Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c315cd3e-ea34-3d0f-913f-60b9d658158f.roa
File:                     c315cd3e-ea34-3d0f-913f-60b9d658158f.roa (raw, json)
Hash identifier:          /SV7Bg54NSjtqQR6mTNPHsdfCenAG8v/YcQdDDh5EVc=
Subject key identifier:   FB:2F:19:61:14:CD:EA:B2:BE:DC:23:FE:F3:00:0E:33:49:90:96:8F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285841B7311002905410F15353BA20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c315cd3e-ea34-3d0f-913f-60b9d658158f.roa
Signing time:             Fri 28 Apr 2023 12:00:00 +0000
ROA not before:           Fri 28 Apr 2023 12:00:00 +0000
ROA not after:            Sun 29 Oct 2023 04:00:00 +0000
asID:                     49603
IP address blocks:        2001:470:7e::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:b7:31:10:02:90:54:10:f1:53:53:ba:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 28 12:00:00 2023 GMT
            Not After : Oct 29 04:00:00 2023 GMT
        Subject: CN=ba593909-ddfa-4c15-9ef3-afe6b793d42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c1:51:62:cf:68:e6:70:90:5b:57:af:47:90:
                    99:d2:1d:62:d7:8e:0a:b3:a2:e0:07:94:51:8d:ef:
                    df:20:ba:64:cb:00:28:2c:6a:82:6b:53:6b:59:ab:
                    de:41:36:37:7a:bb:d2:ad:9f:25:f0:8c:f2:5f:5c:
                    a2:19:62:c3:de:0a:62:63:03:24:ce:b8:b8:ea:1f:
                    5d:67:90:3c:78:51:db:4a:5c:e9:51:c7:5b:a0:72:
                    f1:43:76:73:c4:84:d5:df:74:02:f2:ec:8f:8f:3d:
                    17:b0:3a:3a:82:a5:36:4d:0d:90:c2:ad:2e:6f:6f:
                    e6:da:6e:60:7d:b6:d0:68:5e:73:dc:82:51:f0:22:
                    a6:0d:d9:0a:1d:4a:d7:e2:98:fb:bb:4f:36:8a:99:
                    b9:9e:e4:09:e7:5c:62:fe:8b:66:67:7c:cf:6d:d9:
                    ec:3f:36:da:6f:07:44:d8:8c:33:72:7f:30:33:00:
                    dc:31:d9:d4:e9:a5:25:58:f0:fa:fa:1d:b7:8a:64:
                    dc:15:9e:cd:28:81:d2:5a:77:b7:c7:32:e1:18:ca:
                    11:c9:40:51:37:04:85:f8:88:df:99:56:c9:01:e4:
                    8f:fd:c9:48:4c:29:12:01:cf:73:44:32:1e:1b:d4:
                    c0:98:b8:a3:f9:01:8c:18:65:f1:41:4b:32:a5:b0:
                    76:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2F:19:61:14:CD:EA:B2:BE:DC:23:FE:F3:00:0E:33:49:90:96:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c315cd3e-ea34-3d0f-913f-60b9d658158f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:7e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:f2:8e:4a:6c:80:22:59:b1:b9:2c:b3:30:a8:b2:dc:9f:ea:
         cd:ce:36:f1:57:74:01:c1:ff:fc:a7:e2:60:0d:42:46:13:a2:
         ea:af:d9:4c:46:28:e8:2e:dc:f6:d1:09:75:a3:55:b0:38:16:
         e8:2b:4d:67:f5:75:f1:95:54:43:b0:d7:61:d3:5a:ac:c5:d7:
         1d:a1:79:b2:7f:1c:e3:f7:56:d5:49:0c:74:6f:ea:6d:93:24:
         1a:48:23:16:f4:71:fd:a1:d2:a5:66:b3:9a:79:d4:f7:6e:d1:
         d6:95:8e:99:42:bd:1b:e0:91:df:31:49:46:08:9d:d7:66:64:
         ac:7c:55:a8:55:78:e9:8f:66:64:9f:1d:75:ad:06:2a:3a:e9:
         a0:85:7a:ef:20:c2:68:5e:84:94:1d:a0:b1:97:ca:9d:5b:cb:
         b4:44:75:c8:91:49:bc:f7:a8:ce:08:24:3e:ea:52:79:22:b4:
         a7:b6:71:e6:b3:45:15:ab:cf:10:f2:ed:94:cc:c1:c9:61:ff:
         85:cb:bc:ac:30:13:7a:23:1f:93:46:d4:b3:3a:09:54:38:8e:
         3a:3c:2f:5a:e2:8c:7e:7c:0d:60:b4:5a:8d:82:15:fa:60:20:
         f2:5d:d1:5e:15:15:03:bd:44:d5:e1:15:f4:5d:b0:2a:30:3f:
         60:30:fc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----