Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8b511e8-6ad7-319b-b815-a8f953fe70f6.roa
File:                     c8b511e8-6ad7-319b-b815-a8f953fe70f6.roa (raw, json)
Hash identifier:          X+LuLQSGZ6SY1lILmiHxZoLg1cBmrvVyZsQi4259i5U=
Subject key identifier:   BB:83:26:25:E7:2B:64:3B:5C:01:39:46:82:5C:35:B9:15:FD:69:FF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648E7881CD63BFA38165C480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8b511e8-6ad7-319b-b815-a8f953fe70f6.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     40862
IP address blocks:        2001:470:9d::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:78:81:cd:63:bf:a3:81:65:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=ea7a9917-e242-4cfb-b5cc-e8004027b695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b6:10:eb:00:56:05:bf:bc:42:1b:70:d7:a8:
                    e4:75:b0:57:a5:2e:68:19:b4:04:c2:18:be:6c:37:
                    09:d5:f6:ea:98:3a:e2:9c:b9:d7:75:7f:f3:57:81:
                    c1:4e:66:52:e7:c6:59:3b:98:ff:d6:71:be:c6:17:
                    a6:eb:bf:54:9a:50:73:35:c9:15:5f:fe:69:8a:79:
                    50:c3:2c:2f:a1:57:07:9a:6d:4d:2f:98:32:14:b0:
                    7c:76:43:8e:6b:63:da:9f:c4:58:09:ce:d6:11:f6:
                    a0:6b:81:6c:20:83:6d:af:2b:7b:d7:d7:ee:89:db:
                    cd:b7:6f:be:fd:8e:bc:2e:bd:d7:03:74:a3:ba:a1:
                    77:80:f1:62:b0:88:4e:ed:bb:86:c1:73:cc:c1:73:
                    1e:09:4f:2f:34:38:79:76:5a:e6:a6:e7:02:f0:e0:
                    ad:bc:53:e5:d9:ae:55:f7:d9:42:e8:d7:42:37:f8:
                    92:b9:3c:f4:60:2e:1c:99:48:7c:c8:c5:13:17:52:
                    25:db:f6:f4:75:cd:06:ea:b5:a4:ad:ca:2b:a9:15:
                    2b:e3:fa:25:e5:f7:7a:39:64:1a:ae:c0:06:82:d5:
                    85:54:1a:85:9f:d3:d5:1b:6c:39:18:fd:b8:b2:0c:
                    af:46:ae:32:64:25:04:51:06:21:c1:24:4d:26:cb:
                    24:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:83:26:25:E7:2B:64:3B:5C:01:39:46:82:5C:35:B9:15:FD:69:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8b511e8-6ad7-319b-b815-a8f953fe70f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:9d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:73:ff:2b:63:1d:db:a0:f2:62:6c:ab:2a:03:fb:f5:44:28:
         1a:24:0f:e9:75:d6:52:86:ac:34:cd:2b:c9:b8:52:c4:1d:41:
         03:df:bc:cf:25:48:1d:b5:98:40:78:84:75:5f:97:90:39:a8:
         e9:ef:a8:83:80:1e:ca:ad:5a:dd:a5:3f:09:6a:45:60:41:d0:
         e2:d2:9b:2c:3d:e3:c5:10:47:0c:cd:03:6b:dc:41:1f:ae:9c:
         92:d1:2f:b9:8b:f3:e0:97:37:85:3a:21:fa:64:29:3b:30:a6:
         bc:ab:fc:d2:39:12:87:08:13:fb:ed:c3:c4:79:92:d2:90:38:
         01:f1:0b:10:33:fd:a8:f8:21:bd:49:72:2e:78:71:5c:9f:06:
         f4:f7:55:19:a2:3b:b6:1c:2b:ba:b6:06:d6:81:74:c4:cf:81:
         d2:ee:eb:3f:5e:ba:6e:8a:d7:c7:dd:72:ef:09:bb:e4:e7:6a:
         3c:c0:88:a3:7b:79:80:3a:76:1d:fe:b0:d2:16:ec:96:6b:ed:
         ea:66:95:03:d4:d0:4a:ef:57:41:0e:fe:cf:f0:18:17:0d:55:
         b6:a0:41:7f:f6:7e:9b:ab:1b:09:5d:7e:47:b8:9c:90:e4:d9:
         1c:62:89:d2:ee:71:ea:b8:f3:b3:9b:6c:08:28:be:14:6f:f6:
         e6:2f:83:ae
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD9kjniBzWO/o4FlxIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDkyNzEyMDAwMFoXDTIzMDMyODA0MDAwMFowLzEtMCsGA1UEAxMk
ZWE3YTk5MTctZTI0Mi00Y2ZiLWI1Y2MtZTgwMDQwMjdiNjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrYQ6wBWBb+8Qhtw16jkdbBXpS5oGbQEwhi+
bDcJ1fbqmDrinLnXdX/zV4HBTmZS58ZZO5j/1nG+xhem679UmlBzNckVX/5pinlQ
wywvoVcHmm1NL5gyFLB8dkOOa2Pan8RYCc7WEfaga4FsIINtryt719fuidvNt2++
/Y68Lr3XA3SjuqF3gPFisIhO7buGwXPMwXMeCU8vNDh5dlrmpucC8OCtvFPl2a5V
99lC6NdCN/iSuTz0YC4cmUh8yMUTF1Il2/b0dc0G6rWkrcorqRUr4/ol5fd6OWQa
rsAGgtWFVBqFn9PVG2w5GP24sgyvRq4yZCUEUQYhwSRNJssk+wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLuDJiXnK2Q7XAE5RoJcNbkV/Wn/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzhiNTExZTgtNmFkNy0z
MTliLWI4MTUtYThmOTUzZmU3MGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACd
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAItz/ytjHdug8mJsqyoD+/VEKBokD+l11lKGrDTNK8m4UsQdQQPf
vM8lSB21mEB4hHVfl5A5qOnvqIOAHsqtWt2lPwlqRWBB0OLSmyw948UQRwzNA2vc
QR+unJLRL7mL8+CXN4U6IfpkKTswpryr/NI5EocIE/vtw8R5ktKQOAHxCxAz/aj4
Ib1Jci54cVyfBvT3VRmiO7YcK7q2BtaBdMTPgdLu6z9eum6K18fdcu8Ju+TnajzA
iKN7eYA6dh3+sNIW7JZr7epmlQPU0ErvV0EO/s/wGBcNVbagQX/2fpurGwldfke4
nJDk2RxiidLuceq487ObbAgovhRv9uYvg64=
-----END CERTIFICATE-----