Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6349dc4d-014b-3738-99af-8306543734d5.roa
File:                     6349dc4d-014b-3738-99af-8306543734d5.roa (raw, json)
Hash identifier:          J7YTl5KhzWu6l9V92rKrLzVPuoFQnYyGO9Tu3R/lMvU=
Subject key identifier:   3E:0F:48:27:27:9B:D0:57:94:66:15:F0:F2:45:FA:32:FB:B1:A1:64
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA6FA7EEDBCFD43B9681700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6349dc4d-014b-3738-99af-8306543734d5.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     54816
IP address blocks:        2001:470:2a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:fa:7e:ed:bc:fd:43:b9:68:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=17003300-8555-436d-ba32-3a95f1222a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:36:ab:dc:85:e1:15:a8:66:b2:ae:55:e2:
                    29:d5:a8:d5:dc:40:49:b4:8b:78:8e:89:f8:84:a0:
                    7b:3f:e6:58:a2:70:5c:ad:16:a5:5e:f1:d8:16:5f:
                    cb:aa:3b:5a:4f:37:7e:4d:ac:af:30:97:b1:9b:62:
                    90:7b:09:fa:83:24:3b:2a:1c:81:53:21:27:3c:30:
                    a3:16:ad:72:81:bb:18:d4:45:4e:49:c3:13:b4:9c:
                    10:75:92:99:3d:2e:fc:dd:26:46:e2:be:5e:82:19:
                    ab:6a:47:60:92:65:ec:69:52:8a:a9:49:71:a6:e1:
                    8e:ad:a8:56:d5:20:10:09:21:d3:26:97:33:7f:69:
                    c7:f4:2a:32:36:46:6c:ef:8d:56:fd:0a:64:57:ea:
                    e8:55:b3:f0:18:b6:8e:21:fa:4d:b3:f1:48:62:60:
                    41:32:4a:56:d1:e9:76:d2:81:68:5c:43:ef:eb:6a:
                    c2:cc:00:66:a1:36:d5:f8:82:6f:ec:03:17:35:88:
                    c4:f3:08:fd:ab:72:f4:27:7d:b8:95:fb:01:b8:06:
                    2d:34:80:ca:e7:87:60:3c:d4:6a:5f:be:49:57:88:
                    95:11:e7:80:be:35:e2:ef:31:68:03:ce:36:cb:77:
                    89:4b:c0:47:bd:25:20:3b:c3:fa:60:b5:6f:b5:9e:
                    c5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0F:48:27:27:9B:D0:57:94:66:15:F0:F2:45:FA:32:FB:B1:A1:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6349dc4d-014b-3738-99af-8306543734d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:85:77:57:69:b2:11:18:c8:e4:9f:1f:45:4f:b9:29:bc:c8:
         e4:b2:47:75:16:de:24:2e:a4:f1:1d:2a:85:da:64:b6:92:96:
         57:97:ba:a8:1d:9b:05:15:69:53:97:dd:b4:a0:29:28:24:84:
         27:c1:9e:bd:3d:02:70:59:b6:79:f3:2f:1a:9c:29:c4:f4:86:
         0f:10:3d:15:34:16:8f:48:67:61:76:8e:1b:6e:23:85:e6:5e:
         bf:1f:39:c4:e9:a2:57:2f:7c:c2:d3:08:8e:88:9a:16:0d:9c:
         25:53:12:88:8d:3e:18:72:00:db:28:39:e6:fd:d9:08:e2:33:
         56:80:06:82:cd:44:56:d8:31:b3:6c:40:4b:9b:d0:8f:4d:02:
         2a:2e:6c:bd:d3:8d:7f:2a:af:92:04:47:53:8e:19:ab:49:fa:
         5e:63:e8:28:46:d2:04:b5:1a:af:c8:9b:32:6d:68:48:4e:88:
         01:5a:e4:99:d1:ff:61:32:e3:4f:38:96:83:4a:5f:63:d1:5a:
         2f:56:70:37:d5:ae:41:58:db:b6:4b:1f:65:d6:f9:c7:58:f2:
         68:cf:de:e0:dc:2b:ac:06:48:9f:37:62:ad:54:81:9f:97:1a:
         c7:35:38:94:ce:f6:4c:1e:32:94:fe:0c:17:39:06:76:22:7e:
         42:54:4d:7c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDv9pvp+7bz9Q7loFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIxMTEyMDA1MDAwMFoXDTIyMDUyMDA0MDAwMFowLzEtMCsGA1UEAxMk
MTcwMDMzMDAtODU1NS00MzZkLWJhMzItM2E5NWYxMjIyYTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpI2q9yF4RWoZrKuVeIp1ajV3EBJtIt4jon4
hKB7P+ZYonBcrRalXvHYFl/LqjtaTzd+TayvMJexm2KQewn6gyQ7KhyBUyEnPDCj
Fq1ygbsY1EVOScMTtJwQdZKZPS783SZG4r5eghmrakdgkmXsaVKKqUlxpuGOrahW
1SAQCSHTJpczf2nH9CoyNkZs741W/QpkV+roVbPwGLaOIfpNs/FIYmBBMkpW0el2
0oFoXEPv62rCzABmoTbV+IJv7AMXNYjE8wj9q3L0J324lfsBuAYtNIDK54dgPNRq
X75JV4iVEeeAvjXi7zFoA842y3eJS8BHvSUgO8P6YLVvtZ7FCwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD4PSCcnm9BXlGYV8PJF+jL7saFkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjM0OWRjNGQtMDE0Yi0z
NzM4LTk5YWYtODMwNjU0MzczNGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAq
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALKFd1dpshEYyOSfH0VPuSm8yOSyR3UW3iQupPEdKoXaZLaSlleX
uqgdmwUVaVOX3bSgKSgkhCfBnr09AnBZtnnzLxqcKcT0hg8QPRU0Fo9IZ2F2jhtu
I4XmXr8fOcTpolcvfMLTCI6ImhYNnCVTEoiNPhhyANsoOeb92QjiM1aABoLNRFbY
MbNsQEub0I9NAioubL3TjX8qr5IER1OOGatJ+l5j6ChG0gS1Gq/ImzJtaEhOiAFa
5JnR/2Ey4084loNKX2PRWi9WcDfVrkFY27ZLH2XW+cdY8mjP3uDcK6wGSJ83Yq1U
gZ+XGsc1OJTO9kweMpT+DBc5BnYifkJUTXw=
-----END CERTIFICATE-----