Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88910569-d60c-3541-82aa-5197e76a2fd2.roa
File:                     88910569-d60c-3541-82aa-5197e76a2fd2.roa (raw, json)
Hash identifier:          Pj13C2Iw8H/13CMpPHZy++vjCU5qwUtD440I2RK7Feo=
Subject key identifier:   55:79:0D:8F:A9:8F:B4:E9:6C:4C:93:F9:5A:83:00:E8:EF:40:5C:5D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858421351D00A7C36BCB9270F6A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88910569-d60c-3541-82aa-5197e76a2fd2.roa
Signing time:             Wed 31 May 2023 12:00:00 +0000
ROA not before:           Wed 31 May 2023 12:00:00 +0000
ROA not after:            Fri 01 Dec 2023 05:00:00 +0000
asID:                     40773
IP address blocks:        2001:470:12a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:13:51:d0:0a:7c:36:bc:b9:27:0f:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 31 12:00:00 2023 GMT
            Not After : Dec  1 05:00:00 2023 GMT
        Subject: CN=92302ecd-641c-4ebf-a26a-51f75312488d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:76:3e:9b:f3:d5:8a:5a:8e:d1:72:f8:52:7e:
                    89:de:9c:62:10:05:74:2e:60:33:7d:23:53:f9:dd:
                    9c:c6:ac:82:33:32:36:cd:e9:ce:8b:cb:01:6e:0a:
                    7a:5f:f9:22:6f:e4:ca:82:16:da:4b:60:07:29:5f:
                    59:d5:ff:98:37:1b:ec:ba:3f:60:56:6e:b9:29:67:
                    33:a2:15:49:20:7a:02:53:3e:00:2e:9b:70:46:20:
                    f6:a7:35:92:bb:db:14:90:c6:b4:50:c3:c7:c4:f3:
                    38:cd:93:0b:94:0c:ed:f2:df:bd:cc:ef:80:cb:14:
                    aa:92:ad:19:27:7a:b9:8f:bb:37:9f:22:ce:92:0c:
                    2c:6a:8a:69:99:73:b2:7b:06:db:8e:09:7c:af:2c:
                    11:b8:3d:4a:89:03:29:53:69:0c:36:0b:ac:5f:7a:
                    5c:14:ba:ea:96:47:dc:9f:d9:61:2e:65:7e:42:36:
                    73:37:4c:c8:a4:e0:b1:b1:75:6f:2c:23:63:d3:5e:
                    f9:6b:eb:f2:c5:79:13:d4:bc:d7:a9:f9:79:42:36:
                    cd:48:73:f7:53:6e:1b:97:db:44:c5:0f:1a:97:cc:
                    98:71:72:f7:92:24:2b:47:0f:9c:4a:89:71:e3:72:
                    98:94:ef:0c:33:69:48:c9:a5:f1:0c:06:ff:00:b0:
                    3f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:79:0D:8F:A9:8F:B4:E9:6C:4C:93:F9:5A:83:00:E8:EF:40:5C:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88910569-d60c-3541-82aa-5197e76a2fd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:12a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:fe:f0:c5:41:5e:23:96:69:eb:74:82:62:51:67:02:3e:2c:
         1e:79:33:48:5d:00:af:68:73:12:93:9b:a1:13:8b:3d:53:51:
         e8:11:ff:c2:53:15:40:93:70:50:3e:80:a7:f5:98:04:43:50:
         9d:d1:d5:3e:1d:c3:82:89:8d:9b:be:2a:40:6b:62:83:97:c6:
         0c:4a:d5:b9:89:d7:8f:ae:66:f6:5f:90:be:bf:d9:6a:a6:0e:
         6f:d7:12:6b:e0:59:ac:57:bb:ec:54:53:ac:cd:f6:b8:d7:8f:
         4a:27:ee:06:81:85:58:83:27:85:33:87:ae:e5:b4:b1:85:c8:
         e0:f7:24:27:ef:e4:5e:85:d2:ae:54:ef:84:27:a0:97:b8:81:
         43:9d:3d:ea:52:0a:5b:e3:fa:30:db:fa:68:1e:b6:8c:e9:31:
         39:41:ff:88:43:26:48:73:8f:2c:b0:cc:8b:d0:1b:13:5f:03:
         6c:0f:80:a4:a1:a5:a0:dc:75:a3:da:9a:d8:c4:d3:43:ab:12:
         82:84:7f:f3:03:34:5f:9a:3d:ec:5a:d8:a6:62:86:b3:d0:a1:
         b4:f1:51:b8:84:59:4f:48:7d:ba:f1:86:78:dd:e3:46:28:2e:
         6c:a7:13:88:af:81:f9:4c:1c:9f:37:9a:b6:b0:64:93:3d:f4:
         bd:4b:51:40
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEITUdAKfDa8uScPagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDUzMTEyMDAwMFoXDTIzMTIwMTA1MDAwMFowLzEtMCsGA1UEAxMk
OTIzMDJlY2QtNjQxYy00ZWJmLWEyNmEtNTFmNzUzMTI0ODhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXY+m/PVilqO0XL4Un6J3pxiEAV0LmAzfSNT
+d2cxqyCMzI2zenOi8sBbgp6X/kib+TKghbaS2AHKV9Z1f+YNxvsuj9gVm65KWcz
ohVJIHoCUz4ALptwRiD2pzWSu9sUkMa0UMPHxPM4zZMLlAzt8t+9zO+AyxSqkq0Z
J3q5j7s3nyLOkgwsaoppmXOyewbbjgl8rywRuD1KiQMpU2kMNgusX3pcFLrqlkfc
n9lhLmV+QjZzN0zIpOCxsXVvLCNj0175a+vyxXkT1LzXqfl5QjbNSHP3U24bl9tE
xQ8al8yYcXL3kiQrRw+cSolx43KYlO8MM2lIyaXxDAb/ALA//wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFV5DY+pj7TpbEyT+VqDAOjvQFxdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODg5MTA1NjktZDYwYy0z
NTQxLTgyYWEtNTE5N2U3NmEyZmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEq
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFr+8MVBXiOWaet0gmJRZwI+LB55M0hdAK9ocxKTm6ETiz1TUegR
/8JTFUCTcFA+gKf1mARDUJ3R1T4dw4KJjZu+KkBrYoOXxgxK1bmJ14+uZvZfkL6/
2WqmDm/XEmvgWaxXu+xUU6zN9rjXj0on7gaBhViDJ4Uzh67ltLGFyOD3JCfv5F6F
0q5U74QnoJe4gUOdPepSClvj+jDb+mgetozpMTlB/4hDJkhzjyywzIvQGxNfA2wP
gKShpaDcdaPamtjE00OrEoKEf/MDNF+aPexa2KZihrPQobTxUbiEWU9Ifbrxhnjd
40YoLmynE4ivgflMHJ83mrawZJM99L1LUUA=
-----END CERTIFICATE-----