Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/570662b7-5fda-370c-b9b1-8fdeb3b6c891.roa
File:                     570662b7-5fda-370c-b9b1-8fdeb3b6c891.roa (raw, json)
Hash identifier:          kV7CoyvFVvN67qWuo9CM6N2jkV+K05JcCQWEZcFQESw=
Subject key identifier:   37:15:5D:AF:3E:67:2A:88:82:DA:E4:E9:C0:64:8B:B1:34:22:11:D8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA661A693E93E84DF006CC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/570662b7-5fda-370c-b9b1-8fdeb3b6c891.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     29844
IP address blocks:        2001:470:c1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:61:a6:93:e9:3e:84:df:00:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=d9898f07-7498-4612-93cd-6a09e6d5c066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bb:99:52:55:8e:7d:33:13:e2:e4:b8:ba:96:
                    66:5e:e3:56:d9:b9:79:2f:f0:2d:c1:92:99:00:5d:
                    84:d4:17:16:65:90:7d:f3:4b:9e:44:42:43:53:d8:
                    3c:50:27:1b:ad:3c:0c:d5:c9:c2:54:c2:93:c7:92:
                    f2:2e:88:50:3d:50:37:65:e6:c9:f9:d8:99:3c:32:
                    86:49:06:03:70:2b:6f:54:09:29:9e:33:c3:06:49:
                    3c:7c:b6:ab:aa:2b:4a:22:0d:d1:b1:6b:b2:63:84:
                    e6:83:f2:dd:07:d3:c9:1b:5a:b0:89:fe:39:d1:78:
                    7f:df:df:de:b8:d0:15:12:de:91:d6:48:8d:da:21:
                    e4:37:ff:87:c7:6a:a6:23:d6:c8:a5:1a:0a:14:08:
                    65:bc:44:d5:14:f9:27:01:91:0d:d1:de:98:b0:cb:
                    87:f5:11:14:5c:d5:82:15:7e:36:ba:1b:92:23:53:
                    39:be:88:f1:22:08:9c:4d:03:8c:62:fb:3c:60:e7:
                    e7:9d:a0:0c:4a:ae:dd:53:06:22:8b:e1:ae:0f:3d:
                    f2:2a:77:71:6e:cd:2a:77:b0:29:cb:ec:80:1a:60:
                    c4:2a:73:c4:aa:2b:5a:13:c7:89:49:15:09:38:ef:
                    62:c3:60:e0:46:5f:3b:fc:31:86:4b:b7:e1:9e:ff:
                    99:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:15:5D:AF:3E:67:2A:88:82:DA:E4:E9:C0:64:8B:B1:34:22:11:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/570662b7-5fda-370c-b9b1-8fdeb3b6c891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:e0:20:bb:db:ce:a2:ef:79:2a:ac:4a:5d:43:eb:59:42:fb:
         f1:9c:76:90:02:80:4b:94:09:fa:c5:a7:6a:e0:f0:4e:d7:aa:
         46:46:f3:29:5c:12:e4:f1:79:92:dd:9b:9c:a9:1f:39:7f:3e:
         dd:05:26:72:92:38:88:3f:cd:d0:50:40:01:60:09:88:00:46:
         7b:49:d1:1a:75:c9:1b:09:f3:90:0f:1f:86:d7:99:da:2c:3b:
         47:9f:9e:29:67:9c:5d:ba:fd:57:17:29:f0:31:6f:d3:23:9d:
         da:84:3a:63:75:cf:46:f9:cb:c4:aa:77:c4:4e:ff:79:7a:6c:
         88:35:5c:00:de:46:65:6a:9b:78:06:e2:23:75:d2:5d:3c:25:
         93:cd:75:4b:92:40:ab:c5:e1:b0:04:8b:fe:9d:77:f8:5b:96:
         49:b5:5f:b8:29:be:24:ea:2d:55:e5:1e:ea:94:a3:87:66:52:
         37:60:f6:70:b9:67:b7:20:da:ad:92:73:c9:37:d8:de:53:3c:
         e0:99:70:33:3e:f1:ec:1e:72:57:ed:56:92:43:d3:a1:3f:d2:
         8e:1b:9d:28:ad:77:d8:9f:c1:b4:c9:f7:91:d6:e5:8e:dc:3d:
         ae:e8:3a:7e:8a:59:e1:0c:5a:96:d5:e2:59:bb:0e:03:23:46:
         ed:cb:38:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----