Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55795c25-5f91-30f7-ad4d-1109999bde87.roa
File:                     55795c25-5f91-30f7-ad4d-1109999bde87.roa (raw, json)
Hash identifier:          q9DVLtdEYFjboy/pAytueweD1ed7sE/nz+YJEdoJ1ew=
Subject key identifier:   64:08:74:5C:26:5A:BE:77:E6:D1:12:23:E9:7A:1E:1D:C9:73:B2:07
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F6CED8865A5345DF14C89BC00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55795c25-5f91-30f7-ad4d-1109999bde87.roa
Signing time:             Fri 30 Sep 2022 12:00:00 +0000
ROA not before:           Fri 30 Sep 2022 12:00:00 +0000
ROA not after:            Sat 01 Apr 2023 04:00:00 +0000
asID:                     62538
IP address blocks:        2001:470:ee::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:6c:ed:88:65:a5:34:5d:f1:4c:89:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 30 12:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2023 GMT
        Subject: CN=289306e3-80a7-43b1-8dc0-b674ebe1fccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7c:6a:f2:ff:8e:e5:c3:58:e4:66:3c:ff:a7:
                    36:49:68:53:77:66:67:d3:fc:b6:85:9e:13:5f:37:
                    54:d1:55:90:17:02:92:0d:a3:5f:8c:c1:f4:1e:38:
                    7d:70:4f:cf:f7:48:b5:94:16:c6:29:3f:34:7e:a7:
                    04:a7:a1:8f:12:d6:89:ff:94:1a:f3:31:61:32:4c:
                    f3:85:82:f3:5e:ba:c6:3c:65:52:e3:0e:1a:20:62:
                    18:04:40:df:58:32:c2:cb:55:fc:6d:f5:d5:e2:a9:
                    71:f1:ec:fb:86:3c:ef:3f:9f:85:ad:1a:11:e2:b7:
                    bb:07:e0:3a:92:bf:1c:6a:8b:20:d7:86:b7:91:af:
                    42:e3:ce:7e:dc:d7:4d:ea:fe:b6:82:46:cc:f8:0e:
                    63:51:6e:6a:ec:a1:70:fc:5c:dd:b3:6b:0e:55:da:
                    2a:52:bf:c1:75:d6:6c:4e:8f:6a:7c:0f:b4:e2:c6:
                    e0:e5:d3:38:92:c3:15:bd:6c:0a:7e:2f:9e:54:3c:
                    75:bd:d9:91:99:cc:96:73:9e:66:05:8d:63:07:5c:
                    e0:1c:73:ec:36:8e:b2:e5:01:f7:2f:24:54:e1:38:
                    1b:a7:07:7c:19:ae:52:85:c6:22:73:b5:65:bb:94:
                    fa:d3:7a:e9:53:c5:71:5a:76:1a:e6:44:24:f9:0a:
                    65:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:08:74:5C:26:5A:BE:77:E6:D1:12:23:E9:7A:1E:1D:C9:73:B2:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55795c25-5f91-30f7-ad4d-1109999bde87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:ee::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:f7:49:df:39:71:fd:f2:b6:da:e3:f6:a9:10:10:f9:57:dd:
         cd:4d:0e:7b:7e:aa:a0:74:5f:b2:d1:50:de:1e:2c:93:be:82:
         e0:f6:bf:a0:94:e9:e9:5a:1f:05:98:fa:d8:89:f7:b6:ca:d2:
         64:28:8a:f1:c7:63:6d:e6:a1:91:8e:d9:6a:f5:4d:f0:5a:10:
         17:9e:2b:8d:18:d0:2b:e5:1d:1f:c9:93:bd:50:41:dc:81:44:
         27:26:f3:a9:25:a8:2e:97:b8:89:fd:5e:2b:4b:ee:d7:f0:f5:
         13:85:8e:75:f5:48:33:b6:fb:15:9f:49:30:f1:89:3c:b9:79:
         2f:cb:61:69:d2:2f:46:62:58:74:c2:51:ce:f5:ef:08:b5:47:
         3b:84:93:87:6d:b2:13:78:24:ed:1c:a9:10:77:af:d5:5d:04:
         26:31:ab:01:e6:e7:e2:b7:23:09:03:b7:c9:29:04:61:aa:7a:
         b1:8c:07:b7:11:be:5e:06:c9:62:e8:8d:d6:c4:78:8f:1b:7c:
         69:f8:e1:e1:f1:f0:8e:49:f7:b9:1e:d6:d2:26:93:b4:13:2b:
         6c:40:50:3b:ac:52:c1:8a:bc:4b:e4:5f:35:a7:b4:6f:80:2a:
         d9:6b:ff:99:b6:2c:be:e2:92:23:7f:a3:bc:b3:4d:39:08:5f:
         6d:e8:d9:6c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD9s7YhlpTRd8UyJvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDkzMDEyMDAwMFoXDTIzMDQwMTA0MDAwMFowLzEtMCsGA1UEAxMk
Mjg5MzA2ZTMtODBhNy00M2IxLThkYzAtYjY3NGViZTFmY2NkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXxq8v+O5cNY5GY8/6c2SWhTd2Zn0/y2hZ4T
XzdU0VWQFwKSDaNfjMH0Hjh9cE/P90i1lBbGKT80fqcEp6GPEtaJ/5Qa8zFhMkzz
hYLzXrrGPGVS4w4aIGIYBEDfWDLCy1X8bfXV4qlx8ez7hjzvP5+FrRoR4re7B+A6
kr8caosg14a3ka9C485+3NdN6v62gkbM+A5jUW5q7KFw/Fzds2sOVdoqUr/BddZs
To9qfA+04sbg5dM4ksMVvWwKfi+eVDx1vdmRmcyWc55mBY1jB1zgHHPsNo6y5QH3
LyRU4Tgbpwd8Ga5ShcYic7Vlu5T603rpU8VxWnYa5kQk+QplPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGQIdFwmWr535tESI+l6Hh3Jc7IHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTU3OTVjMjUtNWY5MS0z
MGY3LWFkNGQtMTEwOTk5OWJkZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADu
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKz3Sd85cf3yttrj9qkQEPlX3c1NDnt+qqB0X7LRUN4eLJO+guD2
v6CU6elaHwWY+tiJ97bK0mQoivHHY23moZGO2Wr1TfBaEBeeK40Y0CvlHR/Jk71Q
QdyBRCcm86klqC6XuIn9XitL7tfw9ROFjnX1SDO2+xWfSTDxiTy5eS/LYWnSL0Zi
WHTCUc717wi1RzuEk4dtshN4JO0cqRB3r9VdBCYxqwHm5+K3IwkDt8kpBGGqerGM
B7cRvl4GyWLojdbEeI8bfGn44eHx8I5J97ke1tImk7QTK2xAUDusUsGKvEvkXzWn
tG+AKtlr/5m2LL7ikiN/o7yzTTkIX23o2Ww=
-----END CERTIFICATE-----