Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b104b601-e29f-31bc-bb7c-0afd06fd5adf.roa
File:                     b104b601-e29f-31bc-bb7c-0afd06fd5adf.roa (raw, json)
Hash identifier:          BbN8DWW6KP+oTVkOSTKpNvNftnHpphragj8wY02xTQo=
Subject key identifier:   92:63:55:82:65:E4:63:BF:B5:79:6A:54:3A:DE:C4:80:FD:DB:1C:66
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A515DD72BB6BE9F6A00F050
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b104b601-e29f-31bc-bb7c-0afd06fd5adf.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     4531
IP address blocks:        2001:470:e::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:51:5d:d7:2b:b6:be:9f:6a:00:f0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=651544f1-4b38-416a-a896-667d577107ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:77:56:b7:38:ac:74:8d:4d:18:0b:6f:9a:91:
                    9f:4c:b4:ee:51:a7:18:b1:49:67:9c:d7:60:58:47:
                    d6:38:a5:96:fc:4e:e9:66:bc:df:5f:8c:4d:05:fb:
                    2b:8a:31:42:b9:57:b2:b0:77:3a:ee:66:5d:49:a9:
                    c5:e2:71:7f:07:03:12:3e:be:6e:b7:91:e5:f7:27:
                    02:b4:e9:bc:c1:d5:6b:bd:fc:11:b4:7b:ab:36:ae:
                    9f:a6:60:6f:fd:c8:35:a0:e5:a8:0d:70:bf:63:0f:
                    c0:65:30:f5:02:9d:b7:b1:05:1e:a0:54:fb:08:ed:
                    f8:0e:f8:b8:04:f4:47:9d:da:ca:06:df:db:c6:71:
                    f6:ae:97:b4:66:e6:b6:de:bb:0f:22:98:bd:0d:e1:
                    f0:7e:1c:12:3b:a8:3e:67:04:37:eb:1b:b0:2f:74:
                    4b:e6:f3:3b:32:89:8d:20:bf:97:dd:4b:a9:cf:5f:
                    b5:4c:46:82:f0:65:5b:db:ef:a3:37:d1:82:b0:2e:
                    45:66:0f:ec:51:92:8f:b6:96:9d:ce:ed:81:b0:c1:
                    04:f6:77:b0:62:a5:bc:03:5b:3c:70:d3:b9:c9:0b:
                    00:a0:e4:38:0d:70:f2:f5:fc:3d:b6:09:5a:2d:d2:
                    c0:16:af:47:ce:c6:ae:ed:dd:cf:c6:cf:36:d2:a1:
                    98:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:63:55:82:65:E4:63:BF:B5:79:6A:54:3A:DE:C4:80:FD:DB:1C:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b104b601-e29f-31bc-bb7c-0afd06fd5adf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:a0:14:cb:04:1f:85:56:d3:e9:fc:05:42:1f:f2:d2:4f:79:
         21:b5:c8:6c:a5:0a:5c:04:11:9a:77:5c:bd:21:f3:df:41:e5:
         08:e8:c2:66:d5:81:06:04:81:f4:12:d0:d4:74:0c:51:16:09:
         36:37:fa:fd:9e:65:f8:41:fe:de:3e:45:fe:45:23:91:fb:c6:
         12:c8:9b:7c:80:aa:da:e2:4c:54:bf:58:ab:aa:ca:d2:f1:66:
         f1:50:2c:f4:9a:1e:26:ab:e9:79:8a:73:9b:2d:73:98:83:4d:
         db:68:6c:53:2f:dc:da:e8:45:35:4b:05:1b:42:15:42:60:e9:
         b8:58:87:76:51:38:7b:6c:e1:90:4e:55:0e:2c:83:33:51:dc:
         ef:07:67:93:17:ed:1a:b3:71:6b:38:ed:1a:5e:4a:1a:e0:1c:
         fd:6b:2e:04:24:0d:70:0e:41:71:ab:b9:56:c0:2c:ea:3f:66:
         08:42:f2:cc:f4:81:42:47:81:1c:a1:87:69:be:a4:b7:1a:53:
         64:ee:dc:62:73:53:dc:eb:bf:62:4d:65:a1:11:10:82:d6:e1:
         0f:52:22:30:de:26:b0:b2:63:b2:45:e8:ce:fc:c6:34:ae:37:
         b0:2c:f9:98:39:99:20:46:28:d0:76:85:db:fa:20:a1:03:74:
         e7:15:e3:4a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEFKUV3XK7a+n2oA8FAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
NjUxNTQ0ZjEtNGIzOC00MTZhLWE4OTYtNjY3ZDU3NzEwN2FiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsndWtzisdI1NGAtvmpGfTLTuUacYsUlnnNdg
WEfWOKWW/E7pZrzfX4xNBfsrijFCuVeysHc67mZdSanF4nF/BwMSPr5ut5Hl9ycC
tOm8wdVrvfwRtHurNq6fpmBv/cg1oOWoDXC/Yw/AZTD1Ap23sQUeoFT7CO34Dvi4
BPRHndrKBt/bxnH2rpe0Zua23rsPIpi9DeHwfhwSO6g+ZwQ36xuwL3RL5vM7MomN
IL+X3Uupz1+1TEaC8GVb2++jN9GCsC5FZg/sUZKPtpadzu2BsMEE9newYqW8A1s8
cNO5yQsAoOQ4DXDy9fw9tglaLdLAFq9Hzsau7d3Pxs820qGYOQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJJjVYJl5GO/tXlqVDrexID92xxmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjEwNGI2MDEtZTI5Zi0z
MWJjLWJiN2MtMGFmZDA2ZmQ1YWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAECgFMsEH4VW0+n8BUIf8tJPeSG1yGylClwEEZp3XL0h899B5Qjo
wmbVgQYEgfQS0NR0DFEWCTY3+v2eZfhB/t4+Rf5FI5H7xhLIm3yAqtriTFS/WKuq
ytLxZvFQLPSaHiar6XmKc5stc5iDTdtobFMv3NroRTVLBRtCFUJg6bhYh3ZROHts
4ZBOVQ4sgzNR3O8HZ5MX7RqzcWs47RpeShrgHP1rLgQkDXAOQXGruVbALOo/ZghC
8sz0gUJHgRyhh2m+pLcaU2Tu3GJzU9zrv2JNZaEREILW4Q9SIjDeJrCyY7JF6M78
xjSuN7As+Zg5mSBGKNB2hdv6IKEDdOcV40o=
-----END CERTIFICATE-----