Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ab377499-c7bf-343e-aad7-9462d1b5c7dd.roa
File:                     ab377499-c7bf-343e-aad7-9462d1b5c7dd.roa (raw, json)
Hash identifier:          2+xdR0WY50L7XujqsDhPakhQA0WPSpfzCJ02mZrA+B8=
Subject key identifier:   C8:1B:8B:AE:0D:4E:1F:FF:DF:8B:4A:25:28:D2:EB:A7:C5:AD:C2:5F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D793566982AEE7E47F6AB4B80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ab377499-c7bf-343e-aad7-9462d1b5c7dd.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     395605
IP address blocks:        2001:470:f5::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:35:66:98:2a:ee:7e:47:f6:ab:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=8f7cbebe-70c4-41a6-a7e6-4f9e3fea5c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e0:3c:e0:30:10:9d:b4:fa:94:5a:f3:d1:9a:
                    a7:d8:4d:36:93:00:74:5f:fc:24:ab:88:11:b5:8f:
                    34:5b:15:57:f0:e5:40:1f:3d:51:1f:77:33:45:bd:
                    ce:68:8d:36:b2:2a:f9:e6:8d:34:d7:ed:06:f9:9f:
                    ec:3f:20:e9:c9:d2:23:b2:32:0a:07:40:6d:ba:2f:
                    ff:98:3c:60:41:da:44:da:d3:30:94:f1:5f:4f:6a:
                    e0:b3:c5:60:26:64:d2:4f:ba:06:c7:7c:01:a9:1c:
                    19:ba:64:ab:db:5e:fb:d1:e0:9b:54:28:5d:89:33:
                    c3:91:72:8d:81:74:fe:65:34:5d:01:38:91:e1:ef:
                    05:87:2c:d4:48:e5:09:57:58:93:f2:b4:90:d5:7a:
                    2a:03:cc:90:1f:19:86:f0:2f:6c:78:5e:b2:a1:9e:
                    c3:84:d7:7a:9b:57:11:b2:d0:2d:e0:d4:36:9f:05:
                    b2:20:e4:ad:3e:df:bd:2a:59:f8:cc:aa:3f:a2:fb:
                    af:08:1f:5d:a5:b3:e8:a4:58:73:d6:58:7d:5a:1e:
                    b7:8c:59:c3:57:8c:75:10:b9:50:98:4b:84:3e:72:
                    05:95:5f:25:ae:12:20:88:a5:c8:2c:41:4c:a1:8b:
                    1f:ed:d1:10:47:bc:95:ca:f3:f6:c6:a1:6e:b7:04:
                    c6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1B:8B:AE:0D:4E:1F:FF:DF:8B:4A:25:28:D2:EB:A7:C5:AD:C2:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ab377499-c7bf-343e-aad7-9462d1b5c7dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:f5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:84:78:14:f9:1b:3b:42:2a:7c:13:bb:26:81:d7:9b:51:ec:
         8b:7c:bb:1d:81:95:a5:d6:d8:5d:63:2b:93:89:67:d7:3f:4f:
         ec:8a:d7:31:96:78:bb:42:74:2e:9c:16:3b:a3:77:b3:bb:bc:
         4b:73:69:cd:d5:34:79:4b:de:f0:f3:17:b3:e5:f8:16:e6:09:
         5c:fd:32:b4:8b:38:de:a8:c2:9f:2c:d2:fc:41:09:31:a2:74:
         1a:c3:c5:a6:c0:50:32:26:2e:a3:41:90:82:de:49:25:81:df:
         08:c3:f4:42:df:02:28:c5:ad:61:07:8f:da:31:e5:6d:39:c8:
         1f:68:72:54:78:c3:82:b0:be:2f:6d:fa:9e:c8:ac:d2:2c:4a:
         36:d6:85:32:bd:67:9a:54:de:9a:99:94:4d:b4:1b:1e:bd:80:
         42:9d:5c:1f:d3:d6:11:1d:1f:2d:db:85:d1:86:a0:43:58:62:
         4a:32:66:2c:3e:ee:ac:b4:10:2a:ba:db:5e:e4:88:ec:83:82:
         4e:e4:d1:ad:11:ae:c1:77:a9:9f:89:91:8e:6e:bb:f7:1b:7a:
         b4:5f:9c:7f:f0:e0:a8:94:1f:2a:83:e5:61:4b:f5:51:ef:07:
         7a:21:54:f2:19:02:c6:8e:7c:50:0e:15:dc:82:96:45:d1:fc:
         d3:f1:4a:fc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD15NWaYKu5+R/arS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDQwNTA0MDAwMFoXDTIyMTAwNTA0MDAwMFowLzEtMCsGA1UEAxMk
OGY3Y2JlYmUtNzBjNC00MWE2LWE3ZTYtNGY5ZTNmZWE1YzgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+A84DAQnbT6lFrz0Zqn2E02kwB0X/wkq4gR
tY80WxVX8OVAHz1RH3czRb3OaI02sir55o001+0G+Z/sPyDpydIjsjIKB0Btui//
mDxgQdpE2tMwlPFfT2rgs8VgJmTST7oGx3wBqRwZumSr21770eCbVChdiTPDkXKN
gXT+ZTRdATiR4e8FhyzUSOUJV1iT8rSQ1XoqA8yQHxmG8C9seF6yoZ7DhNd6m1cR
stAt4NQ2nwWyIOStPt+9Kln4zKo/ovuvCB9dpbPopFhz1lh9Wh63jFnDV4x1ELlQ
mEuEPnIFlV8lrhIgiKXILEFMoYsf7dEQR7yVyvP2xqFutwTGewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMgbi64NTh//34tKJSjS66fFrcJfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWIzNzc0OTktYzdiZi0z
NDNlLWFhZDctOTQ2MmQxYjVjN2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAD1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJSEeBT5GztCKnwTuyaB15tR7It8ux2BlaXW2F1jK5OJZ9c/T+yK
1zGWeLtCdC6cFjujd7O7vEtzac3VNHlL3vDzF7Pl+BbmCVz9MrSLON6owp8s0vxB
CTGidBrDxabAUDImLqNBkILeSSWB3wjD9ELfAijFrWEHj9ox5W05yB9oclR4w4Kw
vi9t+p7IrNIsSjbWhTK9Z5pU3pqZlE20Gx69gEKdXB/T1hEdHy3bhdGGoENYYkoy
Ziw+7qy0ECq6217kiOyDgk7k0a0RrsF3qZ+JkY5uu/cberRfnH/w4KiUHyqD5WFL
9VHvB3ohVPIZAsaOfFAOFdyClkXR/NPxSvw=
-----END CERTIFICATE-----