Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e7075d21-2bba-3cb9-8373-e182ecd79d23.roa
File:                     e7075d21-2bba-3cb9-8373-e182ecd79d23.roa (raw, json)
Hash identifier:          tA3EucKGjEsY1QjxsjNBdaTzg99Uc4P8qmhFXIJM77U=
Subject key identifier:   E0:C7:21:DA:D9:57:F3:38:35:70:62:9C:35:C5:A1:2A:EC:6E:0A:E8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583C850BED8F02E9AB020417E080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e7075d21-2bba-3cb9-8373-e182ecd79d23.roa
Signing time:             Fri 07 Jan 2022 05:00:00 +0000
ROA not before:           Fri 07 Jan 2022 05:00:00 +0000
ROA not after:            Thu 07 Jul 2022 04:00:00 +0000
asID:                     393737
IP address blocks:        2001:470:d1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:85:0b:ed:8f:02:e9:ab:02:04:17:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan  7 05:00:00 2022 GMT
            Not After : Jul  7 04:00:00 2022 GMT
        Subject: CN=2a945f72-c69d-488a-bdcf-c7562b7842a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:09:ba:6c:0e:9d:a1:c1:d2:ab:20:c3:34:b7:
                    f6:5f:32:86:6d:df:99:52:07:d1:ac:e7:98:5f:43:
                    3c:1f:61:12:1e:d4:97:5b:91:39:3a:b3:d1:15:77:
                    e3:59:16:ea:fa:2a:ae:d2:33:27:fc:c8:ef:87:ea:
                    95:6b:2a:22:e8:0e:c3:47:a8:20:f2:69:09:29:d1:
                    fc:6b:24:eb:dc:b9:07:fd:1d:f9:00:ca:52:2e:8a:
                    90:2f:e0:9a:28:a2:46:d9:d7:37:23:35:f2:3f:74:
                    99:56:d9:7c:e7:74:f7:53:b1:b6:86:9c:18:28:67:
                    8a:49:56:6e:c4:71:1b:aa:dd:e3:66:58:67:0e:63:
                    f6:ef:a9:b5:9f:02:43:78:d1:3e:64:14:49:a1:91:
                    83:b6:34:40:5d:6e:04:fd:ab:d6:00:1a:50:12:62:
                    70:fe:5b:22:22:d1:4e:db:fd:3e:75:de:23:88:7d:
                    cf:69:5c:3b:f7:da:7d:96:9f:d7:b3:19:38:71:a9:
                    ff:ae:c9:36:30:44:c8:ef:cc:86:6c:97:8c:e4:3b:
                    72:29:64:64:40:a8:e5:25:63:94:cf:03:57:49:ed:
                    7b:e0:0b:ac:9e:a7:61:05:f6:3a:e3:7f:f5:a4:13:
                    47:ef:0b:ce:74:d2:f6:1b:b0:d8:f0:07:d0:26:8e:
                    17:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C7:21:DA:D9:57:F3:38:35:70:62:9C:35:C5:A1:2A:EC:6E:0A:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e7075d21-2bba-3cb9-8373-e182ecd79d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:d1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c9:ea:94:de:58:82:2b:0a:f3:b9:15:fb:bb:9f:7c:86:b2:
         e0:c8:29:66:e2:ab:e3:45:7d:0f:46:ca:34:f3:56:20:ba:54:
         ef:4f:87:ed:30:bb:d4:5d:8b:79:46:6f:4b:d2:02:a0:e4:d3:
         95:59:a2:62:31:8a:45:f3:72:17:da:3c:a8:f3:b5:f8:db:06:
         83:ec:92:30:99:5a:fb:94:bd:37:bc:29:ef:07:1c:81:df:65:
         96:64:1b:4c:c8:25:fe:e4:84:64:71:a8:3c:1c:69:49:94:f8:
         71:a5:07:2d:5a:de:e1:73:ba:dd:c1:5b:7e:62:74:97:e1:03:
         8b:6e:a0:f8:eb:00:5b:2c:71:21:5d:d8:96:26:e4:a8:4e:38:
         54:b8:22:49:8a:61:69:99:a4:64:26:29:29:a1:b1:28:68:ec:
         a7:32:f2:f5:c5:68:e7:39:cd:ef:c4:f4:14:8f:51:c4:be:0f:
         9f:dd:d9:18:2e:71:9a:72:b1:53:b8:24:2a:2e:01:74:1f:8a:
         63:56:b2:ea:35:ec:fe:35:b2:ee:b3:19:8b:bd:e0:25:65:b5:
         34:53:98:50:24:6e:9a:43:c7:24:ee:c0:5c:25:aa:53:52:e5:
         d7:dd:89:e3:b7:1e:6d:f2:f6:b7:ab:89:8a:2a:11:e5:a2:ba:
         1d:aa:aa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----