Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12e2f6d3-8f26-322d-9ae0-fbc17939d847.roa
File:                     12e2f6d3-8f26-322d-9ae0-fbc17939d847.roa (raw, json)
Hash identifier:          9mR/z/2TrUYyk/+Ll48rrV6DArA4F3x7ND1zycO1aM4=
Subject key identifier:   86:14:C4:C7:14:76:3A:B9:1F:A6:F2:12:CE:FF:76:07:EE:65:8C:2A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583DCCF592E3B3A98FF225E6F600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12e2f6d3-8f26-322d-9ae0-fbc17939d847.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Sat 05 Nov 2022 04:00:00 +0000
asID:                     397778
IP address blocks:        2001:470:11b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:f5:92:e3:b3:a9:8f:f2:25:e6:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : Nov  5 04:00:00 2022 GMT
        Subject: CN=478032ee-1a7d-49fd-b683-84268033f37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:e0:39:73:d6:93:b7:86:ff:65:76:65:7e:
                    0a:fa:b8:e9:1d:d5:b9:05:c1:e9:66:ee:2b:66:56:
                    95:ab:dd:d8:9f:ef:d9:83:63:4e:de:62:83:ed:19:
                    ec:c0:33:6f:4e:8d:04:85:8e:e1:30:2d:54:b5:1c:
                    aa:60:a6:f9:d5:9a:d8:1c:52:01:4c:7d:aa:34:d9:
                    29:a2:b0:f7:50:db:c0:6a:91:1c:eb:ab:48:73:97:
                    13:58:9d:38:6c:85:0e:a0:ba:26:a0:e0:de:27:1d:
                    6c:12:fb:41:37:24:bb:ab:46:91:0c:29:d4:db:53:
                    ad:c3:4e:bc:13:1a:0b:a5:e8:16:76:81:da:a8:34:
                    25:0c:b4:87:06:d9:13:54:74:d9:d0:69:dd:47:90:
                    66:1e:0d:0d:94:db:b9:ee:b3:ec:f7:a4:e3:85:59:
                    40:2e:59:ba:04:01:cd:94:1a:72:80:fb:43:31:72:
                    b7:4a:e9:29:53:2d:2e:a7:80:71:5e:43:4e:10:cf:
                    fc:c1:14:d1:1c:18:4d:b7:27:24:3c:41:4c:f5:6d:
                    7e:ba:4e:16:c1:ac:e3:33:57:d3:4a:83:a9:48:68:
                    ee:8e:76:7a:0d:66:7a:a3:98:f2:8d:aa:88:48:a3:
                    cf:ef:c2:d9:84:06:40:f6:f8:6a:2d:76:4e:1b:77:
                    29:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:14:C4:C7:14:76:3A:B9:1F:A6:F2:12:CE:FF:76:07:EE:65:8C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12e2f6d3-8f26-322d-9ae0-fbc17939d847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:11b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:56:a4:ad:8f:95:22:f1:91:b9:4f:42:0f:c4:0b:6d:ef:27:
         45:de:99:fe:62:68:09:4c:6e:99:57:7d:90:a5:11:6e:5f:19:
         90:2a:5e:e3:da:ac:0e:ba:9e:bf:18:ae:0a:c4:75:de:07:4b:
         24:2a:32:fa:47:6c:5f:23:5b:c3:ae:27:ab:da:04:cd:e6:e8:
         00:38:7f:60:f9:d2:a8:9d:6e:9d:f8:cf:e9:f5:ea:3d:ea:dc:
         1b:ad:33:8c:9f:3a:15:a8:73:21:03:41:aa:05:60:45:56:a3:
         7f:e2:87:9a:85:86:8f:91:59:fb:5c:18:57:fc:64:c6:0f:3c:
         7e:05:c2:f4:7c:58:69:8f:8f:20:2b:14:c0:f1:09:51:03:06:
         a6:14:d5:b1:1b:5e:ea:f6:42:60:4f:33:dd:bb:e4:fe:ee:f4:
         d0:bd:7c:43:67:66:8d:18:06:7c:f3:0f:64:b0:0d:fb:84:a1:
         7b:64:59:3c:b8:55:80:db:32:b1:7d:8e:e6:91:98:e2:c2:a6:
         b9:1c:34:0f:05:21:a9:06:34:cd:78:87:3c:08:94:c6:87:7a:
         0c:15:3f:30:8d:e5:c2:ca:86:e5:0f:b2:6c:53:4b:e3:6e:83:
         81:62:fc:c8:dd:59:96:41:00:65:b5:b9:a1:d8:21:98:5c:3a:
         18:dc:4f:dd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD3M9ZLjs6mP8iXm9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDUwNDEyMDAwMFoXDTIyMTEwNTA0MDAwMFowLzEtMCsGA1UEAxMk
NDc4MDMyZWUtMWE3ZC00OWZkLWI2ODMtODQyNjgwMzNmMzdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszfgOXPWk7eG/2V2ZX4K+rjpHdW5BcHpZu4r
ZlaVq93Yn+/Zg2NO3mKD7RnswDNvTo0EhY7hMC1UtRyqYKb51ZrYHFIBTH2qNNkp
orD3UNvAapEc66tIc5cTWJ04bIUOoLomoODeJx1sEvtBNyS7q0aRDCnU21Otw068
ExoLpegWdoHaqDQlDLSHBtkTVHTZ0GndR5BmHg0NlNu57rPs96TjhVlALlm6BAHN
lBpygPtDMXK3SukpUy0up4BxXkNOEM/8wRTRHBhNtyckPEFM9W1+uk4WwazjM1fT
SoOpSGjujnZ6DWZ6o5jyjaqISKPP78LZhAZA9vhqLXZOG3cpvwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIYUxMcUdjq5H6byEs7/dgfuZYwqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTJlMmY2ZDMtOGYyNi0z
MjJkLTlhZTAtZmJjMTc5MzlkODQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEb
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAINWpK2PlSLxkblPQg/EC23vJ0Xemf5iaAlMbplXfZClEW5fGZAq
XuParA66nr8YrgrEdd4HSyQqMvpHbF8jW8OuJ6vaBM3m6AA4f2D50qidbp34z+n1
6j3q3ButM4yfOhWocyEDQaoFYEVWo3/ih5qFho+RWftcGFf8ZMYPPH4FwvR8WGmP
jyArFMDxCVEDBqYU1bEbXur2QmBPM9275P7u9NC9fENnZo0YBnzzD2SwDfuEoXtk
WTy4VYDbMrF9juaRmOLCprkcNA8FIakGNM14hzwIlMaHegwVPzCN5cLKhuUPsmxT
S+Nug4Fi/MjdWZZBAGW1uaHYIZhcOhjcT90=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:31 2023 by rpki-client on console-ams.rpki-client.org