Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/733654f7-1c5c-35cc-b75a-a9b1f1819a8e.roa
File:                     733654f7-1c5c-35cc-b75a-a9b1f1819a8e.roa (raw, json)
Hash identifier:          yoWwzujweBdGUo1HIhw8zrkZjtiTpPAZwYfLtGmPQ38=
Subject key identifier:   F8:7E:5B:FB:A8:1E:E0:21:EC:5D:3F:55:B2:05:DB:1A:8C:D6:FB:1F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A519AEDB3B4237E775777A1
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/733654f7-1c5c-35cc-b75a-a9b1f1819a8e.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     64238
IP address blocks:        2001:470:f8::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:51:9a:ed:b3:b4:23:7e:77:57:77:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=6e45f083-3906-4709-8411-aad95ddf40d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:44:3d:42:7e:a5:20:92:aa:5a:77:cc:c0:b3:
                    af:e4:ad:44:47:b3:9d:fe:fc:18:0e:f7:cd:92:c8:
                    8f:cd:f1:bb:7b:6c:c8:d8:3a:75:62:94:90:1e:a8:
                    d2:ff:e5:91:0e:e5:2b:b1:dd:c1:62:dc:b2:79:2d:
                    b9:d6:0a:b6:10:cf:78:ad:80:69:bd:09:7a:c3:0e:
                    20:79:d1:38:cf:cf:8e:ed:b2:84:53:fc:04:31:83:
                    35:a3:d8:27:92:e2:85:21:02:cb:f9:42:c1:da:95:
                    15:93:ec:47:1f:60:7c:8e:79:b9:38:b5:d6:10:24:
                    a1:44:5a:b9:4d:b9:1b:d1:2c:97:95:8f:e6:ee:30:
                    6f:5a:4e:c3:47:3e:00:a0:26:da:f9:74:12:25:fe:
                    27:0f:50:4d:dd:23:bb:34:84:d0:8e:ca:39:74:9f:
                    56:d3:87:07:ab:22:fc:7b:c8:68:19:78:bb:18:13:
                    a8:5f:85:19:b1:ae:51:5c:f4:90:aa:dc:7a:78:48:
                    e4:fe:76:a3:4d:d1:a9:f2:f3:46:58:a6:6c:01:8e:
                    68:8f:a0:d6:a6:8a:65:62:b9:7a:2d:67:58:54:47:
                    25:5a:7d:de:83:f4:06:f0:fd:c9:bf:4d:a2:3e:e6:
                    52:c9:c7:b2:60:9b:87:95:fa:12:95:1f:c7:d6:e2:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7E:5B:FB:A8:1E:E0:21:EC:5D:3F:55:B2:05:DB:1A:8C:D6:FB:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/733654f7-1c5c-35cc-b75a-a9b1f1819a8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:f8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:c6:2c:b9:8c:cc:74:b3:cc:b5:b9:93:cf:1d:4d:2f:b4:db:
         fd:db:d4:e4:b7:dd:93:6c:23:05:1e:6e:2d:5b:da:d4:01:b8:
         dd:d5:2e:52:9b:d0:45:26:c8:12:12:d7:76:9f:de:93:5f:f9:
         f6:33:86:21:31:4c:cb:4f:25:c4:9d:7e:d5:92:2f:f3:0e:58:
         ee:66:49:6e:4b:60:42:ec:2b:8a:e1:49:52:de:03:ac:0b:d5:
         0a:f3:79:67:d7:0f:ba:ec:22:2f:c1:c1:02:70:d8:53:bf:9f:
         41:96:1b:ed:fc:d7:45:63:1b:d9:4f:f5:2e:03:e2:2b:3c:bc:
         8a:d9:cb:b6:dd:2d:06:31:b2:54:21:17:3c:b9:01:c4:66:18:
         c1:62:9f:7f:bc:e0:b9:56:33:75:99:b9:c9:01:3f:13:dc:29:
         95:c1:4b:c6:36:3c:eb:6f:9b:50:c7:0f:58:7d:39:2f:0d:5b:
         0d:be:4c:85:0c:4c:81:ef:de:ea:e1:33:bc:c8:90:3f:e0:c5:
         1d:f0:12:a1:9a:31:1d:82:2d:56:73:19:69:1f:cc:61:cf:d5:
         89:97:64:4f:bf:30:a1:50:ff:36:fd:bf:6e:d7:d9:e4:00:46:
         c8:29:de:3a:20:ed:81:48:bd:73:0f:62:2a:f4:f8:13:14:0e:
         6b:6b:e2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----