Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9ac61c75-969c-3fa0-bdcc-0948443ce3cd.roa
File:                     9ac61c75-969c-3fa0-bdcc-0948443ce3cd.roa (raw, json)
Hash identifier:          IlutqRFkJ8yFU0HIcbuwYMk3AIbAX/AQjaYjsLmec7s=
Subject key identifier:   6E:51:D4:8E:E4:2E:D4:E7:67:FF:EF:C6:F7:79:AA:1C:4E:24:45:4A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285842BC383B246805F8ED7348DE00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9ac61c75-969c-3fa0-bdcc-0948443ce3cd.roa
Signing time:             Sun 30 Jul 2023 12:00:00 +0000
ROA not before:           Sun 30 Jul 2023 12:00:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     63457
IP address blocks:        2001:470:131::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:bc:38:3b:24:68:05:f8:ed:73:48:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 30 12:00:00 2023 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=acb9ee30-6b24-40a2-8966-069e285b4444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0d:eb:9a:be:df:e0:fa:9a:9e:fb:5f:37:bd:
                    62:10:f2:d4:5e:12:74:22:70:23:19:26:ff:56:30:
                    8f:a4:6a:74:3c:d3:12:eb:91:d9:79:59:5a:ad:8b:
                    6c:b3:91:25:0c:5e:8d:5d:98:a2:8b:be:e5:a2:f9:
                    51:81:d6:f9:12:1f:13:3a:2e:c0:8a:8e:c1:01:10:
                    ae:d6:83:c7:a3:1a:14:bc:08:f6:c4:b9:02:54:d2:
                    2e:4c:0f:81:a1:d3:c2:e6:4f:75:66:98:9c:96:28:
                    b7:39:70:59:a7:6a:d7:db:f0:50:dd:7a:9d:db:ee:
                    b2:40:63:a5:52:57:84:2e:b6:49:b3:ea:eb:76:fa:
                    13:45:0a:74:76:04:af:52:f3:2d:08:9b:f9:5e:40:
                    9b:ac:55:9f:e0:87:c6:0c:41:3a:aa:98:10:be:d0:
                    cb:b9:d7:e9:73:7f:be:0f:b8:70:5a:9c:74:4e:d5:
                    73:64:e6:3a:ab:9a:06:9a:38:d9:cb:8d:aa:09:73:
                    b0:26:92:91:0c:e4:5d:4c:69:1f:61:b4:31:f5:0d:
                    e6:32:f3:f8:fd:b4:a8:09:c1:47:81:32:ae:59:a3:
                    9e:97:55:a9:e5:f0:0b:48:55:87:24:a4:1c:f4:f9:
                    5d:d9:af:3f:11:55:41:b0:3d:29:97:7b:27:60:0f:
                    94:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:51:D4:8E:E4:2E:D4:E7:67:FF:EF:C6:F7:79:AA:1C:4E:24:45:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9ac61c75-969c-3fa0-bdcc-0948443ce3cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:131::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:6e:1c:46:2e:58:97:a5:50:de:f5:b8:a4:6c:1f:b4:f6:55:
         c3:d4:1b:45:0b:f4:ce:a3:e6:67:f2:bb:a4:60:4a:81:ef:85:
         84:e3:d7:43:29:14:c0:38:0f:a4:22:30:aa:ed:f2:5e:20:a3:
         e8:97:36:e6:85:76:ee:4a:b3:2b:fe:c9:e3:ce:d0:13:90:9d:
         19:fb:56:91:60:f1:37:d1:9d:9e:d5:4e:ed:ae:d6:8a:60:8d:
         2f:51:43:74:3f:1b:09:3a:8e:83:3f:94:1b:f3:1e:79:93:6f:
         5a:16:7f:5c:5a:aa:04:36:f0:66:b5:3c:e2:a7:07:75:1c:83:
         d1:9f:d2:4d:da:52:65:86:c2:7b:3d:dc:c6:15:eb:ed:b5:0f:
         69:6f:bc:b0:03:23:9d:ba:b7:91:e3:b7:67:6f:37:f1:f1:ea:
         99:bc:9c:e2:14:ab:f7:b1:ea:c4:a4:81:74:42:2f:08:52:bc:
         ac:7b:94:2d:23:11:6b:d6:68:c2:db:bf:c4:aa:f7:ee:55:a6:
         09:5a:f9:b2:f0:cc:17:a4:82:a6:2e:5f:b9:89:55:ad:92:2c:
         f9:34:2c:79:8e:ee:d0:f6:79:ab:c8:be:3b:1d:bb:10:81:28:
         b3:c5:96:4e:c5:e2:b8:55:c9:ac:78:8c:58:53:89:1a:f4:43:
         cd:c0:a1:18
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEK8ODskaAX47XNI3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDczMDEyMDAwMFoXDTI0MDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
YWNiOWVlMzAtNmIyNC00MGEyLTg5NjYtMDY5ZTI4NWI0NDQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ3rmr7f4PqanvtfN71iEPLUXhJ0InAjGSb/
VjCPpGp0PNMS65HZeVlarYtss5ElDF6NXZiii77lovlRgdb5Eh8TOi7Aio7BARCu
1oPHoxoUvAj2xLkCVNIuTA+BodPC5k91Zpiclii3OXBZp2rX2/BQ3Xqd2+6yQGOl
UleELrZJs+rrdvoTRQp0dgSvUvMtCJv5XkCbrFWf4IfGDEE6qpgQvtDLudfpc3++
D7hwWpx0TtVzZOY6q5oGmjjZy42qCXOwJpKRDORdTGkfYbQx9Q3mMvP4/bSoCcFH
gTKuWaOel1Wp5fALSFWHJKQc9Pld2a8/EVVBsD0pl3snYA+URQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG5R1I7kLtTnZ//vxvd5qhxOJEVKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWFjNjFjNzUtOTY5Yy0z
ZmEwLWJkY2MtMDk0ODQ0M2NlM2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEx
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAtuHEYuWJelUN71uKRsH7T2VcPUG0UL9M6j5mfyu6RgSoHvhYTj
10MpFMA4D6QiMKrt8l4go+iXNuaFdu5Ksyv+yePO0BOQnRn7VpFg8TfRnZ7VTu2u
1opgjS9RQ3Q/Gwk6joM/lBvzHnmTb1oWf1xaqgQ28Ga1POKnB3Ucg9Gf0k3aUmWG
wns93MYV6+21D2lvvLADI526t5Hjt2dvN/Hx6pm8nOIUq/ex6sSkgXRCLwhSvKx7
lC0jEWvWaMLbv8Sq9+5Vpgla+bLwzBekgqYuX7mJVa2SLPk0LHmO7tD2eavIvjsd
uxCBKLPFlk7F4rhVyax4jFhTiRr0Q83AoRg=
-----END CERTIFICATE-----