Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2ba165c-e277-329b-86bc-33bc5fc5865c.roa
File:                     c2ba165c-e277-329b-86bc-33bc5fc5865c.roa (raw, json)
Hash identifier:          W6thBSKkLyGJ2g+m8oaRrMRTxY3CSVJQ3+x+Q0cOfBI=
Subject key identifier:   B8:11:BB:84:7C:E2:33:BB:9D:AE:6B:CF:31:BD:BC:C1:03:D9:74:D1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858429952A926B6A2419E285CF900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2ba165c-e277-329b-86bc-33bc5fc5865c.roa
Signing time:             Tue 18 Jul 2023 12:00:00 +0000
ROA not before:           Tue 18 Jul 2023 12:00:00 +0000
ROA not after:            Fri 19 Jan 2024 05:00:00 +0000
asID:                     17117
IP address blocks:        2001:470:151::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:99:52:a9:26:b6:a2:41:9e:28:5c:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 18 12:00:00 2023 GMT
            Not After : Jan 19 05:00:00 2024 GMT
        Subject: CN=df36c19a-2fa8-4621-b92d-4a0d8b4a028d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fd:31:2a:18:df:5d:5c:21:e2:a6:b2:f9:90:
                    0a:1e:b1:e8:57:46:60:5f:35:0c:ae:fe:21:4d:78:
                    39:27:bd:07:d5:ea:7e:81:5d:1f:8d:77:b4:5c:4e:
                    6e:f8:f4:96:b1:62:6b:e3:13:24:08:c2:b0:ba:8d:
                    38:38:34:65:75:ea:eb:c4:8a:a1:3d:bd:d0:bb:ab:
                    55:aa:c2:39:2c:1b:3c:96:3e:a5:32:1f:b6:fd:33:
                    fd:0e:55:6e:2b:50:07:00:9d:29:2b:74:97:a0:09:
                    78:1c:78:6b:dc:3c:57:03:01:da:9e:05:65:7e:9d:
                    64:bd:d1:4d:c6:f2:73:ff:51:25:c9:78:cf:df:0e:
                    87:5e:cb:e8:aa:5b:9b:92:0d:5e:70:9e:90:82:90:
                    52:c1:a3:86:59:47:11:4b:9c:af:19:a3:07:65:99:
                    87:01:a2:19:29:a6:c4:d8:bf:8d:9f:96:3a:0a:5a:
                    01:b8:07:04:04:d9:a4:4e:5d:3b:39:f9:60:c2:f6:
                    42:40:2b:9a:53:e2:8b:21:6c:4d:09:86:fe:b8:c5:
                    51:e7:4a:70:7d:7d:bf:e7:f4:8a:d2:2e:cf:40:b3:
                    f0:ea:cc:54:6b:eb:eb:3a:73:fd:16:c8:aa:f0:c3:
                    59:0f:96:ce:ce:26:ea:0a:fc:af:5b:4c:d8:89:71:
                    9c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:11:BB:84:7C:E2:33:BB:9D:AE:6B:CF:31:BD:BC:C1:03:D9:74:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2ba165c-e277-329b-86bc-33bc5fc5865c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:151::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:06:a9:3b:82:c4:0a:fd:9f:22:62:a5:cd:46:6b:e4:7d:90:
         82:b4:a4:41:9b:02:09:2a:b3:87:0c:8f:75:70:8c:aa:31:f8:
         7e:5a:6d:43:59:01:7c:f3:5c:68:4b:85:c6:71:0c:82:e7:90:
         5f:af:17:46:af:e1:f9:1b:9b:f4:50:b6:1c:d8:34:8c:90:1f:
         76:db:df:99:21:ec:b4:7d:da:a3:c1:58:65:45:a6:26:a6:ac:
         ef:35:33:6c:8e:b6:70:3f:f0:5b:1d:7e:87:88:46:26:92:bd:
         a9:0d:ff:64:cd:5d:aa:e9:10:31:96:39:f9:43:c5:0e:b6:eb:
         3d:d3:4f:8f:c1:a5:a2:cd:e1:f7:fc:9c:e9:dc:48:02:49:8e:
         52:06:64:d5:eb:46:e1:fa:d9:db:2d:62:26:86:cd:1b:e9:a3:
         f0:1c:02:0f:b2:4c:b8:b7:0d:14:fa:2f:a4:49:f3:8b:48:d7:
         cb:cd:38:51:26:ab:01:39:6e:4f:13:02:ab:48:c0:1c:78:cf:
         21:60:75:c9:da:0a:1b:f7:f7:5d:73:ce:ca:93:0c:8b:e4:94:
         0d:b2:6e:3e:fc:b0:48:94:a0:3b:05:86:e3:e7:85:01:ae:3d:
         dc:b2:9c:2a:69:81:11:56:a2:54:5e:3c:e9:d6:72:71:ee:13:
         df:ca:87:17
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEKZUqkmtqJBnihc+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDcxODEyMDAwMFoXDTI0MDExOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZGYzNmMxOWEtMmZhOC00NjIxLWI5MmQtNGEwZDhiNGEwMjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf0xKhjfXVwh4qay+ZAKHrHoV0ZgXzUMrv4h
TXg5J70H1ep+gV0fjXe0XE5u+PSWsWJr4xMkCMKwuo04ODRlderrxIqhPb3Qu6tV
qsI5LBs8lj6lMh+2/TP9DlVuK1AHAJ0pK3SXoAl4HHhr3DxXAwHangVlfp1kvdFN
xvJz/1ElyXjP3w6HXsvoqlubkg1ecJ6QgpBSwaOGWUcRS5yvGaMHZZmHAaIZKabE
2L+Nn5Y6CloBuAcEBNmkTl07OflgwvZCQCuaU+KLIWxNCYb+uMVR50pwfX2/5/SK
0i7PQLPw6sxUa+vrOnP9Fsiq8MNZD5bOzibqCvyvW0zYiXGcgQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLgRu4R84jO7na5rzzG9vMED2XTRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzJiYTE2NWMtZTI3Ny0z
MjliLTg2YmMtMzNiYzVmYzU4NjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKIGqTuCxAr9nyJipc1Ga+R9kIK0pEGbAgkqs4cMj3VwjKox+H5a
bUNZAXzzXGhLhcZxDILnkF+vF0av4fkbm/RQthzYNIyQH3bb35kh7LR92qPBWGVF
piamrO81M2yOtnA/8FsdfoeIRiaSvakN/2TNXarpEDGWOflDxQ626z3TT4/BpaLN
4ff8nOncSAJJjlIGZNXrRuH62dstYiaGzRvpo/AcAg+yTLi3DRT6L6RJ84tI18vN
OFEmqwE5bk8TAqtIwBx4zyFgdcnaChv3911zzsqTDIvklA2ybj78sEiUoDsFhuPn
hQGuPdyynCppgRFWolRePOnWcnHuE9/Khxc=
-----END CERTIFICATE-----