Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3/fc5dc43e-71d4-33ea-9aff-78baf371aa1f.roa
File:                     fc5dc43e-71d4-33ea-9aff-78baf371aa1f.roa (raw, json)
Hash identifier:          1IB3bx8vD0iNtDpIZG7QswmQ5Yg2MvjlHUgYTqTQUGA=
Subject key identifier:   38:92:1A:44:D9:A1:40:1D:59:4E:B9:87:E9:F8:DA:62:C7:1E:71:DE
Certificate issuer:       /CN=2c2fd90f-0e05-4f71-b5cb-8a9269f851b3
Certificate serial:       010D0C9F4328583D5855EF8E9DDE86369A02A400
Authority key identifier: B0:C8:F7:D4:D0:7F:E8:C8:D3:44:83:DB:53:38:B2:65:B1:85:48:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3/fc5dc43e-71d4-33ea-9aff-78baf371aa1f.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Fri 24 Mar 2023 04:00:00 +0000
asID:                     10310
IP address blocks:        2001:4998:f00e::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:58:55:ef:8e:9d:de:86:36:9a:02:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c2fd90f-0e05-4f71-b5cb-8a9269f851b3
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Mar 24 04:00:00 2023 GMT
        Subject: CN=c0b5a739-72f3-4482-86f7-0b20ec114bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4a:cf:e0:44:99:30:f9:c7:17:9f:14:7f:16:
                    62:f1:28:21:ad:59:fa:0f:8f:f0:8d:61:b4:89:23:
                    a3:c9:35:c3:95:33:49:bc:fe:55:47:29:dc:f5:0b:
                    0e:8e:15:ab:d5:86:45:46:5c:af:f6:eb:64:b1:9a:
                    87:ee:0a:2d:b7:98:6b:a7:a5:cc:0f:66:10:ef:2d:
                    23:8a:f7:c0:a1:39:1f:c3:fd:2c:d5:de:e4:37:ec:
                    e5:69:72:cf:f6:c7:25:13:80:07:c9:ae:e9:6c:71:
                    77:2a:47:e9:1a:06:38:70:14:94:bd:1e:9e:04:bf:
                    1a:67:64:7c:24:56:a9:f5:73:a6:26:c9:cd:fd:d3:
                    5d:42:cc:91:c6:b5:4f:96:97:31:4b:85:8e:18:6d:
                    79:91:8c:c3:f3:34:ed:d2:92:f8:8b:e8:e1:71:29:
                    31:e7:97:89:18:6b:b5:8d:1f:4f:a3:1e:4b:5e:b8:
                    dd:c1:a7:c1:a4:96:ce:89:6a:6b:79:ea:1c:6e:43:
                    24:5d:94:2e:fc:3a:4c:f6:7b:d1:37:a0:c6:fe:f7:
                    7b:97:28:79:71:a3:bd:c3:6d:69:7a:3e:db:c6:3b:
                    61:5b:2c:e4:2e:0e:d5:d0:83:37:cd:43:f8:e4:b4:
                    f0:4c:11:0d:67:5c:aa:11:a5:a5:4b:e6:a0:63:4d:
                    e4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:92:1A:44:D9:A1:40:1D:59:4E:B9:87:E9:F8:DA:62:C7:1E:71:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3/fc5dc43e-71d4-33ea-9aff-78baf371aa1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3.crl

            X509v3 Authority Key Identifier:
                keyid:B0:C8:F7:D4:D0:7F:E8:C8:D3:44:83:DB:53:38:B2:65:B1:85:48:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4998:f00e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:a5:7e:20:dd:74:85:49:3c:f6:c2:21:05:78:23:4f:6f:2f:
         c6:76:d2:15:04:40:f2:58:5b:74:e5:85:75:e1:59:20:8d:d3:
         d2:1e:fe:92:38:a4:e2:06:42:55:de:cd:a9:f8:bc:37:71:7d:
         ee:3f:48:66:00:a9:83:4c:c8:ac:6a:44:9c:d5:c8:72:fb:96:
         00:78:2a:29:f6:cc:62:19:66:d1:97:16:3b:e4:0d:11:b7:21:
         8a:2f:d8:7b:d1:78:49:08:72:68:04:02:81:7f:3c:ff:6c:ec:
         6c:0e:04:21:65:c3:2e:4d:6a:de:5d:c6:9c:0f:7a:c5:4f:4a:
         93:df:48:7c:0a:03:57:ac:d3:07:5e:08:95:68:71:41:3b:b3:
         c7:a0:80:b2:c1:a5:7b:5e:cb:3d:c6:18:ef:de:05:b5:21:c7:
         86:43:33:08:c3:10:20:19:df:09:f6:ef:d0:ff:e8:c0:e8:73:
         e1:b7:76:d9:d5:40:00:23:88:48:31:65:80:45:15:52:9d:75:
         6c:be:4c:78:84:76:a1:d9:4a:ea:00:3a:10:0e:17:48:a8:5e:
         54:92:12:74:36:fa:39:fa:0c:22:4b:ab:2b:68:c9:33:b4:06:
         3e:93:32:4b:71:bf:5c:89:06:73:fd:00:32:8a:10:e4:22:28:
         a7:5b:82:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----