Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d2f24210-882c-3c35-a7e4-3ce2de40b998.roa
File:                     d2f24210-882c-3c35-a7e4-3ce2de40b998.roa (raw, json)
Hash identifier:          8ghQYIUgO9yh5LhAikKN6u7si6FeT7GqaA4oxwZjkPQ=
Subject key identifier:   6A:F8:3F:35:86:1C:92:9C:83:3A:93:A0:69:A0:50:DA:9C:95:9E:57
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A5121E67697287E000F8950
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d2f24210-882c-3c35-a7e4-3ce2de40b998.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     393667
IP address blocks:        2001:470:af::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:51:21:e6:76:97:28:7e:00:0f:89:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=42ca9bfc-aad9-4997-9621-347ecfe05b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:09:ae:17:df:1b:62:44:18:18:ad:56:68:dc:
                    f9:72:50:ae:2e:bf:4c:53:e3:59:e1:7f:03:81:93:
                    6c:5b:df:88:b2:01:12:a2:56:4b:b7:98:a9:80:f2:
                    09:06:a3:b0:06:ae:79:d8:b0:0d:08:56:6e:17:70:
                    5c:9c:a7:6d:16:30:9b:7e:5d:25:4c:3d:2e:f3:45:
                    0e:25:eb:e2:9e:fa:49:a1:7f:68:5d:fc:51:b9:04:
                    87:9a:b7:5a:ef:64:ef:5f:43:81:21:ad:9c:8d:f6:
                    e1:bd:29:b7:ab:e5:65:0c:72:e3:14:2c:42:84:44:
                    62:58:be:21:9c:5b:87:2e:5a:a4:a1:27:b1:07:9a:
                    77:47:5c:22:b3:2a:2c:a7:e4:32:af:f1:c8:64:7f:
                    6a:ce:fc:7e:05:1f:5d:74:7b:3a:0a:36:a7:6d:ec:
                    52:42:1c:31:0d:c1:65:cf:5d:88:5d:f9:85:32:e1:
                    82:2d:93:f3:b1:4c:86:c5:99:4c:48:a3:96:b6:dd:
                    cc:7b:37:77:e5:b5:90:a8:29:3c:58:ae:3a:18:d3:
                    fc:60:99:30:b4:72:58:c7:38:25:d3:64:18:d0:e9:
                    9e:0b:91:f0:ff:bd:e0:98:13:9e:61:e9:47:14:24:
                    82:99:44:b9:a9:a6:ea:7c:fa:e5:cd:a7:fc:14:52:
                    5b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F8:3F:35:86:1C:92:9C:83:3A:93:A0:69:A0:50:DA:9C:95:9E:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d2f24210-882c-3c35-a7e4-3ce2de40b998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:af::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:2e:ae:75:95:ff:a3:c8:af:a5:27:68:25:b3:12:9d:6a:e1:
         16:7a:34:f5:55:e9:38:32:6f:a8:68:e6:39:45:8a:5b:ec:9e:
         a0:52:1d:aa:c8:a7:a0:a7:be:4f:b9:95:ef:5f:3b:83:c4:be:
         08:bd:2d:32:ad:f2:74:1b:7f:47:f3:85:79:37:8e:02:e3:28:
         16:35:1f:38:b9:fe:48:b4:6b:b4:ea:50:89:4a:91:36:f0:0d:
         02:2b:7a:ce:f5:0d:f8:5b:ad:60:39:f1:fd:0b:70:9f:af:ba:
         c9:ce:7d:84:bd:61:2c:e0:1b:c3:f1:ed:6e:6f:ad:28:24:2f:
         fe:ff:be:75:44:ac:80:78:0b:0f:f7:80:dc:21:01:53:ca:00:
         b0:0a:e5:b5:22:db:44:07:03:ac:45:95:6d:75:4c:26:ef:19:
         a8:30:68:09:33:ae:0a:04:a6:47:14:9d:02:56:37:4f:f7:2c:
         8c:81:f5:47:0d:d1:f9:53:19:26:b2:f8:fe:5c:67:41:22:42:
         e2:c2:7d:0b:06:62:52:39:c3:89:47:c2:58:52:a8:3d:23:3a:
         48:0f:ad:12:7d:c7:53:e6:e4:07:54:96:f2:a3:45:f7:36:e9:
         53:b6:84:6c:f2:23:98:25:11:0c:eb:45:9f:80:e8:5b:55:aa:
         c5:e0:ec:11
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEFKUSHmdpcofgAPiVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
NDJjYTliZmMtYWFkOS00OTk3LTk2MjEtMzQ3ZWNmZTA1YjZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAmuF98bYkQYGK1WaNz5clCuLr9MU+NZ4X8D
gZNsW9+IsgESolZLt5ipgPIJBqOwBq552LANCFZuF3BcnKdtFjCbfl0lTD0u80UO
JevinvpJoX9oXfxRuQSHmrda72TvX0OBIa2cjfbhvSm3q+VlDHLjFCxChERiWL4h
nFuHLlqkoSexB5p3R1wisyosp+Qyr/HIZH9qzvx+BR9ddHs6CjanbexSQhwxDcFl
z12IXfmFMuGCLZPzsUyGxZlMSKOWtt3Mezd35bWQqCk8WK46GNP8YJkwtHJYxzgl
02QY0OmeC5Hw/73gmBOeYelHFCSCmUS5qabqfPrlzaf8FFJb6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGr4PzWGHJKcgzqToGmgUNqclZ5XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDJmMjQyMTAtODgyYy0z
YzM1LWE3ZTQtM2NlMmRlNDBiOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACv
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG4urnWV/6PIr6UnaCWzEp1q4RZ6NPVV6Tgyb6ho5jlFilvsnqBS
HarIp6Cnvk+5le9fO4PEvgi9LTKt8nQbf0fzhXk3jgLjKBY1Hzi5/ki0a7TqUIlK
kTbwDQIres71DfhbrWA58f0LcJ+vusnOfYS9YSzgG8Px7W5vrSgkL/7/vnVErIB4
Cw/3gNwhAVPKALAK5bUi20QHA6xFlW11TCbvGagwaAkzrgoEpkcUnQJWN0/3LIyB
9UcN0flTGSay+P5cZ0EiQuLCfQsGYlI5w4lHwlhSqD0jOkgPrRJ9x1Pm5AdUlvKj
Rfc26VO2hGzyI5glEQzrRZ+A6FtVqsXg7BE=
-----END CERTIFICATE-----