Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/90a9cbc8-7e3b-36aa-8f39-f25d42dd6edf.roa
File:                     90a9cbc8-7e3b-36aa-8f39-f25d42dd6edf.roa (raw, json)
Hash identifier:          gkkeiMxJPlmEAIznIvUQ0M7JY3YcSoh69/xAwglJRE4=
Subject key identifier:   33:96:3C:05:45:2C:63:AD:65:57:79:F4:06:55:33:C2:95:4F:EC:44
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D79350D37B43BB45111121500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/90a9cbc8-7e3b-36aa-8f39-f25d42dd6edf.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     22989
IP address blocks:        2001:470:142::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:35:0d:37:b4:3b:b4:51:11:12:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=c10af964-e621-4c47-9b06-52d5b86ca0cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3f:22:3f:e1:3f:91:a0:9d:a3:a3:aa:b2:d3:
                    92:66:9e:33:33:b3:ea:aa:0b:d1:de:bf:4a:83:e4:
                    b7:b6:1f:36:04:ae:7d:16:cc:16:34:09:07:ef:da:
                    d9:1a:b7:5c:e4:e2:83:ae:72:c1:28:4d:0f:59:39:
                    c6:92:c1:b4:d2:da:c5:84:eb:d9:ca:ea:92:48:e8:
                    5b:60:0b:e3:4e:d2:05:36:2b:4b:82:e2:53:98:07:
                    b3:4c:15:b4:90:31:43:44:81:5e:27:ee:69:03:09:
                    b4:7a:af:f5:3a:a6:20:23:3f:5a:3e:c0:23:5e:d7:
                    84:df:75:65:b9:61:a5:8c:f8:f0:81:e2:89:a9:21:
                    0f:88:f7:60:31:f6:0b:d4:83:f0:8f:c6:0b:3c:fa:
                    81:3a:84:fc:7a:54:e1:58:38:e8:df:72:b1:ad:e2:
                    e3:75:f8:51:7d:0f:fd:f0:18:d6:77:0e:14:5a:b4:
                    28:81:8f:93:54:72:92:e6:34:45:4c:34:af:43:75:
                    80:41:14:6c:ea:0b:6b:48:c7:2b:21:7d:6b:6c:09:
                    48:f0:4c:ee:ef:57:b9:9d:ad:78:b9:8e:41:79:79:
                    b0:fe:34:70:a5:35:7b:7a:d8:6f:a3:e5:b5:bb:3b:
                    00:4c:6c:f8:24:6a:58:e3:11:cb:13:76:fe:77:6b:
                    84:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:96:3C:05:45:2C:63:AD:65:57:79:F4:06:55:33:C2:95:4F:EC:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/90a9cbc8-7e3b-36aa-8f39-f25d42dd6edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:142::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:fa:83:b5:dc:54:5a:ed:78:0e:de:81:7d:e0:0a:5e:d0:18:
         8f:cb:18:2b:d4:7d:69:3d:f3:36:35:85:d5:6a:70:7c:1d:b0:
         4c:bd:3b:ca:33:0b:ff:ab:91:b4:b7:0d:4e:09:17:fa:67:fc:
         d1:72:ee:14:a2:8d:02:a6:7f:48:4a:eb:60:7f:30:c0:ce:2c:
         b6:18:27:ca:27:5f:fc:e6:16:38:07:f9:a5:35:21:88:59:17:
         e5:b4:53:97:a5:47:31:e9:31:ff:4d:3b:28:a1:f1:be:c2:b7:
         f1:bf:5b:de:ec:29:f2:f4:5c:e6:e4:20:67:b9:ab:fa:50:b1:
         df:5a:3d:98:78:ea:01:ba:72:62:b8:11:8c:00:5a:25:09:39:
         b2:aa:8d:c0:b9:25:95:e6:a2:b9:3b:6b:15:e5:64:62:e8:9a:
         6a:18:4f:85:b9:af:90:67:90:73:6f:fd:d2:bf:a1:3d:08:cb:
         ff:4b:b2:cf:63:a4:ad:6e:24:ac:9e:17:85:1d:d3:80:3c:81:
         9b:52:6d:e5:c0:c3:db:88:02:f0:11:ab:dc:9a:b5:99:59:eb:
         61:33:9b:60:79:06:18:14:b0:94:70:c0:92:88:20:9a:51:d9:
         1c:8b:6f:af:c2:7f:7c:ea:ca:63:18:f6:a4:2f:c7:24:e6:b5:
         ee:9c:7a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----