Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8c13f51-e1d8-3ca7-ba41-b12207b0bbb0.roa
File:                     d8c13f51-e1d8-3ca7-ba41-b12207b0bbb0.roa (raw, json)
Hash identifier:          UpSgndmbmUt9UcInCRh+gug6opDjw10ctX3n1YcGSoE=
Subject key identifier:   1C:CD:C9:AB:36:7E:52:AD:A4:54:B0:2B:D8:98:C4:FC:9D:0C:26:E8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D7935C8CB912F7C9BF0D6E600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8c13f51-e1d8-3ca7-ba41-b12207b0bbb0.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     26073
IP address blocks:        2001:470:130::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:35:c8:cb:91:2f:7c:9b:f0:d6:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=0c7ee4f2-86c3-4daf-ae6f-d3a34683eb94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d4:fc:85:0b:cd:b6:b5:c4:38:f0:59:b2:cb:
                    90:ab:c8:24:49:c8:30:14:66:26:6d:fc:56:7e:46:
                    3f:59:b5:a4:93:f8:56:9e:7c:0d:da:94:35:22:f3:
                    83:83:e4:fe:12:28:b3:06:aa:59:bf:6e:74:97:49:
                    b3:1e:e2:87:18:b6:6a:30:35:d6:fd:9b:9e:e7:2c:
                    e9:5e:d1:09:a8:08:8f:b0:db:ff:40:32:e7:09:3b:
                    b7:b6:2f:b1:c9:45:1e:67:b5:55:db:8e:42:bf:c5:
                    0d:de:10:a8:50:b6:7e:46:d8:eb:8d:06:b7:30:75:
                    c1:bd:62:b4:12:be:b7:2d:3b:bd:00:eb:bb:03:43:
                    1e:01:24:c7:5f:14:dd:28:cb:0e:5b:20:ba:27:e6:
                    31:94:9b:36:99:7f:1a:6c:11:16:ce:b1:f5:6d:94:
                    09:fd:61:10:02:a6:4c:c8:e3:0c:22:61:3e:d0:e6:
                    ef:6d:fb:98:cc:5c:d2:d2:1b:ce:12:f4:57:83:b0:
                    16:6a:36:ff:34:35:47:5c:3e:99:5b:26:fd:a5:c5:
                    f5:e5:11:14:22:2a:66:23:00:cb:50:3a:79:c7:be:
                    3c:9c:0e:d8:c9:b1:77:32:5a:d6:e3:64:d9:e3:04:
                    35:70:24:f8:d2:61:de:c3:9d:09:b3:1b:0f:f1:1f:
                    36:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CD:C9:AB:36:7E:52:AD:A4:54:B0:2B:D8:98:C4:FC:9D:0C:26:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8c13f51-e1d8-3ca7-ba41-b12207b0bbb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:130::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:55:5e:c3:f9:6f:3a:03:ab:9a:6f:dd:6d:46:fb:85:de:63:
         37:b1:a0:fb:1c:90:db:f6:e8:98:9c:6a:0b:ac:41:0e:86:57:
         a6:1b:e6:48:2e:a1:f8:01:3c:35:1f:6c:21:31:f4:13:ca:85:
         97:eb:5c:d2:14:91:c2:ec:8b:5c:9d:bf:a2:26:ea:c6:68:2b:
         f1:b4:0b:03:fd:d0:80:50:40:df:bf:b3:c1:bf:92:ba:b5:bf:
         54:c5:45:c6:4b:ff:d8:dc:39:81:6c:0e:5c:15:7f:b9:0e:3a:
         86:62:81:39:2d:14:be:da:ce:2e:33:c3:b0:01:34:4c:df:c5:
         02:54:1d:49:8d:12:9d:9f:bb:0a:14:75:50:65:b8:ec:80:91:
         73:3a:83:63:d7:46:e8:59:ba:00:02:02:4c:dc:0e:56:9c:82:
         da:67:2a:ad:bf:aa:e3:1d:c5:29:73:f5:47:c1:dd:fb:bc:6a:
         94:89:b7:fc:c2:41:91:65:da:59:15:a2:26:70:75:68:88:ad:
         6a:7a:b0:64:3b:ff:3f:d4:31:d7:7f:e3:60:33:1a:a6:16:0b:
         a6:7d:b7:d8:23:e3:0d:4f:da:b5:c0:5d:40:1e:0f:c4:fa:e6:
         07:c0:06:8b:95:6e:a6:6d:44:6e:bc:b5:cb:15:6a:d1:a6:97:
         fe:a6:da:ee
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD15NcjLkS98m/DW5gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDQwNTA0MDAwMFoXDTIyMTAwNTA0MDAwMFowLzEtMCsGA1UEAxMk
MGM3ZWU0ZjItODZjMy00ZGFmLWFlNmYtZDNhMzQ2ODNlYjk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NT8hQvNtrXEOPBZssuQq8gkScgwFGYmbfxW
fkY/WbWkk/hWnnwN2pQ1IvODg+T+EiizBqpZv250l0mzHuKHGLZqMDXW/Zue5yzp
XtEJqAiPsNv/QDLnCTu3ti+xyUUeZ7VV245Cv8UN3hCoULZ+RtjrjQa3MHXBvWK0
Er63LTu9AOu7A0MeASTHXxTdKMsOWyC6J+YxlJs2mX8abBEWzrH1bZQJ/WEQAqZM
yOMMImE+0ObvbfuYzFzS0hvOEvRXg7AWajb/NDVHXD6ZWyb9pcX15REUIipmIwDL
UDp5x748nA7YybF3MlrW42TZ4wQ1cCT40mHew50JsxsP8R82tQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBzNyas2flKtpFSwK9iYxPydDCboMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDhjMTNmNTEtZTFkOC0z
Y2E3LWJhNDEtYjEyMjA3YjBiYmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABlVXsP5bzoDq5pv3W1G+4XeYzexoPsckNv26JicagusQQ6GV6Yb
5kguofgBPDUfbCEx9BPKhZfrXNIUkcLsi1ydv6Im6sZoK/G0CwP90IBQQN+/s8G/
krq1v1TFRcZL/9jcOYFsDlwVf7kOOoZigTktFL7azi4zw7ABNEzfxQJUHUmNEp2f
uwoUdVBluOyAkXM6g2PXRuhZugACAkzcDlacgtpnKq2/quMdxSlz9UfB3fu8apSJ
t/zCQZFl2lkVoiZwdWiIrWp6sGQ7/z/UMdd/42AzGqYWC6Z9t9gj4w1P2rXAXUAe
D8T65gfABouVbqZtRG68tcsVatGml/6m2u4=
-----END CERTIFICATE-----