Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/674dbdca-e487-3022-a97f-ed9534f873ca.roa
File:                     674dbdca-e487-3022-a97f-ed9534f873ca.roa (raw, json)
Hash identifier:          OOAyYJi+y3rEbJ7g2zo4z63BvaFZ4hBHF86c8wRlaos=
Subject key identifier:   5E:DA:E9:36:02:9F:DA:99:31:F3:46:A7:3A:5A:17:D7:59:3A:0F:50
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583DCCF592219DF081611C9AC700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/674dbdca-e487-3022-a97f-ed9534f873ca.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Sat 05 Nov 2022 04:00:00 +0000
asID:                     19256
IP address blocks:        2001:470:b6::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:f5:92:21:9d:f0:81:61:1c:9a:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : Nov  5 04:00:00 2022 GMT
        Subject: CN=69bcae0a-f854-450e-a30a-737175753f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:43:86:3b:0d:4e:01:73:4b:56:99:93:8c:5e:
                    9e:c4:68:c9:f7:8b:6d:2c:03:57:22:b4:fb:e1:88:
                    b6:38:c7:15:3b:31:e9:df:93:e9:d5:18:46:ef:40:
                    df:1e:3d:b7:48:52:fa:96:12:c7:26:a3:ea:f9:f3:
                    65:60:bd:ca:3f:a5:81:c6:e7:ab:b7:da:3d:56:14:
                    f2:5d:8e:77:47:e7:48:41:d0:74:6a:ad:ff:11:8e:
                    be:73:d3:f2:23:ab:21:2e:6b:3c:ee:5c:08:6f:36:
                    1d:4d:42:d3:06:a5:4a:a6:a9:3b:d5:58:db:72:cb:
                    a0:24:cc:a7:ea:52:3b:bb:47:1a:f3:fd:fe:99:ba:
                    b6:12:e3:dd:e3:a0:41:02:98:9c:99:d9:60:97:50:
                    0a:35:be:0d:c3:9e:f5:44:77:9c:5f:44:3d:a9:3b:
                    27:e4:27:c2:07:92:6a:c1:45:6f:26:fc:d2:2c:5e:
                    42:15:ec:e3:83:ea:64:61:93:2b:8c:a9:b8:4f:e0:
                    98:93:b7:a0:d3:aa:1f:c1:67:57:4e:ea:aa:e0:1d:
                    09:6d:a9:49:4b:61:5a:4c:35:9e:ac:6e:e6:56:5c:
                    60:3f:0b:33:98:a8:99:92:8e:de:71:0c:0f:0c:01:
                    83:88:08:db:06:f7:a5:41:45:1e:29:90:8e:0d:ac:
                    83:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DA:E9:36:02:9F:DA:99:31:F3:46:A7:3A:5A:17:D7:59:3A:0F:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/674dbdca-e487-3022-a97f-ed9534f873ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:b6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:2d:1b:89:a5:ae:18:2c:52:c5:9a:ef:1c:b7:95:ce:e7:b8:
         31:de:47:02:96:79:96:9c:58:0c:44:8c:d3:49:9b:66:2c:c1:
         95:d6:1f:6f:2b:8b:c9:92:7a:93:13:48:f1:62:26:b5:11:53:
         e7:3f:0b:b1:90:d1:06:c5:09:a1:51:7f:d3:9a:2c:c8:4a:34:
         a5:d1:a1:24:c9:e7:57:71:db:8b:a5:a5:36:98:be:55:20:80:
         b2:b6:93:2d:0d:da:52:e3:b4:fb:65:b7:9f:39:cc:fb:1b:80:
         a4:e4:1c:3a:c7:66:9c:44:05:bd:e8:07:f2:e3:92:09:ad:7b:
         15:4b:83:a5:d7:6a:85:6f:fa:a8:10:64:e7:80:be:b0:7d:3c:
         c2:51:fb:0a:6f:c7:5c:c4:0b:2b:66:02:a9:8f:81:9c:e1:2a:
         1a:5a:b6:db:92:e4:ed:0b:10:66:e6:ce:0b:b7:18:34:e1:4e:
         40:38:e3:55:ae:36:a9:f8:9a:5b:4b:cf:d5:e6:71:c9:e5:fa:
         69:cd:4b:16:66:4a:f3:bd:0c:6f:52:41:78:73:45:a3:8f:f8:
         5a:7e:66:04:56:5a:6e:02:9c:b4:0e:1b:f3:84:22:49:13:a9:
         7d:f4:ce:d9:1e:9b:64:e3:23:8d:bc:a8:8f:3f:9f:0a:16:e4:
         9d:bb:23:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----