Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/10e3fa36-f991-3220-bdee-41652ca1ebee.roa
File:                     10e3fa36-f991-3220-bdee-41652ca1ebee.roa (raw, json)
Hash identifier:          GYIhTelIHZmYY3F0tjEYeUiIz62VusegeTA21uYY344=
Subject key identifier:   37:C0:0C:0D:98:2D:9C:7E:5F:FF:0E:E7:EF:43:65:A9:15:FC:2D:8E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583E8D96BC229B88607DC77E6500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/10e3fa36-f991-3220-bdee-41652ca1ebee.roa
Signing time:             Tue 12 Jul 2022 12:00:00 +0000
ROA not before:           Tue 12 Jul 2022 12:00:00 +0000
ROA not after:            Fri 13 Jan 2023 05:00:00 +0000
asID:                     399606
IP address blocks:        2001:470:48::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:8d:96:bc:22:9b:88:60:7d:c7:7e:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 12 12:00:00 2022 GMT
            Not After : Jan 13 05:00:00 2023 GMT
        Subject: CN=fddccd95-d3f4-4e75-9926-cfd314544adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a1:05:74:8d:84:21:82:0e:03:7b:d9:72:d1:
                    19:bc:ba:21:5c:82:b2:6e:12:09:b3:93:09:06:4c:
                    49:1f:2c:e7:c4:21:8b:03:da:04:0d:43:96:61:a9:
                    9f:21:e9:c3:19:15:40:63:75:bb:5f:8a:69:7c:82:
                    b0:b7:b7:f3:20:8f:74:a0:de:95:33:44:ef:a3:54:
                    24:9a:4e:e3:a9:1b:85:f9:fc:d8:e5:31:76:43:88:
                    07:e8:3a:ee:1a:5b:8e:be:d7:c4:46:02:a2:64:d2:
                    bb:16:1a:33:03:47:64:3c:96:b2:bc:d3:ed:0e:be:
                    56:bb:9a:b5:39:ef:fd:54:b9:bd:d2:64:12:5d:a1:
                    12:76:a2:8d:b3:51:ee:2f:38:61:e3:b9:6b:5e:f7:
                    fc:68:5c:c3:17:a0:b2:ff:c6:a4:c6:d3:ca:e2:bb:
                    bf:65:3e:f7:37:e0:82:96:73:c6:70:d0:99:8a:9b:
                    f4:fc:fe:92:1e:0b:26:b4:74:8e:66:a0:0d:f3:27:
                    35:74:be:3c:80:48:48:9b:de:b6:e7:dc:79:27:40:
                    05:fa:42:a2:81:d4:48:e2:09:af:66:c4:3a:09:83:
                    36:84:a5:b9:ee:4d:72:cc:ea:2d:5b:0f:5e:3f:7c:
                    6a:3b:b1:de:87:ab:da:0f:6d:92:a9:60:d4:9b:72:
                    f9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C0:0C:0D:98:2D:9C:7E:5F:FF:0E:E7:EF:43:65:A9:15:FC:2D:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/10e3fa36-f991-3220-bdee-41652ca1ebee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:48::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:3f:a6:5f:d7:b8:3f:7c:b5:3f:58:58:d1:cc:2b:da:08:30:
         59:34:92:21:a0:3e:37:9e:93:3b:a7:2d:bb:86:21:7c:ca:ba:
         8a:a2:c8:ce:82:48:92:d8:e6:17:74:54:fc:3f:65:0d:c2:34:
         8e:80:bc:18:52:64:f0:df:a7:ac:48:e8:70:e5:b1:c6:5c:97:
         fa:0c:3a:55:d4:e4:7d:28:b6:04:17:de:01:2f:29:2c:f7:ab:
         46:70:55:cf:70:23:9f:87:c6:f7:3b:98:79:5a:99:3a:f7:11:
         cc:3a:98:ef:19:69:62:fb:8b:3e:fc:ef:64:0b:69:75:2a:c0:
         72:62:ea:e8:b2:da:9b:43:3e:3c:06:99:04:12:65:35:d7:9f:
         09:b3:fe:86:56:ec:9d:02:0e:b1:01:84:41:96:15:e3:9f:be:
         7f:5f:c1:8a:df:e5:a5:d2:10:0d:35:4b:a2:95:48:8a:ba:c8:
         05:70:25:82:28:0d:e6:c4:22:82:ae:9a:34:bb:55:29:9f:80:
         24:57:5a:07:00:05:79:4c:58:36:ff:2a:82:b6:e5:71:49:25:
         b2:ff:db:bf:70:e8:38:87:75:15:08:2d:50:ba:ab:71:f0:45:
         47:63:a5:cb:c3:fb:be:51:29:59:82:e5:64:5d:a5:85:04:95:
         72:a4:f7:8f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD6Nlrwim4hgfcd+ZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDcxMjEyMDAwMFoXDTIzMDExMzA1MDAwMFowLzEtMCsGA1UEAxMk
ZmRkY2NkOTUtZDNmNC00ZTc1LTk5MjYtY2ZkMzE0NTQ0YWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKEFdI2EIYIOA3vZctEZvLohXIKybhIJs5MJ
BkxJHyznxCGLA9oEDUOWYamfIenDGRVAY3W7X4ppfIKwt7fzII90oN6VM0Tvo1Qk
mk7jqRuF+fzY5TF2Q4gH6DruGluOvtfERgKiZNK7FhozA0dkPJayvNPtDr5Wu5q1
Oe/9VLm90mQSXaESdqKNs1HuLzhh47lrXvf8aFzDF6Cy/8akxtPK4ru/ZT73N+CC
lnPGcNCZipv0/P6SHgsmtHSOZqAN8yc1dL48gEhIm96259x5J0AF+kKigdRI4gmv
ZsQ6CYM2hKW57k1yzOotWw9eP3xqO7Heh6vaD22SqWDUm3L5iQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDfADA2YLZx+X/8O5+9DZakV/C2OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTBlM2ZhMzYtZjk5MS0z
MjIwLWJkZWUtNDE2NTJjYTFlYmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABY/pl/XuD98tT9YWNHMK9oIMFk0kiGgPjeekzunLbuGIXzKuoqi
yM6CSJLY5hd0VPw/ZQ3CNI6AvBhSZPDfp6xI6HDlscZcl/oMOlXU5H0otgQX3gEv
KSz3q0ZwVc9wI5+Hxvc7mHlamTr3Ecw6mO8ZaWL7iz7872QLaXUqwHJi6uiy2ptD
PjwGmQQSZTXXnwmz/oZW7J0CDrEBhEGWFeOfvn9fwYrf5aXSEA01S6KVSIq6yAVw
JYIoDebEIoKumjS7VSmfgCRXWgcABXlMWDb/KoK25XFJJbL/279w6DiHdRUILVC6
q3HwRUdjpcvD+75RKVmC5WRdpYUElXKk948=
-----END CERTIFICATE-----