Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/97a9bf2b-de41-35fb-9ada-3ac361b7fed8.roa
File:                     97a9bf2b-de41-35fb-9ada-3ac361b7fed8.roa (raw, json)
Hash identifier:          K0h50/Lq61lbA37qRPAD0ITvdYZsHV2qXP7UJk5k6kw=
Subject key identifier:   42:AA:40:6D:80:56:73:5B:09:41:5F:6B:66:F3:B7:AB:ED:DD:4C:17
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583C1DC0A81B9DEAAB2CDE123080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/97a9bf2b-de41-35fb-9ada-3ac361b7fed8.roa
Signing time:             Wed 01 Dec 2021 05:00:00 +0000
ROA not before:           Wed 01 Dec 2021 05:00:00 +0000
ROA not after:            Wed 01 Jun 2022 04:00:00 +0000
asID:                     393552
IP address blocks:        2001:470:c0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:1d:c0:a8:1b:9d:ea:ab:2c:de:12:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  1 05:00:00 2021 GMT
            Not After : Jun  1 04:00:00 2022 GMT
        Subject: CN=579c6cba-a592-4cf5-8a24-376af71e8513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b9:65:c4:01:c2:21:a4:9d:aa:4c:6e:b5:3f:
                    76:f1:02:09:df:33:58:4f:9d:bf:dd:ec:1f:17:3b:
                    73:ab:b4:a9:81:5e:7b:9d:b2:c5:d5:9f:66:6a:a6:
                    4b:40:90:bd:a8:36:3b:36:1c:d9:55:71:b9:d8:94:
                    54:7e:70:e8:dc:aa:6f:6b:a3:d9:3e:07:c4:6b:43:
                    fa:2c:0a:3a:b4:ab:7f:3e:ae:66:5a:bc:cd:23:31:
                    db:df:6a:5e:d1:97:3c:0c:2e:71:e1:f1:55:6d:06:
                    31:45:e1:73:b7:18:a5:7f:c6:84:38:36:11:59:a6:
                    fb:b7:05:e1:b6:4c:74:74:fa:91:dc:35:51:f2:a0:
                    27:8a:f2:d9:b4:2a:e5:69:16:ab:57:15:3c:75:42:
                    91:85:c9:24:ac:0a:8e:78:e4:3e:dd:bf:da:4a:7f:
                    fa:31:a4:0d:af:49:e7:e9:46:08:9b:dc:46:f6:fd:
                    3e:18:3b:7b:95:bc:87:66:b5:79:09:65:44:a5:b2:
                    bd:33:1f:41:3d:19:8b:ae:4c:59:55:f3:19:dd:66:
                    b5:16:05:d6:65:34:26:0d:56:1b:97:74:91:6c:91:
                    14:0f:15:48:91:33:6d:d8:ce:f8:0d:e2:23:65:eb:
                    e6:26:f6:19:90:8b:e9:7d:0d:64:dd:25:49:64:ed:
                    34:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AA:40:6D:80:56:73:5B:09:41:5F:6B:66:F3:B7:AB:ED:DD:4C:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/97a9bf2b-de41-35fb-9ada-3ac361b7fed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:ee:73:6a:96:4e:11:56:bd:61:34:28:44:0a:2f:b1:db:f2:
         66:52:7e:3c:e9:81:b9:8c:64:2d:e7:63:aa:9a:4c:15:ad:7a:
         92:e8:a7:cd:de:46:8a:ff:42:6a:8d:bb:9d:de:a3:f4:57:de:
         d1:9f:25:71:87:23:f1:bf:c5:22:80:f9:20:4a:1b:83:2e:33:
         aa:ce:f9:33:2b:88:79:75:40:9b:1b:b8:66:f5:29:7d:fc:cb:
         d7:da:33:d5:17:da:bb:33:b2:76:b4:79:ad:0a:13:f0:80:6a:
         8e:aa:e8:c9:45:f5:1e:e4:9d:e5:4a:e8:4d:e6:11:5e:d4:30:
         70:c3:cf:0d:f8:7a:14:c8:3e:72:e2:36:7c:a7:5e:50:2a:0e:
         4b:54:c8:a1:92:f5:37:61:8b:25:d7:7a:7d:22:b9:80:e2:6e:
         e5:51:5a:c4:b9:8e:4e:ef:63:67:b3:c8:96:c0:a7:0d:5d:ae:
         14:ef:f6:88:29:d7:30:a0:0d:32:3e:5b:0f:90:26:64:8a:3d:
         fe:9a:7a:3c:dc:6b:d4:79:b7:81:eb:c9:d5:86:9e:55:f9:e1:
         4d:ab:fe:03:34:f6:d6:ce:e6:b0:23:da:f7:2b:e0:2a:62:d0:
         2f:01:3d:3b:62:70:0c:b8:07:62:5b:d1:b0:4a:8e:4a:ed:05:
         50:f7:e7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----