Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7b379de6-87ee-3e3c-a64c-dbab0ecf7e4e.roa
File:                     7b379de6-87ee-3e3c-a64c-dbab0ecf7e4e.roa (raw, json)
Hash identifier:          26+9DYsQMzSr3ooLYoHFLYlc5IEvLdFov8IloyBX3AU=
Subject key identifier:   53:D4:68:75:5E:C4:1D:30:6E:73:8A:52:36:69:05:15:06:58:A5:FD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F29ED0EFE4C53CD562143D170
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7b379de6-87ee-3e3c-a64c-dbab0ecf7e4e.roa
Signing time:             Tue 06 Sep 2022 12:00:00 +0000
ROA not before:           Tue 06 Sep 2022 12:00:00 +0000
ROA not after:            Tue 07 Mar 2023 05:00:00 +0000
asID:                     17117
IP address blocks:        2001:470:15a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:29:ed:0e:fe:4c:53:cd:56:21:43:d1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep  6 12:00:00 2022 GMT
            Not After : Mar  7 05:00:00 2023 GMT
        Subject: CN=0d151778-df82-4b14-a95b-2cddbcbd35a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8e:bf:b3:71:43:a6:83:e4:93:fb:e5:da:36:
                    36:63:64:5e:12:cf:91:44:2c:13:fa:4c:62:56:c4:
                    5a:a7:fa:82:5d:fb:89:fc:cf:0a:bb:8b:f3:65:62:
                    a4:40:28:47:36:39:dc:b3:27:04:c7:12:a5:ee:62:
                    15:67:8f:96:bf:aa:f0:8d:df:17:d2:b3:95:6d:e3:
                    23:36:1d:e9:8d:08:4d:89:30:b0:59:81:20:31:27:
                    55:8c:1a:b6:3f:a1:ef:6d:30:38:3e:b7:df:70:71:
                    8a:a9:86:f0:37:e1:72:69:58:63:8a:9d:fb:47:d9:
                    bc:bb:e6:2a:77:cf:3e:88:38:45:43:b5:48:3f:6b:
                    90:19:2a:0b:08:69:9c:77:ef:b4:6d:40:fd:07:18:
                    fa:97:6b:ee:b8:6e:63:ee:9a:8d:cc:d2:75:8c:b8:
                    3a:e7:3b:44:2d:19:3d:b8:e7:ea:72:51:e8:59:d4:
                    7c:7a:d0:bc:27:72:7a:38:70:ad:8b:a0:f2:47:91:
                    d1:d7:ee:9c:40:7d:54:6c:20:8a:57:09:80:f6:dd:
                    c2:d6:35:08:c0:26:34:40:79:ca:91:99:37:5b:b4:
                    7a:06:28:b4:3c:89:87:64:c8:98:f5:cf:15:e7:34:
                    e9:99:86:99:da:86:1d:b7:57:de:74:a8:af:62:79:
                    5c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D4:68:75:5E:C4:1D:30:6E:73:8A:52:36:69:05:15:06:58:A5:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7b379de6-87ee-3e3c-a64c-dbab0ecf7e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:15a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:79:79:47:f9:1a:63:6c:95:eb:f2:ce:cd:72:07:12:25:47:
         51:b0:a3:28:7d:c2:23:10:7b:0f:8b:f7:2c:a1:c8:b3:68:36:
         69:ff:30:89:45:fd:de:42:84:73:b4:51:ac:11:c9:7f:20:d6:
         d4:14:02:82:24:b7:f0:89:39:49:ea:26:e1:e2:89:de:7b:c5:
         85:ff:c5:90:0f:2b:f1:3e:b4:32:e5:0a:d3:f3:8c:6b:18:66:
         be:2f:57:93:5c:48:8d:08:d3:7c:e8:e7:72:74:07:9c:f7:81:
         f8:d5:c0:db:9b:d5:4c:66:47:de:80:f1:ff:cf:1d:a1:75:d4:
         35:90:06:8c:86:79:a3:d4:a3:23:ae:c7:16:b7:88:a3:d7:d5:
         03:50:ff:c4:93:7a:38:ee:ba:ac:68:65:1b:6e:0f:13:5d:b5:
         09:6a:f6:1e:17:85:90:d7:83:e6:61:4b:82:1d:8a:4e:56:ef:
         c2:75:66:cf:1b:be:36:78:d8:8e:66:47:3a:cf:c2:cf:26:1f:
         30:e7:10:54:01:5c:49:39:f1:0c:70:ef:0e:98:be:0a:94:39:
         3b:f3:69:c0:c2:32:f8:15:a8:9d:5f:cb:b3:5f:5c:de:da:ba:
         af:32:05:67:a0:b9:71:85:3b:02:69:63:f9:25:54:c1:a4:58:
         c3:7e:fa:48
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD8p7Q7+TFPNViFD0XAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDkwNjEyMDAwMFoXDTIzMDMwNzA1MDAwMFowLzEtMCsGA1UEAxMk
MGQxNTE3NzgtZGY4Mi00YjE0LWE5NWItMmNkZGJjYmQzNWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI6/s3FDpoPkk/vl2jY2Y2ReEs+RRCwT+kxi
VsRap/qCXfuJ/M8Ku4vzZWKkQChHNjncsycExxKl7mIVZ4+Wv6rwjd8X0rOVbeMj
Nh3pjQhNiTCwWYEgMSdVjBq2P6HvbTA4PrffcHGKqYbwN+FyaVhjip37R9m8u+Yq
d88+iDhFQ7VIP2uQGSoLCGmcd++0bUD9Bxj6l2vuuG5j7pqNzNJ1jLg65ztELRk9
uOfqclHoWdR8etC8J3J6OHCti6DyR5HR1+6cQH1UbCCKVwmA9t3C1jUIwCY0QHnK
kZk3W7R6Bii0PImHZMiY9c8V5zTpmYaZ2oYdt1fedKivYnlclQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFPUaHVexB0wbnOKUjZpBRUGWKX9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2IzNzlkZTYtODdlZS0z
ZTNjLWE2NGMtZGJhYjBlY2Y3ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFa
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFF5eUf5GmNslevyzs1yBxIlR1Gwoyh9wiMQew+L9yyhyLNoNmn/
MIlF/d5ChHO0UawRyX8g1tQUAoIkt/CJOUnqJuHiid57xYX/xZAPK/E+tDLlCtPz
jGsYZr4vV5NcSI0I03zo53J0B5z3gfjVwNub1UxmR96A8f/PHaF11DWQBoyGeaPU
oyOuxxa3iKPX1QNQ/8STejjuuqxoZRtuDxNdtQlq9h4XhZDXg+ZhS4Idik5W78J1
Zs8bvjZ42I5mRzrPws8mHzDnEFQBXEk58Qxw7w6YvgqUOTvzacDCMvgVqJ1fy7Nf
XN7auq8yBWeguXGFOwJpY/klVMGkWMN++kg=
-----END CERTIFICATE-----