Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/93158dce-7176-3f0f-9989-0ae75d1ede06.roa
File:                     93158dce-7176-3f0f-9989-0ae75d1ede06.roa (raw, json)
Hash identifier:          olUQTuCr7bMcZyrdwtpUjPdorIeFGYOWMMPBxlFncJ4=
Subject key identifier:   45:80:40:41:40:6E:35:17:88:45:23:6A:24:F4:4E:C6:39:02:6F:CB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA6CDE385B4C8190FCAF7FC
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/93158dce-7176-3f0f-9989-0ae75d1ede06.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     40841
IP address blocks:        2001:470:8b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:cd:e3:85:b4:c8:19:0f:ca:f7:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=e2455b02-5ebd-4bec-bd58-5d89e9ad47f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2c:ef:28:a5:54:30:15:42:6a:a5:97:39:5c:
                    5f:ff:85:2b:cd:c1:1f:f6:0f:78:a4:fe:50:d2:50:
                    43:8e:ed:71:c0:fb:35:49:b8:e5:47:21:c2:45:a1:
                    de:ae:4a:1d:7e:8e:fd:cb:ec:31:a3:b2:1c:61:d6:
                    26:de:1f:46:48:04:eb:ee:e5:4b:ed:05:2e:5a:1b:
                    91:91:f5:ab:30:10:88:cc:c5:cf:ea:2b:58:4b:75:
                    0b:68:4e:1a:d0:b4:e7:90:be:b1:ac:a7:0b:ab:2c:
                    78:7d:6d:ea:a9:7b:9e:7b:41:b2:6c:c0:a7:99:77:
                    86:4e:0d:05:ff:88:55:8e:57:d7:fe:67:51:ad:e9:
                    ef:08:95:84:71:24:61:ab:94:b7:4c:8b:a6:6f:8a:
                    f4:2b:05:86:24:ee:55:12:6a:74:22:d4:d4:05:7e:
                    17:21:a3:a1:eb:a4:96:e1:40:41:a3:5f:2b:ce:e9:
                    7d:64:1b:3f:90:35:f4:c7:0e:3e:5b:14:1f:a6:79:
                    8c:7e:63:ab:3c:ca:a1:be:09:ab:95:0a:a0:32:b1:
                    34:35:e5:7a:53:d6:83:0b:e4:29:2a:c1:88:97:6d:
                    9a:a0:04:e2:67:a6:90:46:2b:ce:1d:61:4d:c4:71:
                    71:f9:ac:ba:29:70:cf:45:7a:18:c8:6d:33:12:cb:
                    97:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:80:40:41:40:6E:35:17:88:45:23:6A:24:F4:4E:C6:39:02:6F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/93158dce-7176-3f0f-9989-0ae75d1ede06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:8b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:5c:4b:a0:d7:89:b6:a4:24:e5:f9:c0:63:47:e6:76:9e:49:
         fe:f8:74:34:4d:7f:79:00:43:dc:b5:ee:11:c4:8c:f9:b2:d1:
         04:f1:9b:32:d2:93:0c:28:2a:59:5e:96:1e:3e:b1:3e:da:fa:
         ef:a0:f1:4e:53:8d:93:f1:4d:90:43:15:c8:6b:2a:7b:f7:35:
         2b:04:86:3d:f7:8a:11:14:d2:68:86:14:16:1d:e1:35:09:16:
         44:13:7c:bb:3d:cc:87:ac:17:fb:67:81:62:0a:56:71:d7:ce:
         83:38:21:ab:a4:57:b8:f0:0f:b7:ab:6e:6d:6e:48:0f:7c:14:
         52:11:75:d0:5f:6f:40:8a:02:d1:d5:1d:7e:1c:19:8d:cb:73:
         e9:db:14:0d:29:05:3e:07:41:be:84:3b:73:7d:fc:4e:dd:c8:
         6e:5b:5c:df:1b:ba:ea:cb:08:b8:1c:09:fc:a3:ba:dc:c9:99:
         bf:68:dd:97:78:04:40:d6:ed:6c:fc:5b:75:9f:5a:38:a5:39:
         6e:5f:5f:99:63:c9:b1:18:94:b0:5e:d7:93:d0:9b:84:3e:3d:
         16:cf:f1:06:48:f3:09:66:1d:0a:5e:85:ad:48:31:54:e9:d7:
         9f:74:38:16:52:96:14:6b:ba:d8:b3:e9:42:82:90:f1:15:62:
         05:83:bf:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----