Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/dbd34b8f-7da5-315d-8fcb-f187ad34e422.roa
File:                     dbd34b8f-7da5-315d-8fcb-f187ad34e422.roa (raw, json)
Hash identifier:          qP2vKe14EPekr5nRIJglR/gviFRnsRzypFGb5W60FKY=
Subject key identifier:   F8:5D:10:E0:F0:3F:0B:69:EC:4A:13:9A:4E:5F:F4:C4:D1:FA:1A:01
Certificate issuer:       /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Certificate serial:       010D0C9F432858413F4376F6AC2A4004A3076E80
Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/dbd34b8f-7da5-315d-8fcb-f187ad34e422.roa
Signing time:             Thu 14 Jul 2022 23:51:07 +0000
ROA not before:           Thu 14 Jul 2022 23:51:07 +0000
ROA not after:            Mon 01 May 2023 04:00:00 +0000
asID:                     395418
IP address blocks:        2001:500:30::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:3f:43:76:f6:ac:2a:40:04:a3:07:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
        Validity
            Not Before: Jul 14 23:51:07 2022 GMT
            Not After : May  1 04:00:00 2023 GMT
        Subject: CN=ba08e06e-4f9b-4e77-b494-9baf1c8b3efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8d:14:c4:b5:ef:7e:fd:c2:c4:8e:c8:cf:79:
                    d1:25:39:b6:f7:c1:30:48:8b:e4:a1:71:a0:79:13:
                    f4:62:3c:7d:87:49:91:e8:7d:1c:08:19:11:27:e0:
                    b4:e6:af:bd:ef:2e:75:65:b0:07:12:8a:51:2d:e8:
                    ea:42:ed:dd:30:b5:29:67:75:b0:ce:11:e8:ae:ca:
                    58:f5:cd:6a:48:bf:05:54:0c:80:2c:01:de:bc:23:
                    3f:c4:bd:1b:c5:0f:46:cc:b0:1a:01:b4:8e:54:78:
                    a0:c8:2e:de:ee:a7:23:f6:f5:32:ca:46:7c:12:39:
                    62:c6:3c:f8:3d:be:8c:54:00:38:9f:c7:d7:77:f2:
                    9a:18:aa:a5:1f:e3:a5:9f:77:42:36:25:ae:4f:90:
                    94:81:bd:80:b8:88:ac:cb:7e:b6:f5:b0:fc:df:81:
                    43:c5:d4:ed:bd:7f:f8:fc:90:bb:14:51:0e:67:a4:
                    ba:a0:71:31:2f:e2:35:b7:79:ce:cf:ee:f7:fc:97:
                    b6:1a:e4:0b:15:08:28:16:79:4c:c3:f4:36:0f:5a:
                    89:e9:54:70:5b:ad:7e:db:c4:d9:bc:16:0f:21:bb:
                    76:2e:0d:37:10:32:ab:86:17:63:3d:40:b6:33:53:
                    59:e4:88:6d:94:60:68:b6:ec:1c:4c:6d:61:9d:42:
                    0e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5D:10:E0:F0:3F:0B:69:EC:4A:13:9A:4E:5F:F4:C4:D1:FA:1A:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/dbd34b8f-7da5-315d-8fcb-f187ad34e422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:8b:76:ef:79:25:cb:33:45:09:77:51:ce:a6:5b:72:ad:2f:
         c5:df:a7:e5:46:bb:27:e1:2f:d9:cf:2e:6e:ad:82:0b:b6:fc:
         51:42:a5:4d:92:7b:57:fc:5c:1e:72:2e:7f:db:9a:fc:b2:d9:
         84:05:07:26:33:46:13:25:2d:1d:75:98:6e:df:ee:dd:a4:e6:
         df:13:45:e0:c7:95:cf:7d:c3:77:c7:37:42:62:47:e4:c2:f3:
         c3:a2:fb:ac:c6:4f:6c:e4:33:9e:8e:48:9f:22:ee:c4:cc:7c:
         b2:b4:6a:1e:9c:e2:61:d3:72:9b:43:25:bd:f5:21:ba:23:72:
         d9:f7:18:58:a4:78:c3:59:42:ce:75:a7:88:b1:2d:cd:6d:a3:
         dc:34:01:ce:36:3a:69:c1:b8:51:d1:6e:ce:c9:22:56:0d:f6:
         c0:8f:00:0e:aa:22:ba:3a:af:64:e9:a7:b6:cd:ea:a0:50:dc:
         ea:a8:d3:e9:c2:89:f9:0a:00:0d:54:0d:07:7b:eb:aa:40:4d:
         30:27:e0:3d:b1:ae:4e:96:4c:79:0f:2c:39:9b:bf:af:f8:78:
         a7:86:b1:2c:de:64:9f:16:ee:09:16:33:c9:0f:a7:a1:25:73:
         12:8f:86:cb:42:0a:ce:5b:4f:35:51:40:7b:dc:96:f6:04:46:
         ea:68:be:df
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEE/Q3b2rCpABKMHboAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWQ2NTU2ZDctNjBhNC00MzE4LTlkMTEtNDY0ZmI4Mzk2
ZDNlMB4XDTIyMDcxNDIzNTEwN1oXDTIzMDUwMTA0MDAwMFowLzEtMCsGA1UEAxMk
YmEwOGUwNmUtNGY5Yi00ZTc3LWI0OTQtOWJhZjFjOGIzZWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI0UxLXvfv3CxI7Iz3nRJTm298EwSIvkoXGg
eRP0Yjx9h0mR6H0cCBkRJ+C05q+97y51ZbAHEopRLejqQu3dMLUpZ3WwzhHorspY
9c1qSL8FVAyALAHevCM/xL0bxQ9GzLAaAbSOVHigyC7e7qcj9vUyykZ8Ejlixjz4
Pb6MVAA4n8fXd/KaGKqlH+Oln3dCNiWuT5CUgb2AuIisy3629bD834FDxdTtvX/4
/JC7FFEOZ6S6oHExL+I1t3nOz+73/Je2GuQLFQgoFnlMw/Q2D1qJ6VRwW61+28TZ
vBYPIbt2Lg03EDKrhhdjPUC2M1NZ5IhtlGBotuwcTG1hnUIO8QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPhdEODwPwtp7EoTmk5f9MTR+hoBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1
NTZkNy02MGE0LTQzMTgtOWQxMS00NjRmYjgzOTZkM2UvZGJkMzRiOGYtN2RhNS0z
MTVkLThmY2ItZjE4N2FkMzRlNDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWQ2NTU2ZDctNjBhNC00MzE4LTlk
MTEtNDY0ZmI4Mzk2ZDNlL2FkNjU1NmQ3LTYwYTQtNDMxOC05ZDExLTQ2NGZiODM5
NmQzZS5jcmwwHwYDVR0jBBgwFoAUXcH9mmOFwY9GUkq4xGL1NCS8r44wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1NTZkNy02MGE0LTQzMTgtOWQxMS00NjRm
YjgzOTZkM2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMKLdu95JcszRQl3Uc6mW3KtL8Xfp+VGuyfhL9nPLm6tggu2/FFC
pU2Se1f8XB5yLn/bmvyy2YQFByYzRhMlLR11mG7f7t2k5t8TReDHlc99w3fHN0Ji
R+TC88Oi+6zGT2zkM56OSJ8i7sTMfLK0ah6c4mHTcptDJb31Ibojctn3GFikeMNZ
Qs51p4ixLc1to9w0Ac42OmnBuFHRbs7JIlYN9sCPAA6qIro6r2Tpp7bN6qBQ3Oqo
0+nCifkKAA1UDQd766pATTAn4D2xrk6WTHkPLDmbv6/4eKeGsSzeZJ8W7gkWM8kP
p6ElcxKPhstCCs5bTzVRQHvclvYERupovt8=
-----END CERTIFICATE-----