Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b25749d7-9a8c-3b51-b8f7-1df91be9dc30.roa
File:                     b25749d7-9a8c-3b51-b8f7-1df91be9dc30.roa (raw, json)
Hash identifier:          280cPXYefwFpewqY3/Lhe3heI+0YX/LGVnYCjaWyMTo=
Subject key identifier:   A9:00:50:98:B5:05:F7:25:A9:6D:79:DC:F4:83:5C:29:6E:CC:96:B4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648E0C3854A7CCFA6A718580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b25749d7-9a8c-3b51-b8f7-1df91be9dc30.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     26110
IP address blocks:        2001:470:83::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:0c:38:54:a7:cc:fa:6a:71:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=4db211a0-328c-45cd-b710-2135a3a3ca7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:7d:f3:28:53:4d:6d:de:be:cb:64:bf:fa:
                    2a:9f:ce:eb:a5:94:52:07:22:8d:29:6c:b1:d4:56:
                    c4:96:e5:3c:78:2c:cb:07:3b:0b:c9:6a:b7:19:18:
                    10:69:7f:ca:52:3e:50:1e:e9:98:ef:b3:73:28:10:
                    77:26:7e:fe:41:7e:cf:1d:c0:b7:cd:ba:48:25:4b:
                    d3:10:6d:29:65:d5:26:91:88:2d:85:07:af:27:19:
                    2f:56:9a:c0:f8:67:af:d7:99:7a:46:a6:d7:3a:03:
                    2b:99:bd:d7:29:97:97:75:c3:c8:93:71:c7:af:8e:
                    3b:63:2d:c1:82:54:a3:de:84:d3:fe:21:ff:16:ba:
                    07:25:58:e4:f0:40:eb:94:d6:d3:53:a1:28:86:17:
                    bc:dc:ae:6f:13:8e:61:5a:f1:be:93:49:c9:ff:56:
                    8f:d2:33:01:13:f4:84:51:5d:bc:dd:94:4a:05:79:
                    17:95:06:8f:88:47:0b:35:61:cc:dc:47:c6:ce:2d:
                    e8:ba:32:3b:d3:2f:8c:68:c2:5a:a7:88:02:e0:a3:
                    30:3e:53:b7:d9:6b:fd:ed:6b:7c:8a:a1:8c:38:88:
                    6e:77:d4:3d:f1:17:90:86:a2:b6:3c:50:da:81:ad:
                    e2:9d:02:43:89:60:6f:6e:42:cb:bf:bb:9c:9b:10:
                    27:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:00:50:98:B5:05:F7:25:A9:6D:79:DC:F4:83:5C:29:6E:CC:96:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b25749d7-9a8c-3b51-b8f7-1df91be9dc30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:83::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:91:46:d2:e6:47:c7:05:23:3c:bb:14:83:4e:f6:ca:ec:58:
         5b:27:7f:7b:b6:29:96:cd:a8:68:e2:8a:ff:e8:df:ec:66:8d:
         d3:aa:28:3a:66:26:04:b8:c7:3a:c7:85:cb:ce:9e:f5:80:4f:
         44:3f:1c:d5:27:df:6a:53:33:0c:bc:a2:c7:2e:05:51:e4:ec:
         9e:a6:4f:df:98:29:76:f0:56:08:1c:89:52:c5:70:b5:5f:e6:
         a5:d4:50:9e:c0:26:43:b2:6b:a7:90:a3:f6:6d:48:db:b1:ce:
         d3:52:7f:f8:a4:2d:ae:ce:98:ea:56:cc:d1:71:84:59:ff:5c:
         46:4e:5c:a9:54:bf:54:7a:03:ef:78:71:43:03:70:28:22:f0:
         02:a1:7c:94:10:62:fc:31:cf:c6:4a:ba:18:f8:b1:4f:37:1a:
         f7:af:5d:f4:79:eb:53:45:4e:cb:89:19:45:bb:b8:37:fb:71:
         f1:10:f4:50:38:fa:84:ca:76:a8:8c:cb:c4:1a:0a:e9:25:aa:
         9d:99:b0:6c:e4:f0:d0:8b:65:c4:56:71:26:9f:1f:50:a2:b9:
         f5:23:83:2e:13:8a:14:9d:cc:19:6f:8e:b9:67:09:3c:0a:37:
         ed:b5:55:17:38:4c:73:09:55:f5:93:ff:9c:f6:13:ab:27:f4:
         52:1d:05:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----