Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6cb02c70-9e00-35a6-8da8-68fc39cc949f.roa
File:                     6cb02c70-9e00-35a6-8da8-68fc39cc949f.roa (raw, json)
Hash identifier:          8+MchriL2ioDxH02n8z+vBHFl1pr9Ues3hWb3M4A5MU=
Subject key identifier:   6D:69:F8:25:1E:4B:30:71:95:B9:57:EF:11:89:06:5F:F1:EC:3B:E9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D793654E1B31A8B9E4F6F7380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6cb02c70-9e00-35a6-8da8-68fc39cc949f.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     54288
IP address blocks:        65.49.41.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:36:54:e1:b3:1a:8b:9e:4f:6f:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=bfc8ca6c-cc34-4387-ba59-83c3d91f1d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ff:7c:0e:1d:9e:cc:c9:de:bd:bc:f4:69:70:
                    d5:20:fe:0a:5e:3c:44:30:25:f0:5b:dd:42:d8:85:
                    92:1d:0b:3e:10:41:ef:c2:5e:5e:82:9d:29:dc:f8:
                    4b:1d:5a:83:9c:9f:c8:a4:4a:6e:d0:11:1d:e7:86:
                    1d:a7:22:e2:4d:0f:d1:b9:8f:1a:3e:20:11:c4:6c:
                    30:de:4b:b3:f0:60:fd:93:df:7f:00:42:15:7d:15:
                    a1:d2:64:89:af:2d:1c:91:46:92:1a:a2:ff:ab:a2:
                    fb:f7:7b:58:15:e2:87:36:22:5c:39:05:ac:98:58:
                    7c:7b:fe:62:45:a7:2e:f7:14:d7:ab:9a:e9:cd:c3:
                    44:e5:b6:55:0e:0f:9e:1a:c2:c7:92:18:01:93:f8:
                    8a:75:b5:ef:3e:7b:58:ed:82:1b:f8:a7:58:f8:3a:
                    3b:5a:be:65:99:22:ed:0a:79:b8:f4:e8:db:60:7a:
                    5d:48:63:a9:2b:d5:a4:9b:84:be:28:4e:8e:df:80:
                    de:ef:ff:1b:a5:50:15:e6:07:e3:e9:3a:ca:74:f8:
                    52:c4:1c:dd:9d:34:68:f2:60:c2:01:20:2c:fa:7b:
                    00:5c:00:c3:73:14:d5:cc:bc:c8:c9:86:b6:cb:44:
                    3e:e0:cc:9e:34:7e:5e:4a:c3:1d:25:0b:78:0a:71:
                    27:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:69:F8:25:1E:4B:30:71:95:B9:57:EF:11:89:06:5F:F1:EC:3B:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6cb02c70-9e00-35a6-8da8-68fc39cc949f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:d9:75:55:e5:f8:3e:c4:f4:6d:67:86:20:45:2c:b4:d6:4f:
         04:77:ce:3e:da:26:f4:04:f8:25:fd:c7:7f:45:bb:da:00:bf:
         93:f5:63:f8:df:23:13:73:9e:99:4c:60:5c:0e:a9:f6:e1:38:
         e5:9a:3c:48:7a:96:eb:3f:a4:64:62:9f:03:f7:ad:46:31:fa:
         0f:fa:5b:a6:b3:b1:df:e0:13:fb:3c:01:7e:3b:61:67:78:1e:
         7a:db:26:28:53:f1:25:5f:55:d9:ce:dd:75:f0:c6:47:a4:07:
         77:28:d9:8d:9b:5c:75:27:8d:a6:92:37:4e:9f:f1:f4:d7:d3:
         27:a0:23:d9:9a:52:29:a5:ad:4d:a3:78:bb:d1:78:01:7f:70:
         c0:60:18:d8:a6:12:53:c1:2d:ba:7f:6a:ca:c9:81:82:01:ff:
         76:c3:1b:00:70:a4:24:31:2d:48:c5:7d:95:c9:4d:2a:85:37:
         50:64:28:51:b4:49:9c:a3:60:0c:b6:b5:b1:5b:59:e5:45:ba:
         10:e3:b6:8b:79:25:02:5a:5b:c5:2e:56:05:5a:c9:7c:bd:f0:
         6b:3f:5c:e5:9c:f3:55:92:68:8f:de:c7:d6:ae:0c:6a:58:5f:
         4d:fc:1c:aa:8c:4a:52:4a:75:3c:34:bc:61:d7:e9:15:20:73:
         da:d9:34:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD15NlThsxqLnk9vc4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDQwNTA0MDAwMFoXDTIyMTAwNTA0MDAwMFowLzEtMCsGA1UEAxMk
YmZjOGNhNmMtY2MzNC00Mzg3LWJhNTktODNjM2Q5MWYxZDViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf98Dh2ezMnevbz0aXDVIP4KXjxEMCXwW91C
2IWSHQs+EEHvwl5egp0p3PhLHVqDnJ/IpEpu0BEd54YdpyLiTQ/RuY8aPiARxGww
3kuz8GD9k99/AEIVfRWh0mSJry0ckUaSGqL/q6L793tYFeKHNiJcOQWsmFh8e/5i
Racu9xTXq5rpzcNE5bZVDg+eGsLHkhgBk/iKdbXvPntY7YIb+KdY+Do7Wr5lmSLt
Cnm49OjbYHpdSGOpK9Wkm4S+KE6O34De7/8bpVAV5gfj6TrKdPhSxBzdnTRo8mDC
ASAs+nsAXADDcxTVzLzIyYa2y0Q+4MyeNH5eSsMdJQt4CnEn3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG1p+CUeSzBxlblX7xGJBl/x7DvpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNmNiMDJjNzAtOWUwMC0z
NWE2LThkYTgtNjhmYzM5Y2M5NDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTEpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIHZdVXl+D7E9G1nhiBFLLTWTwR3zj7aJvQE+CX9x39Fu9oAv5P1Y/jf
IxNznplMYFwOqfbhOOWaPEh6lus/pGRinwP3rUYx+g/6W6azsd/gE/s8AX47YWd4
HnrbJihT8SVfVdnO3XXwxkekB3co2Y2bXHUnjaaSN06f8fTX0yegI9maUimlrU2j
eLvReAF/cMBgGNimElPBLbp/asrJgYIB/3bDGwBwpCQxLUjFfZXJTSqFN1BkKFG0
SZyjYAy2tbFbWeVFuhDjtot5JQJaW8UuVgVayXy98Gs/XOWc81WSaI/ex9auDGpY
X038HKqMSlJKdTw0vGHX6RUgc9rZNCg=
-----END CERTIFICATE-----