Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e18ed948-e26b-33b5-b6ce-50539d6747c3.roa
File:                     e18ed948-e26b-33b5-b6ce-50539d6747c3.roa (raw, json)
Hash identifier:          a67tA6s3Fkt4i509M9usOz6LQVStqmDUy0hFh6Ev2sY=
Subject key identifier:   E3:23:A3:BF:96:DB:1D:C7:58:7D:0A:2D:DD:D2:12:F1:59:81:E1:7B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D7935C2137687A4A0EB10EA80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e18ed948-e26b-33b5-b6ce-50539d6747c3.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     33097
IP address blocks:        2001:470:2c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:35:c2:13:76:87:a4:a0:eb:10:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=3a271b8a-b748-47a9-8e51-bd794ad14121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0f:45:4a:75:d5:e3:4f:5c:f1:ea:05:22:30:
                    8d:45:92:c3:e4:45:ab:e4:b1:59:63:2f:c3:1a:15:
                    9d:f1:8e:c9:b5:b2:07:b0:96:3a:ab:cf:7b:ec:64:
                    b7:7c:41:21:6c:9d:fa:db:ee:d0:ae:fa:a7:28:51:
                    7f:8e:55:19:25:df:a1:3b:45:21:8e:7d:45:bc:ef:
                    26:13:8d:da:f3:45:0a:ea:40:cb:02:c7:75:92:ee:
                    01:c8:7f:f4:cb:91:ca:08:e4:8d:30:ea:18:42:ba:
                    6d:00:4e:b2:8f:a6:49:69:35:d4:61:00:f4:41:61:
                    a5:cf:f8:15:3c:14:62:f9:f5:e2:14:2d:a3:33:52:
                    e0:1f:82:3d:c4:94:3a:c8:fc:9a:b1:08:55:1d:86:
                    a2:5c:7e:39:55:ab:56:65:45:ab:1a:45:ae:82:1e:
                    01:f7:e8:9e:de:e8:19:ff:db:da:63:b4:d1:16:66:
                    2d:cf:e6:47:24:32:2a:82:3e:f2:4c:f9:37:7c:ce:
                    14:e8:fd:a2:39:4e:de:7b:b8:60:c1:4e:f2:74:c7:
                    db:fa:1b:01:7b:07:00:e2:f7:f6:f6:01:ea:64:7b:
                    a3:a4:13:12:a6:34:65:e4:4b:a6:61:ae:ad:3e:39:
                    38:87:79:3c:f9:2b:c7:dd:14:8a:fd:bd:12:57:74:
                    f6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:23:A3:BF:96:DB:1D:C7:58:7D:0A:2D:DD:D2:12:F1:59:81:E1:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e18ed948-e26b-33b5-b6ce-50539d6747c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:8c:67:72:20:d3:64:d1:35:a5:6d:ca:38:09:41:19:91:8f:
         a9:79:dd:c2:49:20:4b:48:98:65:f3:1a:e5:c3:94:23:cd:89:
         1e:78:4c:7b:46:a4:31:f3:31:75:85:d5:6e:07:05:7e:bc:37:
         cc:d3:e2:b7:88:c9:bf:db:61:6f:df:0c:c4:3c:bd:26:76:c8:
         47:81:68:1f:c1:bb:c7:c2:fa:6e:02:42:e8:09:d9:d7:12:24:
         40:60:86:2b:86:e6:ae:42:d0:ca:8f:53:3f:93:6d:d9:65:3d:
         eb:00:59:81:da:20:5a:50:5b:32:2e:87:f4:6c:04:ec:20:48:
         b3:5e:4a:b3:6e:85:56:7d:d0:c4:27:cb:bf:7d:c8:78:66:ea:
         97:b4:e1:76:54:32:c1:2a:b6:dc:3c:85:0f:1c:52:80:66:82:
         76:f1:83:e6:c6:7b:bd:6e:91:ba:0e:71:7a:7e:e8:31:b5:98:
         10:0d:be:80:f1:cb:11:3e:fa:8b:97:b3:ae:ff:05:6c:6d:9c:
         ed:b8:92:c9:06:98:9b:d8:e0:16:88:96:78:94:c2:ae:d8:12:
         c9:b0:3b:47:52:c1:a1:4b:bd:3a:9c:76:73:6e:88:0b:12:95:
         1f:60:4a:c6:0b:48:1d:79:f6:66:95:13:96:74:40:c2:ae:e8:
         ba:fa:51:e8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD15NcITdoekoOsQ6oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDQwNTA0MDAwMFoXDTIyMTAwNTA0MDAwMFowLzEtMCsGA1UEAxMk
M2EyNzFiOGEtYjc0OC00N2E5LThlNTEtYmQ3OTRhZDE0MTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ9FSnXV409c8eoFIjCNRZLD5EWr5LFZYy/D
GhWd8Y7JtbIHsJY6q8977GS3fEEhbJ362+7QrvqnKFF/jlUZJd+hO0Uhjn1FvO8m
E43a80UK6kDLAsd1ku4ByH/0y5HKCOSNMOoYQrptAE6yj6ZJaTXUYQD0QWGlz/gV
PBRi+fXiFC2jM1LgH4I9xJQ6yPyasQhVHYaiXH45VatWZUWrGkWugh4B9+ie3ugZ
/9vaY7TRFmYtz+ZHJDIqgj7yTPk3fM4U6P2iOU7ee7hgwU7ydMfb+hsBewcA4vf2
9gHqZHujpBMSpjRl5EumYa6tPjk4h3k8+SvH3RSK/b0SV3T2gQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOMjo7+W2x3HWH0KLd3SEvFZgeF7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTE4ZWQ5NDgtZTI2Yi0z
M2I1LWI2Y2UtNTA1MzlkNjc0N2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE6MZ3Ig02TRNaVtyjgJQRmRj6l53cJJIEtImGXzGuXDlCPNiR54
THtGpDHzMXWF1W4HBX68N8zT4reIyb/bYW/fDMQ8vSZ2yEeBaB/Bu8fC+m4CQugJ
2dcSJEBghiuG5q5C0MqPUz+TbdllPesAWYHaIFpQWzIuh/RsBOwgSLNeSrNuhVZ9
0MQny799yHhm6pe04XZUMsEqttw8hQ8cUoBmgnbxg+bGe71ukboOcXp+6DG1mBAN
voDxyxE++ouXs67/BWxtnO24kskGmJvY4BaIlniUwq7YEsmwO0dSwaFLvTqcdnNu
iAsSlR9gSsYLSB159maVE5Z0QMKu6Lr6Ueg=
-----END CERTIFICATE-----