Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/374ddf68-ea6a-3d87-b7c3-738c7cef7fa3.roa
File:                     374ddf68-ea6a-3d87-b7c3-738c7cef7fa3.roa (raw, json)
Hash identifier:          5QXApS+FoWcZl7+YZCw2X5y0EfvtTf8Z8hC4e6rb8ZQ=
Subject key identifier:   6A:12:17:CE:4F:37:3C:C6:C3:D2:DE:13:03:CB:16:A3:47:0F:97:E0
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F432858408590A186D46D2C37DDBD2C80
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/374ddf68-ea6a-3d87-b7c3-738c7cef7fa3.roa
Signing time:             Sat 31 Dec 2022 12:00:00 +0000
ROA not before:           Sat 31 Dec 2022 12:00:00 +0000
ROA not after:            Wed 10 Jan 2024 05:00:00 +0000
asID:                     0
IP address blocks:        2605:f440:7000::/36 maxlen: 36
                          2605:f440:8000::/35 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:85:90:a1:86:d4:6d:2c:37:dd:bd:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Dec 31 12:00:00 2022 GMT
            Not After : Jan 10 05:00:00 2024 GMT
        Subject: CN=8c599af4-4047-4bca-9d58-62df2310924d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:80:0e:ca:39:60:e6:88:62:60:19:e1:d1:3d:
                    45:25:c0:df:ab:60:72:5f:a1:57:ce:b5:5f:42:f9:
                    19:67:04:9f:34:66:13:39:02:16:c2:29:7e:c0:0e:
                    e0:e9:e0:9b:64:b1:25:f7:d9:b4:7f:eb:19:e5:9a:
                    24:3d:b2:59:cd:0f:ec:82:49:9f:0a:ff:f1:df:28:
                    6c:6c:b4:9e:a9:9a:6d:9d:cd:31:77:2f:cf:14:e1:
                    b7:23:e0:00:6d:7b:88:34:d0:9b:af:97:17:42:da:
                    78:6d:10:e5:75:59:60:03:65:49:b3:0e:da:71:bc:
                    94:eb:80:e8:a3:d0:10:79:cd:83:56:f1:d6:1a:4a:
                    d5:62:4f:97:37:92:91:df:23:2e:21:d9:c0:b0:10:
                    9e:d1:54:6e:a2:0c:89:72:9c:6d:bd:75:59:7d:c4:
                    99:8e:3c:e7:73:52:00:e9:38:11:2c:f3:44:a1:0f:
                    c5:f5:13:fd:bd:5c:2a:a2:95:5d:a5:26:7b:a5:58:
                    95:88:2e:3b:6f:19:27:d9:f2:40:e1:a5:d3:ee:21:
                    d2:b6:77:79:e1:df:8e:fb:c4:b4:c6:c7:8c:f6:80:
                    dc:24:eb:5e:0e:f5:82:49:72:79:1b:ba:db:c9:d6:
                    93:23:53:88:7c:4e:74:06:cf:f8:d9:3c:c0:81:f9:
                    51:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:12:17:CE:4F:37:3C:C6:C3:D2:DE:13:03:CB:16:A3:47:0F:97:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/374ddf68-ea6a-3d87-b7c3-738c7cef7fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:7000::-2605:f440:9fff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e8:02:53:91:4c:f4:3d:05:e6:52:1a:70:14:9d:2d:37:da:
         2f:80:e5:a1:99:19:14:2f:c9:4b:50:92:81:07:31:c2:28:f8:
         cd:db:23:fc:ed:fd:6d:77:ff:42:92:79:25:a2:75:df:a2:8f:
         0f:62:a8:6e:38:fb:97:d9:5c:92:c7:8d:a3:9b:1d:c5:2b:57:
         38:90:40:f9:1b:31:de:b4:0b:60:57:6c:10:ad:4b:bb:81:72:
         11:d0:f5:c1:5c:e1:83:b1:82:ba:75:41:92:af:3d:c7:e3:7e:
         8b:41:60:c9:05:97:3c:6d:69:5d:27:66:3e:15:22:a8:e8:71:
         7e:3e:39:b1:c0:b1:96:df:81:2c:25:94:c1:9c:59:a8:7c:f9:
         03:0b:f0:30:6f:ae:04:cd:05:71:7c:4e:4a:0b:3c:3b:97:35:
         0b:dc:7f:ff:ad:bc:9c:df:fc:c6:f8:c4:20:82:0c:79:17:64:
         51:7b:a5:7e:86:dd:b7:87:11:0a:89:f3:2c:6f:84:98:6b:c8:
         e5:c0:a7:2e:8a:27:ac:7a:00:17:eb:2d:3e:ff:45:09:66:3c:
         39:6c:0e:11:4a:19:67:1c:55:f0:ea:d3:87:50:42:0d:fb:28:
         50:c1:07:dc:d5:7c:12:56:34:00:e7:d4:70:71:f2:9d:af:06:
         ce:bc:8f:f6
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWECFkKGG1G0sN929LIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4
ZjcyMB4XDTIyMTIzMTEyMDAwMFoXDTI0MDExMDA1MDAwMFowLzEtMCsGA1UEAxMk
OGM1OTlhZjQtNDA0Ny00YmNhLTlkNTgtNjJkZjIzMTA5MjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYAOyjlg5ohiYBnh0T1FJcDfq2ByX6FXzrVf
QvkZZwSfNGYTOQIWwil+wA7g6eCbZLEl99m0f+sZ5ZokPbJZzQ/sgkmfCv/x3yhs
bLSeqZptnc0xdy/PFOG3I+AAbXuINNCbr5cXQtp4bRDldVlgA2VJsw7acbyU64Do
o9AQec2DVvHWGkrVYk+XN5KR3yMuIdnAsBCe0VRuogyJcpxtvXVZfcSZjjznc1IA
6TgRLPNEoQ/F9RP9vVwqopVdpSZ7pViViC47bxkn2fJA4aXT7iHStnd54d+O+8S0
xseM9oDcJOteDvWCSXJ5G7rbydaTI1OIfE50Bs/42TzAgflRxQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFGoSF85PNzzGw9LeEwPLFqNHD5fgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk
MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvMzc0ZGRmNjgtZWE2YS0z
ZDg3LWI3YzMtNzM4YzdjZWY3ZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4
NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw
OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2
N2JmMDhmNzIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBgQmBfRA
cAMGBSYF9ECAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAB/oAlORTPQ9BeZSGnAUnS032i+A5aGZGRQvyUtQ
koEHMcIo+M3bI/zt/W13/0KSeSWidd+ijw9iqG44+5fZXJLHjaObHcUrVziQQPkb
Md60C2BXbBCtS7uBchHQ9cFc4YOxgrp1QZKvPcfjfotBYMkFlzxtaV0nZj4VIqjo
cX4+ObHAsZbfgSwllMGcWah8+QML8DBvrgTNBXF8TkoLPDuXNQvcf/+tvJzf/Mb4
xCCCDHkXZFF7pX6G3beHEQqJ8yxvhJhryOXApy6KJ6x6ABfrLT7/RQlmPDlsDhFK
GWccVfDq04dQQg37KFDBB9zVfBJWNADn1HBx8p2vBs68j/Y=
-----END CERTIFICATE-----