Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/a1b0ff0c-c6d2-376f-a765-aa5ef26df685.roa
File:                     a1b0ff0c-c6d2-376f-a765-aa5ef26df685.roa (raw, json)
Hash identifier:          uAj4fveuj4Ns4PGLbZyT29d4sKWvlWlNGQj1Fz/r8cY=
Subject key identifier:   59:23:B9:6B:ED:9A:92:8A:D1:D0:76:81:BB:58:95:53:7C:7D:B0:BC
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F432858405915C3E5084560FFC295BF80
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/a1b0ff0c-c6d2-376f-a765-aa5ef26df685.roa
Signing time:             Fri 23 Dec 2022 12:00:00 +0000
ROA not before:           Fri 23 Dec 2022 12:00:00 +0000
ROA not after:            Sun 24 Dec 2023 05:00:00 +0000
asID:                     51019
IP address blocks:        2602:fd50:1020::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:59:15:c3:e5:08:45:60:ff:c2:95:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Dec 23 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2023 GMT
        Subject: CN=4bda2108-afe4-4f57-a773-8432b6327e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:20:eb:65:60:6d:08:c9:4d:be:07:e6:07:d2:
                    3a:4b:79:6b:62:4b:3c:9c:ea:a5:c0:ce:44:c5:76:
                    b7:26:ef:c7:e4:13:27:09:99:65:42:95:2a:3a:70:
                    b0:c5:b7:c6:f8:92:03:6e:4a:b9:58:1f:b4:67:00:
                    64:21:78:39:88:23:21:98:5a:6d:e1:72:25:3f:4f:
                    ac:e3:77:6e:29:32:a9:76:00:4a:71:96:53:7a:f2:
                    a5:c1:95:77:5f:e0:1b:df:fd:2f:80:a0:75:ed:fe:
                    87:bc:d9:d5:a8:41:69:3f:c2:4e:65:b0:71:46:fa:
                    fd:7e:a7:4a:27:ee:f2:16:3e:e1:bb:d2:6c:7f:aa:
                    f1:e9:0d:30:b1:1a:8a:cc:29:1b:18:a7:53:df:22:
                    74:f2:18:dd:7a:1e:eb:14:21:57:7c:35:6c:88:f2:
                    19:e9:7e:ee:b8:6e:e7:15:1b:10:16:3c:dc:d5:13:
                    0c:16:9d:4b:de:b4:3f:0b:10:9c:0e:6c:31:19:b7:
                    62:fa:98:64:2f:a9:0b:42:30:55:c4:37:76:f4:f0:
                    ac:d4:d2:8c:12:c6:4a:5f:21:1c:71:d9:d2:c9:41:
                    60:49:26:14:0c:a8:03:84:00:78:64:67:74:37:1f:
                    28:69:ee:f9:b9:cd:8a:27:57:51:4e:e0:b3:8b:fe:
                    4e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:23:B9:6B:ED:9A:92:8A:D1:D0:76:81:BB:58:95:53:7C:7D:B0:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/a1b0ff0c-c6d2-376f-a765-aa5ef26df685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd50:1020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:21:5c:8a:f3:df:e6:75:d4:36:c6:53:95:db:17:bc:af:5f:
         31:82:74:5a:0f:d1:6b:b9:54:6e:3b:46:37:95:97:57:9d:6e:
         85:66:91:8c:fa:1d:eb:44:25:cf:35:0c:a6:a9:13:17:d5:35:
         48:74:8c:ce:44:c7:af:94:74:9d:d5:af:0b:b3:8c:4f:b0:f3:
         8c:53:81:10:79:f6:fe:05:b0:dc:ec:70:05:bc:67:0e:58:fa:
         25:13:ed:26:d2:64:6d:64:89:04:ab:e8:85:94:b1:aa:b9:aa:
         89:7e:a6:d6:de:b2:2c:a2:9c:9c:f1:0d:fa:4d:65:9b:dc:4a:
         27:1e:a0:43:13:88:ae:be:8e:41:42:b3:fb:0b:ab:4a:15:81:
         38:56:fc:f8:e8:0d:09:1a:11:1e:b5:48:60:58:f6:23:5d:4c:
         3a:88:19:f4:1d:d4:f9:6c:49:10:c9:a3:2f:fd:5e:2f:3e:63:
         17:b6:07:5a:05:2f:a9:20:f9:ef:f2:ef:48:e2:b4:ec:7d:84:
         1b:c6:48:b2:70:a2:33:07:6e:9a:59:be:70:02:e7:c3:19:8b:
         de:4f:1e:95:ce:f5:50:a5:3a:32:d4:f4:dd:af:92:2f:ff:89:
         a1:84:29:dd:e5:e7:34:42:1d:d1:54:ab:f2:95:90:55:36:8f:
         e6:0c:5b:5f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEBZFcPlCEVg/8KVv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDcyZTUyN2EtODQ4YS00ZjNkLWI3YTAtNGYwMDFlNzU3
ZWU3MB4XDTIyMTIyMzEyMDAwMFoXDTIzMTIyNDA1MDAwMFowLzEtMCsGA1UEAxMk
NGJkYTIxMDgtYWZlNC00ZjU3LWE3NzMtODQzMmI2MzI3ZTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CDrZWBtCMlNvgfmB9I6S3lrYks8nOqlwM5E
xXa3Ju/H5BMnCZllQpUqOnCwxbfG+JIDbkq5WB+0ZwBkIXg5iCMhmFpt4XIlP0+s
43duKTKpdgBKcZZTevKlwZV3X+Ab3/0vgKB17f6HvNnVqEFpP8JOZbBxRvr9fqdK
J+7yFj7hu9Jsf6rx6Q0wsRqKzCkbGKdT3yJ08hjdeh7rFCFXfDVsiPIZ6X7uuG7n
FRsQFjzc1RMMFp1L3rQ/CxCcDmwxGbdi+phkL6kLQjBVxDd29PCs1NKMEsZKXyEc
cdnSyUFgSSYUDKgDhAB4ZGd0Nx8oae75uc2KJ1dRTuCzi/5O7wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFkjuWvtmpKK0dB2gbtYlVN8fbC8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NzJl
NTI3YS04NDhhLTRmM2QtYjdhMC00ZjAwMWU3NTdlZTcvYTFiMGZmMGMtYzZkMi0z
NzZmLWE3NjUtYWE1ZWYyNmRmNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDcyZTUyN2EtODQ4YS00ZjNkLWI3
YTAtNGYwMDFlNzU3ZWU3LzQ3MmU1MjdhLTg0OGEtNGYzZC1iN2EwLTRmMDAxZTc1
N2VlNy5jcmwwHwYDVR0jBBgwFoAULDova8hbNxopBZvRg4K1hU1FxXAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NzJlNTI3YS04NDhhLTRmM2QtYjdhMC00ZjAw
MWU3NTdlZTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL9UBAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEEhXIrz3+Z11DbGU5XbF7yvXzGCdFoP0Wu5VG47RjeVl1edboVm
kYz6HetEJc81DKapExfVNUh0jM5Ex6+UdJ3VrwuzjE+w84xTgRB59v4FsNzscAW8
Zw5Y+iUT7SbSZG1kiQSr6IWUsaq5qol+ptbesiyinJzxDfpNZZvcSiceoEMTiK6+
jkFCs/sLq0oVgThW/PjoDQkaER61SGBY9iNdTDqIGfQd1PlsSRDJoy/9Xi8+Yxe2
B1oFL6kg+e/y70jitOx9hBvGSLJwojMHbppZvnAC58MZi95PHpXO9VClOjLU9N2v
ki//iaGEKd3l5zRCHdFUq/KVkFU2j+YMW18=
-----END CERTIFICATE-----