Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d522d13a-79c4-3218-98cc-377b5578b6ba.roa
File:                     d522d13a-79c4-3218-98cc-377b5578b6ba.roa (raw, json)
Hash identifier:          dui1GJMSeXAEW/03iCxOrqkV4vgeOvZEOGnsuUcrJ78=
Subject key identifier:   F1:22:C4:EC:21:9D:A3:46:DD:A0:88:CA:CF:F7:15:59:6C:B7:58:7E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648E6BC259799CFABCC2AA00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d522d13a-79c4-3218-98cc-377b5578b6ba.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     396841
IP address blocks:        2001:470:d9::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:6b:c2:59:79:9c:fa:bc:c2:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=3ffd431d-15b8-430d-8ef8-883f1995adaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3c:12:95:4f:5a:d3:89:42:ac:98:59:7b:a3:
                    11:2e:c6:df:6e:31:99:7c:aa:45:cd:5e:96:26:4a:
                    9b:52:0d:51:38:c5:e8:b4:60:5d:1d:1b:ec:c5:26:
                    f0:87:b5:c8:80:98:b4:a1:e8:16:81:8d:12:86:9c:
                    8b:62:7f:3d:f1:24:ad:f8:24:7a:8d:c5:aa:af:50:
                    a7:2a:c2:05:95:c3:5e:62:6c:3c:9c:78:6f:95:06:
                    91:7e:e2:10:1e:09:8f:80:f2:ae:0f:35:ef:d0:96:
                    c6:d0:4a:97:c3:59:56:c8:ed:bc:6f:12:8e:54:2a:
                    d0:43:60:5c:80:3e:18:5f:1d:b3:2e:a6:21:70:4a:
                    74:0f:f8:e6:b4:2c:8e:b5:e7:8a:fa:b5:4a:07:1b:
                    4b:af:13:01:9b:cf:c8:1a:0b:51:08:13:0a:98:b5:
                    79:f6:42:29:dd:2d:a7:04:7e:fe:ad:f9:fc:7c:f1:
                    28:b1:bd:18:37:05:1b:9a:81:1f:48:46:30:15:8f:
                    6e:4c:7e:5c:5e:eb:86:50:50:ce:9b:71:3e:45:1b:
                    c6:81:d1:6b:91:ba:d4:dd:3f:5f:77:bf:cc:84:1c:
                    0a:67:eb:a4:1d:d0:e3:f9:c9:c3:44:4b:bd:ca:e4:
                    eb:5c:59:07:83:a9:bc:a9:c5:46:5e:ec:c6:f1:eb:
                    35:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:22:C4:EC:21:9D:A3:46:DD:A0:88:CA:CF:F7:15:59:6C:B7:58:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d522d13a-79c4-3218-98cc-377b5578b6ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:d9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:8e:b5:31:1b:f1:34:df:7f:7c:a6:56:bf:47:a8:32:75:6f:
         4b:e4:75:37:5e:d1:62:af:29:c5:a6:60:39:eb:10:9f:37:e0:
         55:dc:c1:a9:7c:2d:3c:64:c6:83:b0:66:b2:42:9f:5d:ad:81:
         f2:f7:03:af:ac:c7:87:c1:ec:a0:28:6f:69:47:77:5d:c2:98:
         42:0c:b5:69:8b:17:3c:2c:d4:85:ca:82:47:38:fd:ba:5a:25:
         13:1f:3c:49:96:2b:f7:63:7a:a2:dd:39:75:da:ea:aa:94:cf:
         70:bc:25:c0:46:6d:f6:f6:e0:c2:db:17:c7:ce:86:22:83:a7:
         1f:25:88:63:87:94:48:07:e7:04:30:4f:be:2f:f9:ae:f1:83:
         06:c7:c8:06:f7:1d:c8:6a:7f:60:97:b9:ec:3c:a5:15:c8:e1:
         0c:f1:dd:d9:6c:52:31:eb:5e:cd:4f:ca:1d:cc:3f:23:f9:27:
         20:b1:ec:7c:ff:a9:73:4f:da:4b:ca:33:30:ed:8f:b1:45:57:
         17:bb:df:dd:bf:91:80:12:fa:43:80:f6:c1:2f:e2:c6:e4:2f:
         b7:aa:1f:ab:0e:c6:58:48:49:76:81:a5:c1:de:a8:74:b9:3f:
         28:10:f6:c0:13:8e:38:60:b4:23:ed:f9:4b:77:ba:18:9c:ea:
         e8:da:eb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----