Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/94f29977-03f3-379d-8d3b-7f890d72b717.roa
File:                     94f29977-03f3-379d-8d3b-7f890d72b717.roa (raw, json)
Hash identifier:          LUTNsIxHVCFX5ix11twx1tryqtakhELmSv0H9F69K90=
Subject key identifier:   ED:0D:BF:E6:13:22:B0:F9:45:78:05:77:78:9F:09:FF:F5:BB:1F:F9
Certificate issuer:       /CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7
Certificate serial:       010D0C9F4328583CF44B42F6AD28C3DECDD35C80
Authority key identifier: EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/94f29977-03f3-379d-8d3b-7f890d72b717.roa
Signing time:             Wed 16 Feb 2022 05:00:00 +0000
ROA not before:           Wed 16 Feb 2022 05:00:00 +0000
ROA not after:            Tue 21 May 2024 04:00:00 +0000
asID:                     33189
IP address blocks:        2607:f558::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:f4:4b:42:f6:ad:28:c3:de:cd:d3:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7
        Validity
            Not Before: Feb 16 05:00:00 2022 GMT
            Not After : May 21 04:00:00 2024 GMT
        Subject: CN=6388e2c7-083b-45f2-b8d3-13ed758260a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4f:d6:8b:b8:86:b3:3f:26:af:25:2b:fd:05:
                    a6:8e:b9:ba:3d:1a:e4:3e:44:a2:8d:4d:bc:01:c4:
                    9c:e2:b4:bd:85:6c:6b:5d:09:fa:2c:23:fb:f3:dd:
                    9e:5b:0c:23:39:63:d7:76:2b:da:04:32:26:19:63:
                    07:b3:d7:4f:88:50:28:59:95:2b:93:00:3c:97:66:
                    6e:c2:d4:50:99:e7:7b:e7:9e:c7:64:16:ef:8c:ca:
                    a1:c8:bf:bc:6f:82:3c:17:68:3f:54:6e:70:59:8c:
                    17:21:11:4f:cc:4a:f8:a0:c9:3a:ec:8c:07:94:80:
                    71:74:59:3b:71:0d:44:5b:1e:f0:84:7d:54:a1:21:
                    31:32:eb:f6:f5:57:64:18:5c:8b:6a:4d:12:53:8c:
                    eb:29:32:99:83:5a:c3:33:d0:45:81:4b:36:68:a4:
                    d2:80:9d:d2:12:61:8b:03:80:66:14:0e:10:fa:ca:
                    83:6e:8d:7d:4a:39:e6:06:d2:29:89:b0:1b:d3:16:
                    97:12:19:f8:ec:fd:f3:67:78:c7:66:09:64:0a:af:
                    9e:a6:39:dc:62:45:a6:41:d7:4a:19:14:25:3e:90:
                    76:01:36:c8:37:ff:36:07:76:e5:3a:30:a1:f2:4e:
                    dc:d3:61:4c:04:8a:60:db:84:36:cc:13:96:68:73:
                    11:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0D:BF:E6:13:22:B0:F9:45:78:05:77:78:9F:09:FF:F5:BB:1F:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/94f29977-03f3-379d-8d3b-7f890d72b717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.crl

            X509v3 Authority Key Identifier:
                keyid:EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f558::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:12:e6:5d:18:52:b9:8f:0d:07:f3:7c:d9:a9:ca:e5:62:fb:
         8e:6f:ea:b8:fb:d5:6d:c8:5a:e2:5f:11:32:7f:a0:53:65:88:
         c8:90:b6:fd:3f:70:b8:70:9f:9b:9f:a3:a7:18:17:38:e2:13:
         34:bd:e8:0a:e0:a8:24:5a:18:6a:77:83:89:2f:bf:5f:65:9a:
         83:97:af:25:36:90:6b:23:dc:56:c8:bd:e6:72:3d:1d:3c:4a:
         05:0c:0a:3b:ad:3c:1d:fd:69:4d:1c:57:e8:e6:8b:69:25:58:
         80:0a:f5:a4:8a:ce:b3:1f:18:6f:5c:d2:ff:69:12:9a:ed:d0:
         0a:69:0f:50:ee:15:8d:27:93:8e:96:27:bc:5e:e0:78:5e:38:
         d2:18:08:59:52:8e:aa:9f:68:17:91:de:ac:91:ea:c1:d0:36:
         10:25:9c:f9:41:d7:94:86:d0:ed:c7:f1:a5:18:cf:05:cf:e1:
         3a:be:19:80:c8:96:aa:85:44:4c:71:9a:d5:5b:c1:3b:0f:06:
         9f:5c:cf:29:58:cb:4f:97:12:55:4e:cc:0c:83:e1:c0:c9:fa:
         6e:c4:58:f3:06:73:15:b7:2c:3e:34:14:bc:71:21:a1:2a:1b:
         22:fa:23:64:6b:87:dd:59:f3:96:92:08:b0:ac:8d:60:19:e6:
         3b:a7:60:cd
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWDz0S0L2rSjD3s3TXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWU3ODAwNjUtNmI0YS00MmU1LWJhNmEtMmNjMzQwMDAx
YWE3MB4XDTIyMDIxNjA1MDAwMFoXDTI0MDUyMTA0MDAwMFowLzEtMCsGA1UEAxMk
NjM4OGUyYzctMDgzYi00NWYyLWI4ZDMtMTNlZDc1ODI2MGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE/Wi7iGsz8mryUr/QWmjrm6PRrkPkSijU28
AcSc4rS9hWxrXQn6LCP7892eWwwjOWPXdivaBDImGWMHs9dPiFAoWZUrkwA8l2Zu
wtRQmed7557HZBbvjMqhyL+8b4I8F2g/VG5wWYwXIRFPzEr4oMk67IwHlIBxdFk7
cQ1EWx7whH1UoSExMuv29VdkGFyLak0SU4zrKTKZg1rDM9BFgUs2aKTSgJ3SEmGL
A4BmFA4Q+sqDbo19SjnmBtIpibAb0xaXEhn47P3zZ3jHZglkCq+epjncYkWmQddK
GRQlPpB2ATbIN/82B3blOjCh8k7c02FMBIpg24Q2zBOWaHMRBQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFO0Nv+YTIrD5RXgFd3ifCf/1ux/5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZTc4
MDA2NS02YjRhLTQyZTUtYmE2YS0yY2MzNDAwMDFhYTcvOTRmMjk5NzctMDNmMy0z
NzlkLThkM2ItN2Y4OTBkNzJiNzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWU3ODAwNjUtNmI0YS00MmU1LWJh
NmEtMmNjMzQwMDAxYWE3LzFlNzgwMDY1LTZiNGEtNDJlNS1iYTZhLTJjYzM0MDAw
MWFhNy5jcmwwHwYDVR0jBBgwFoAU6qwyvARyCXmDcxCxcHgxsJ3PRkMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xZTc4MDA2NS02YjRhLTQyZTUtYmE2YS0yY2Mz
NDAwMDFhYTcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf1WDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAnEuZdGFK5jw0H83zZqcrlYvuOb+q4+9VtyFriXxEyf6BTZYjIkLb9
P3C4cJ+bn6OnGBc44hM0vegK4KgkWhhqd4OJL79fZZqDl68lNpBrI9xWyL3mcj0d
PEoFDAo7rTwd/WlNHFfo5otpJViACvWkis6zHxhvXNL/aRKa7dAKaQ9Q7hWNJ5OO
lie8XuB4XjjSGAhZUo6qn2gXkd6skerB0DYQJZz5QdeUhtDtx/GlGM8Fz+E6vhmA
yJaqhURMcZrVW8E7DwafXM8pWMtPlxJVTswMg+HAyfpuxFjzBnMVtyw+NBS8cSGh
Khsi+iNka4fdWfOWkgiwrI1gGeY7p2DN
-----END CERTIFICATE-----