Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ea30638d-b141-3ef3-b371-287071e22548.roa
File:                     ea30638d-b141-3ef3-b371-287071e22548.roa (raw, json)
Hash identifier:          eqoJ89gONQ10rR+iNxJgLOHmbJk6W9BzB1JX4Jl6jqM=
Subject key identifier:   A0:9B:37:2C:D3:0B:7E:AA:06:4A:7E:C2:95:05:1E:3E:56:FA:CC:36
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F0E0233394DC9B8B826B85000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ea30638d-b141-3ef3-b371-287071e22548.roa
Signing time:             Sat 27 Aug 2022 12:00:00 +0000
ROA not before:           Sat 27 Aug 2022 12:00:00 +0000
ROA not after:            Tue 28 Feb 2023 05:00:00 +0000
asID:                     25948
IP address blocks:        2001:470:156::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:0e:02:33:39:4d:c9:b8:b8:26:b8:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 27 12:00:00 2022 GMT
            Not After : Feb 28 05:00:00 2023 GMT
        Subject: CN=fadc9e55-52d5-4d7c-9b7e-7bc06656c0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7a:63:e8:44:76:db:12:2c:37:8e:c8:a2:64:
                    d2:56:be:47:e8:1a:96:c0:98:44:a5:bc:e6:3a:ec:
                    43:c5:34:54:8d:92:ab:96:9e:cf:0f:06:75:75:d2:
                    9a:58:6b:1d:26:52:ae:9d:e9:ab:df:bc:d5:d7:0b:
                    46:a7:01:35:ab:50:f4:33:e9:ab:29:90:9e:21:e1:
                    11:5c:49:bc:ab:81:75:88:c5:21:16:3c:8d:6d:4a:
                    6e:07:f0:29:69:e9:cd:f0:3b:2b:02:11:48:39:cb:
                    30:99:f2:d1:7c:a9:8f:f1:d7:4e:e9:4a:db:66:e4:
                    f4:d2:ab:3e:0c:65:98:ca:c6:61:b0:f7:8a:52:12:
                    a4:0a:f4:0d:cb:aa:51:71:36:d8:95:fe:0f:47:36:
                    5c:fc:e6:10:0f:86:02:e0:f1:72:1e:46:64:f2:14:
                    fc:f2:f3:ac:a4:f9:29:8e:cc:fe:37:ff:c3:3d:ec:
                    ad:d9:80:06:ec:d9:27:27:f6:3b:b3:47:83:e2:15:
                    96:4c:4e:66:22:7b:84:3f:75:7b:dc:a0:19:83:8b:
                    84:ed:9d:0a:b4:c3:4b:41:db:9a:4e:13:ae:3c:82:
                    d2:26:1d:e4:fc:f2:a8:3c:80:f2:08:91:98:4b:28:
                    9b:3e:a0:1b:37:ef:ea:25:30:3b:cc:61:be:21:cc:
                    56:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9B:37:2C:D3:0B:7E:AA:06:4A:7E:C2:95:05:1E:3E:56:FA:CC:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ea30638d-b141-3ef3-b371-287071e22548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:156::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:1b:d1:01:5a:c6:a8:fc:cf:79:43:b0:ae:49:ab:9b:6a:7b:
         c2:1a:49:76:b3:84:28:af:fa:99:2e:0f:6e:a6:14:ec:ba:ad:
         09:d6:81:8c:3b:0a:4b:55:76:ee:71:0e:49:ba:a3:f8:b9:f1:
         85:5d:f9:6b:52:64:a9:9d:31:fe:39:dc:53:86:f0:9f:1e:47:
         8e:9d:39:36:f0:fa:b3:48:1c:a3:ae:08:fd:04:2b:28:19:da:
         48:d7:26:2d:19:f8:aa:51:f5:69:c2:03:0a:84:18:14:97:f8:
         4e:fd:f0:82:29:c6:a4:e1:cd:e7:ae:7d:eb:ca:07:8a:2d:85:
         82:8d:ac:17:dc:e5:78:8c:bc:f1:08:15:69:7f:4c:b7:81:49:
         73:c9:0d:87:71:94:74:ac:1d:fa:5b:2e:cc:f9:df:b7:a7:06:
         df:ba:a5:3a:45:ca:0b:42:69:4f:4c:e7:71:94:fe:04:a4:5f:
         48:d9:0c:39:30:64:66:8f:24:9c:51:9e:67:14:46:e6:8e:1c:
         1e:bf:62:ac:3a:6d:02:72:22:92:fa:c5:fd:bb:a8:a8:28:e6:
         92:35:8b:9e:98:85:ee:54:da:92:87:37:91:b3:fb:0e:fe:69:
         e7:f8:46:7a:ad:bd:9f:ee:0e:95:32:ae:9c:3e:75:e4:e2:6e:
         14:da:6b:29
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD8OAjM5Tcm4uCa4UAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDgyNzEyMDAwMFoXDTIzMDIyODA1MDAwMFowLzEtMCsGA1UEAxMk
ZmFkYzllNTUtNTJkNS00ZDdjLTliN2UtN2JjMDY2NTZjMGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHpj6ER22xIsN47IomTSVr5H6BqWwJhEpbzm
OuxDxTRUjZKrlp7PDwZ1ddKaWGsdJlKunemr37zV1wtGpwE1q1D0M+mrKZCeIeER
XEm8q4F1iMUhFjyNbUpuB/ApaenN8DsrAhFIOcswmfLRfKmP8ddO6UrbZuT00qs+
DGWYysZhsPeKUhKkCvQNy6pRcTbYlf4PRzZc/OYQD4YC4PFyHkZk8hT88vOspPkp
jsz+N//DPeyt2YAG7NknJ/Y7s0eD4hWWTE5mInuEP3V73KAZg4uE7Z0KtMNLQdua
ThOuPILSJh3k/PKoPIDyCJGYSyibPqAbN+/qJTA7zGG+IcxWwwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKCbNyzTC36qBkp+wpUFHj5W+sw2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWEzMDYzOGQtYjE0MS0z
ZWYzLWIzNzEtMjg3MDcxZTIyNTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFW
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIAb0QFaxqj8z3lDsK5Jq5tqe8IaSXazhCiv+pkuD26mFOy6rQnW
gYw7CktVdu5xDkm6o/i58YVd+WtSZKmdMf453FOG8J8eR46dOTbw+rNIHKOuCP0E
KygZ2kjXJi0Z+KpR9WnCAwqEGBSX+E798IIpxqThzeeufevKB4othYKNrBfc5XiM
vPEIFWl/TLeBSXPJDYdxlHSsHfpbLsz537enBt+6pTpFygtCaU9M53GU/gSkX0jZ
DDkwZGaPJJxRnmcURuaOHB6/Yqw6bQJyIpL6xf27qKgo5pI1i56Yhe5U2pKHN5Gz
+w7+aef4RnqtvZ/uDpUyrpw+deTibhTaayk=
-----END CERTIFICATE-----