Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/dd4cd5c3-bc0f-39f5-8322-660381650809.roa
File:                     dd4cd5c3-bc0f-39f5-8322-660381650809.roa (raw, json)
Hash identifier:          zPRuAdBEK5FnhxOJF6QjNcQ1YuHvMxOb9GGE5vr3Nr4=
Subject key identifier:   F8:6E:C7:8F:83:0B:10:F2:1A:1F:12:EB:9D:6E:43:05:6E:D8:9A:83
Certificate issuer:       /CN=2a006d48-b22f-4d9b-8138-c0de62d10e11
Certificate serial:       010D0C9F43285841E46D721F25BBA2E41CCE5680
Authority key identifier: 51:86:2F:5B:C6:DE:6A:97:66:72:2A:76:B4:FF:06:B0:B9:81:25:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/dd4cd5c3-bc0f-39f5-8322-660381650809.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Wed 05 Jul 2023 08:33:18 +0000
asID:                     7018
IP address blocks:        2620:51::/48 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:72:1f:25:bb:a2:e4:1c:ce:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a006d48-b22f-4d9b-8138-c0de62d10e11
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul  5 08:33:18 2023 GMT
        Subject: CN=673ab9b7-6056-481c-ab60-379dd3e94911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b7:34:67:5c:dc:28:b1:ac:a5:37:79:61:a8:
                    56:11:1d:6e:55:50:0a:b2:81:2e:2e:af:40:7c:b7:
                    bb:1d:f4:46:bc:ff:e3:d6:15:e3:0b:3a:7f:92:66:
                    4c:be:9f:6e:e3:13:18:58:02:e2:fe:c3:51:2f:3f:
                    8d:14:67:d7:4f:31:f4:28:06:b2:d0:04:f3:00:6a:
                    f0:fa:09:7c:43:eb:df:5e:fb:c5:47:6e:11:1f:bf:
                    e6:54:6b:0f:9e:08:a5:0a:df:6c:f7:e5:fa:eb:0a:
                    44:06:cc:09:7e:de:46:e4:e8:25:2d:c0:1a:a3:3c:
                    4d:0c:77:7e:df:d1:65:f2:15:24:48:ad:58:a8:01:
                    f7:91:ab:1e:ff:21:f6:0b:52:f3:7a:6a:6d:c5:11:
                    46:14:40:3a:00:ef:9f:ea:5d:22:43:5c:a5:3f:3d:
                    f1:b2:dd:1a:38:0b:cd:90:40:6b:47:f8:08:0d:f3:
                    9c:66:e5:92:2a:5d:db:64:a5:f3:72:79:a5:86:d1:
                    d6:37:38:30:0f:cb:35:c7:ce:e7:85:4a:dd:6f:c1:
                    3a:46:0e:ed:49:38:55:1c:b8:d8:c2:35:33:24:26:
                    57:16:08:f7:85:f9:b7:9f:6b:18:09:50:8a:2f:89:
                    83:1f:21:64:95:d3:bd:c1:1c:59:65:c7:52:f5:22:
                    43:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6E:C7:8F:83:0B:10:F2:1A:1F:12:EB:9D:6E:43:05:6E:D8:9A:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/dd4cd5c3-bc0f-39f5-8322-660381650809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/2a006d48-b22f-4d9b-8138-c0de62d10e11.crl

            X509v3 Authority Key Identifier:
                keyid:51:86:2F:5B:C6:DE:6A:97:66:72:2A:76:B4:FF:06:B0:B9:81:25:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:51::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:4c:0e:84:4d:31:dc:0c:02:dd:fb:64:82:73:04:a0:bf:ba:
         f6:20:c7:a9:64:ea:f8:89:29:5c:e1:32:50:16:90:61:29:18:
         73:5e:ee:2f:ce:24:6e:16:1d:4b:3e:b6:b5:16:ef:f2:d8:4e:
         ef:1d:57:e2:09:7f:58:c5:5e:e4:5c:77:58:37:4a:c5:85:37:
         c1:60:bd:d7:d0:4f:5e:84:ab:ce:22:50:75:c2:d6:5c:5b:a8:
         47:cb:1d:33:36:7f:fd:f6:f1:da:e7:e3:ff:9b:db:1f:f2:a1:
         a8:cb:ab:9c:fd:34:0a:63:9c:fc:62:c7:dd:b9:69:07:9c:fd:
         f0:73:fc:f2:98:8e:66:c1:48:fc:1c:4e:19:cf:fa:72:fa:88:
         bf:f2:6b:81:90:2d:79:cb:61:de:0f:74:3a:88:5c:9b:25:29:
         53:31:5e:6a:1a:ea:45:5d:4f:29:c5:10:a5:48:4b:5b:96:a0:
         0c:03:50:c5:bf:21:dc:ef:58:9b:86:67:ba:03:f4:08:31:74:
         5b:72:40:6f:14:95:22:58:90:e2:fa:31:73:e4:fb:30:7d:94:
         cf:7c:e2:4a:9e:6a:c5:99:49:86:12:e9:8e:18:8e:fd:7f:6d:
         b1:85:d1:31:e1:d0:81:09:b7:ba:e2:27:00:f8:5d:af:3f:cd:
         8e:94:59:ce
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEHkbXIfJbui5BzOVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEwMDZkNDgtYjIyZi00ZDliLTgxMzgtYzBkZTYyZDEw
ZTExMB4XDTIzMDUxNTE4MjEwMVoXDTIzMDcwNTA4MzMxOFowLzEtMCsGA1UEAxMk
NjczYWI5YjctNjA1Ni00ODFjLWFiNjAtMzc5ZGQzZTk0OTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7c0Z1zcKLGspTd5YahWER1uVVAKsoEuLq9A
fLe7HfRGvP/j1hXjCzp/kmZMvp9u4xMYWALi/sNRLz+NFGfXTzH0KAay0ATzAGrw
+gl8Q+vfXvvFR24RH7/mVGsPngilCt9s9+X66wpEBswJft5G5OglLcAaozxNDHd+
39Fl8hUkSK1YqAH3kase/yH2C1LzemptxRFGFEA6AO+f6l0iQ1ylPz3xst0aOAvN
kEBrR/gIDfOcZuWSKl3bZKXzcnmlhtHWNzgwD8s1x87nhUrdb8E6Rg7tSThVHLjY
wjUzJCZXFgj3hfm3n2sYCVCKL4mDHyFkldO9wRxZZcdS9SJD4wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPhux4+DCxDyGh8S651uQwVu2JqDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYTAw
NmQ0OC1iMjJmLTRkOWItODEzOC1jMGRlNjJkMTBlMTEvZGQ0Y2Q1YzMtYmMwZi0z
OWY1LTgzMjItNjYwMzgxNjUwODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmEwMDZkNDgtYjIyZi00ZDliLTgx
MzgtYzBkZTYyZDEwZTExLzJhMDA2ZDQ4LWIyMmYtNGQ5Yi04MTM4LWMwZGU2MmQx
MGUxMS5jcmwwHwYDVR0jBBgwFoAUUYYvW8beapdmcip2tP8GsLmBJW0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYTAwNmQ0OC1iMjJmLTRkOWItODEzOC1jMGRl
NjJkMTBlMTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAUQAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFZMDoRNMdwMAt37ZIJzBKC/uvYgx6lk6viJKVzhMlAWkGEpGHNe
7i/OJG4WHUs+trUW7/LYTu8dV+IJf1jFXuRcd1g3SsWFN8FgvdfQT16Eq84iUHXC
1lxbqEfLHTM2f/328drn4/+b2x/yoajLq5z9NApjnPxix925aQec/fBz/PKYjmbB
SPwcThnP+nL6iL/ya4GQLXnLYd4PdDqIXJslKVMxXmoa6kVdTynFEKVIS1uWoAwD
UMW/IdzvWJuGZ7oD9AgxdFtyQG8UlSJYkOL6MXPk+zB9lM984kqeasWZSYYS6Y4Y
jv1/bbGF0THh0IEJt7riJwD4Xa8/zY6UWc4=
-----END CERTIFICATE-----