Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5fdb8154-938f-3c46-9b65-3199ebd58982.roa
File:                     5fdb8154-938f-3c46-9b65-3199ebd58982.roa (raw, json)
Hash identifier:          HUxXkVZbc0wYkR1s4tsR6QAskBalwa2iB28wMRjk7tw=
Subject key identifier:   ED:51:F1:A5:C0:A2:E1:59:A3:DE:15:D1:25:26:60:56:46:43:F0:2C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA5C8D8046FF6612DAB2A60
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5fdb8154-938f-3c46-9b65-3199ebd58982.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     2033
IP address blocks:        2001:470:30::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a5:c8:d8:04:6f:f6:61:2d:ab:2a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=65cbfcb6-fcdb-454a-8599-fc77ac9adc4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ba:a4:66:2e:2d:2f:1a:29:18:fa:8c:64:20:
                    de:6f:b9:f1:37:a2:65:42:e9:de:86:d8:f1:74:ed:
                    6d:6c:18:97:e8:cc:4c:bc:8e:cd:82:3b:89:5c:56:
                    54:b1:5d:c6:bc:32:5d:95:ab:80:36:0a:f1:48:ce:
                    aa:0a:f2:a4:ba:8c:fc:39:89:b7:db:a8:ff:a4:6d:
                    13:d3:ec:7a:c4:37:88:5c:d5:99:05:81:62:1b:ce:
                    cd:2d:15:03:93:9a:b8:fa:85:5f:b2:64:c7:fe:ca:
                    b0:a0:24:9e:49:cf:39:e9:3b:7a:62:a2:01:45:fe:
                    d2:6a:fe:6f:50:73:0b:28:9e:1c:94:a6:d1:22:b6:
                    7b:ad:cf:4b:fe:cd:fa:f8:87:5d:e0:93:e8:00:87:
                    96:d0:a2:be:aa:7d:08:8e:92:8d:92:59:67:0a:94:
                    d6:20:9e:4d:9f:73:75:2a:d5:80:46:b2:1c:c2:f7:
                    f7:b3:9f:aa:99:39:ad:0e:e8:2d:77:aa:ad:2a:0b:
                    a3:75:80:d6:cc:27:39:15:d9:95:27:fa:c0:a6:28:
                    6b:8e:69:0c:81:62:59:7c:be:85:18:69:3d:b2:98:
                    61:8f:e8:12:ab:72:fd:62:de:ba:78:e9:71:0b:20:
                    b1:2e:ec:9c:39:77:29:8c:21:0d:d0:a3:ee:61:98:
                    a6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:51:F1:A5:C0:A2:E1:59:A3:DE:15:D1:25:26:60:56:46:43:F0:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5fdb8154-938f-3c46-9b65-3199ebd58982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:30::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:87:4a:7c:2f:5a:ab:a5:37:e8:0d:26:f8:c1:c0:0f:7c:fe:
         41:f5:6b:39:cb:84:6a:f3:a4:e1:ae:7b:6b:b5:aa:1d:50:0c:
         4e:32:ef:c0:a0:e2:36:1e:27:01:09:48:c4:f6:69:9b:c7:eb:
         1b:f2:d8:b1:52:05:4e:cd:fc:b5:20:19:19:45:96:4b:3d:59:
         51:17:fa:b6:df:93:fd:a7:7d:d8:cd:9d:e3:fe:35:fd:f7:c2:
         98:59:45:ed:3d:d7:7c:32:05:22:f3:07:74:c4:4e:41:2c:13:
         31:4e:86:f1:1a:49:47:c9:42:c2:68:5a:4c:e0:73:a8:e9:08:
         07:25:d8:9a:75:54:5d:3f:dd:bc:96:1a:8a:03:28:ba:d1:a8:
         3b:60:79:61:6b:69:c4:c0:41:78:0e:e1:10:3e:cb:df:23:af:
         1f:c3:d5:3e:3e:80:c6:96:a2:65:ca:0a:87:68:bd:a5:eb:92:
         fa:bd:a9:66:5f:d8:eb:9c:52:18:48:7e:ea:8c:53:08:3f:64:
         bd:23:40:b6:1f:c8:6b:73:e1:96:86:0a:40:67:24:69:7e:8f:
         59:ac:26:33:e1:33:ea:07:37:88:e7:77:78:53:2f:83:10:e8:
         c9:3b:21:ea:43:e7:6a:6c:65:9a:bf:a7:4a:41:84:54:2c:18:
         a8:38:0d:1f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDv9pcjYBG/2YS2rKmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIxMTEyMDA1MDAwMFoXDTIyMDUyMDA0MDAwMFowLzEtMCsGA1UEAxMk
NjVjYmZjYjYtZmNkYi00NTRhLTg1OTktZmM3N2FjOWFkYzRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLqkZi4tLxopGPqMZCDeb7nxN6JlQunehtjx
dO1tbBiX6MxMvI7NgjuJXFZUsV3GvDJdlauANgrxSM6qCvKkuoz8OYm326j/pG0T
0+x6xDeIXNWZBYFiG87NLRUDk5q4+oVfsmTH/sqwoCSeSc856Tt6YqIBRf7Sav5v
UHMLKJ4clKbRIrZ7rc9L/s36+Idd4JPoAIeW0KK+qn0IjpKNkllnCpTWIJ5Nn3N1
KtWARrIcwvf3s5+qmTmtDugtd6qtKgujdYDWzCc5FdmVJ/rApihrjmkMgWJZfL6F
GGk9sphhj+gSq3L9Yt66eOlxCyCxLuycOXcpjCEN0KPuYZimQQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO1R8aXAouFZo94V0SUmYFZGQ/AsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWZkYjgxNTQtOTM4Zi0z
YzQ2LTliNjUtMzE5OWViZDU4OTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADSHSnwvWqulN+gNJvjBwA98/kH1aznLhGrzpOGue2u1qh1QDE4y
78Cg4jYeJwEJSMT2aZvH6xvy2LFSBU7N/LUgGRlFlks9WVEX+rbfk/2nfdjNneP+
Nf33wphZRe0913wyBSLzB3TETkEsEzFOhvEaSUfJQsJoWkzgc6jpCAcl2Jp1VF0/
3byWGooDKLrRqDtgeWFracTAQXgO4RA+y98jrx/D1T4+gMaWomXKCodovaXrkvq9
qWZf2OucUhhIfuqMUwg/ZL0jQLYfyGtz4ZaGCkBnJGl+j1msJjPhM+oHN4jnd3hT
L4MQ6Mk7IepD52psZZq/p0pBhFQsGKg4DR8=
-----END CERTIFICATE-----