Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8c1e0df-2af6-318a-9388-3d2c10a68140.roa
File:                     a8c1e0df-2af6-318a-9388-3d2c10a68140.roa (raw, json)
Hash identifier:          qCyHt5wAhjZHMRUlZp8LYiZonQngyFM1iA28Awzgg4s=
Subject key identifier:   EB:B1:57:A8:E4:38:0A:D9:4F:AE:50:97:57:A3:5D:10:F3:A4:94:4B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D79354CDC0622443B510D0B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8c1e0df-2af6-318a-9388-3d2c10a68140.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     13925
IP address blocks:        2001:470:f6::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:35:4c:dc:06:22:44:3b:51:0d:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=f8070e1a-3ce1-49bc-a63f-c2641b988f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:be:69:72:70:c0:16:cc:9e:e2:71:4f:8f:45:
                    81:0d:8d:36:56:7e:e6:9f:a9:a0:c1:cb:b6:1d:ec:
                    54:6b:be:70:0f:0d:d5:ab:fe:dd:3a:32:e3:8a:88:
                    91:55:8d:d1:51:8b:e5:ea:c6:18:c2:24:be:db:90:
                    f7:51:a8:0e:08:47:28:ed:50:13:85:30:20:66:be:
                    87:0b:a5:83:16:1a:ed:86:5c:cd:c1:2e:9a:dd:10:
                    72:d0:7e:6c:ca:67:53:93:3b:53:21:e9:53:32:e1:
                    a0:86:a9:55:fc:c7:4e:38:d0:46:d9:59:da:c3:7e:
                    ae:07:e6:dd:f5:89:36:da:43:bc:9f:bc:36:b2:ab:
                    fa:95:41:21:47:1e:30:6a:ff:d8:ca:ae:63:e8:48:
                    72:03:40:cf:9c:66:34:11:51:be:34:06:f3:f0:c0:
                    6b:9a:9b:d0:58:6d:52:66:94:10:63:cb:91:e7:dc:
                    4b:e8:de:1c:e8:a4:24:44:77:ca:2e:be:f4:02:db:
                    04:85:81:79:1b:cc:2f:97:69:7b:6d:5a:f5:78:21:
                    d5:2d:34:42:3f:1b:38:d8:25:b6:7e:50:d2:52:3c:
                    85:65:79:16:0f:03:96:2b:f7:71:88:7c:01:c4:de:
                    91:7e:7e:dc:68:43:e9:4f:0d:00:4f:46:73:36:e5:
                    48:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B1:57:A8:E4:38:0A:D9:4F:AE:50:97:57:A3:5D:10:F3:A4:94:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8c1e0df-2af6-318a-9388-3d2c10a68140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:f6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c6:6d:bc:38:e0:ff:70:01:06:04:8f:87:19:ed:64:30:0a:
         dd:d8:0f:47:b8:96:83:96:81:52:68:90:fc:1c:21:68:64:29:
         6d:23:87:ac:1f:36:4e:78:3b:68:5e:cd:61:ec:d6:0a:74:15:
         6c:dc:b5:af:27:47:eb:22:aa:fd:8b:0c:f0:19:39:24:9c:1c:
         6b:06:d6:a1:19:de:c9:c1:99:23:95:9c:38:1d:d0:fb:82:45:
         1b:da:89:36:38:f2:57:4a:8c:8d:b8:d5:7a:f1:08:5b:5d:e4:
         06:6c:c1:93:8c:69:98:96:49:d3:f7:55:30:61:70:99:d8:c9:
         2d:8e:8e:26:84:e3:87:ab:f3:49:38:ad:a0:57:c1:5f:7f:94:
         dc:6e:57:0e:50:05:4d:11:d3:6c:36:9a:bc:e1:c8:8a:ba:50:
         74:f7:f1:ba:ed:ed:bd:98:bc:33:29:06:1b:e0:18:fc:02:a5:
         f9:36:b2:2e:11:8e:04:33:29:8b:5b:38:4e:a7:48:7d:bb:42:
         66:00:bc:cb:49:15:5b:26:1c:10:dd:47:dd:3e:91:3d:39:68:
         3a:e1:83:78:5b:d5:25:40:c5:70:a8:41:49:5f:f8:a0:d8:e0:
         65:7f:15:e9:5c:79:2e:a7:31:27:73:72:b6:26:67:d4:47:ca:
         a8:d5:fc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----