df:5a:61:f9:00:47:dc:cc:54:a0:f4:dc:c8:
         20:e2:30:af:0a:20:c5:dc:32:f3:66:12:63:78:ce:dc:61:45:
         2d:b1:88:d0:38:ec:6c:dd:ad:49:18:0e:a5:2a:e5:34:21:65:
         b7:84:22:7d:1c:b3:78:d4:fa:ce:cf:c6:12:a6:8a:de:de:d8:
         9b:4a:8f:bf:0c:3e:59:4d:5e:2f:ff:33:c2:38:2a:65:f9:65:
         98:64:db:7d:97:a4:67:34:f7:f2:8d:da:81:1b:fd:7d:94:05:
         21:94:b9:a8:ff:da:ba:65:bc:bf:ba:10:26:78:77:e8:83:d3:
         1c:db:ad:9a:12:c4:5f:10:18:a7:ad:23:62:27:d8:5a:b4:5c:
         ce:47:62:03:71:38:b4:5c:19:f5:10:92:45:13:14:f6:f1:fe:
         f6:7e:ae:5d:92:3a:83:5e:69:58:ba:0f:24:1f:b2:7c:5c:01:
         09:e0:44:6c:27:60:d5:25:79:25:22:8a:b2:89:ed:82:27:3f:
         b8:ba:35:5f:e3:9f:2e:5a:1c:c0:59:79:03:50:97:1d:27:66:
         76:c7:94:91:d2:f2:60:a6:e3:23:bf:88:b1:e3:cb:28:d2:fb:
         8e:a9:5e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----