Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/18024ed0-4264-3f38-b6a7-724af2917340.roa
File:                     18024ed0-4264-3f38-b6a7-724af2917340.roa (raw, json)
Hash identifier:          cMNFiPPLLqkdg3K3YSIE0Bgrz1YwDXEMJMcvYSQM1zc=
Subject key identifier:   50:40:3C:91:2D:CD:EF:B7:AA:8D:08:55:51:1B:F9:26:A5:4C:04:3C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B74432AA45E9EA3391800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/18024ed0-4264-3f38-b6a7-724af2917340.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     142125
IP address blocks:        2001:470:2ef::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:74:43:2a:a4:5e:9e:a3:39:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=9777cc75-bc5b-4a5e-9042-74355b7d01d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:89:60:f8:94:d8:f1:76:27:8c:21:20:9a:6d:
                    90:c8:c6:94:bb:0e:c0:b9:a7:b9:0f:aa:ae:1d:85:
                    5c:da:4c:c9:0d:99:9d:d1:82:ea:22:7e:e0:26:2d:
                    34:1d:82:81:9d:90:93:50:fd:7a:be:72:dc:5f:b4:
                    44:82:09:a6:20:fc:c7:44:eb:82:b9:ef:9f:1e:07:
                    bb:9f:a4:3b:dc:2a:66:34:b7:95:1c:2d:3c:3f:63:
                    ad:9a:cc:39:b3:95:20:07:a8:af:33:bb:56:b8:78:
                    79:0a:68:3d:c0:34:db:aa:96:0f:63:e0:00:02:a9:
                    ed:dc:68:ee:46:54:09:87:b2:7d:6e:f1:d6:dc:c4:
                    6c:f4:f4:e1:7b:1b:0c:50:22:c9:79:c1:b8:13:c0:
                    fa:19:b9:b6:a3:42:68:65:d7:ac:a9:80:9d:34:ac:
                    1b:f1:6e:86:0e:15:15:6e:52:90:b0:74:72:46:43:
                    57:6b:ee:c1:d8:46:8d:08:8c:f0:49:e2:45:fa:11:
                    e2:fa:e2:46:44:14:a9:76:8f:c3:0d:9c:10:82:aa:
                    9b:4e:db:17:ae:e5:55:eb:00:db:b1:70:ba:5d:b0:
                    75:f4:ce:2c:6c:43:b0:b3:41:66:eb:91:23:fb:10:
                    a0:bf:69:47:7a:67:5b:3b:03:b5:82:70:68:2e:18:
                    9e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:40:3C:91:2D:CD:EF:B7:AA:8D:08:55:51:1B:F9:26:A5:4C:04:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/18024ed0-4264-3f38-b6a7-724af2917340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2ef::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:b9:b4:11:d8:c9:f1:c7:60:87:ff:08:fe:8a:ae:e0:32:7b:
         f0:b1:8d:b8:b5:7e:fa:31:ad:af:0f:96:aa:78:93:1c:98:59:
         1d:1b:05:42:04:fa:4f:f3:0d:bb:da:0d:0c:db:3f:63:03:a2:
         fb:65:53:4b:3c:49:a7:e0:af:f9:81:fd:0a:b2:cc:5e:95:e6:
         d2:ee:6f:74:3e:3b:00:73:1b:94:30:12:8a:45:31:48:3b:51:
         71:d4:86:bc:71:67:e1:a3:f8:a6:b5:ae:87:66:20:bd:24:b8:
         28:aa:04:66:72:db:c3:fe:24:8d:07:5a:0b:00:c0:44:6b:12:
         e3:f6:0f:d3:6d:b9:3c:8f:6d:ba:f9:a9:06:fd:a1:ad:7f:5b:
         57:a9:fa:8b:3f:c9:fa:24:7e:97:09:1e:bf:20:be:94:9e:91:
         a1:12:79:9e:78:31:f8:5e:02:23:df:b6:39:6c:13:c7:d1:5e:
         37:a1:56:5b:97:e0:df:32:29:45:11:75:17:63:99:d3:02:f4:
         3e:65:47:62:dd:cd:2d:a8:2a:eb:4b:db:0e:eb:55:1c:17:78:
         56:bb:de:83:aa:16:ee:99:0e:7e:4c:86:6d:bf:bc:b6:61:48:
         74:f0:70:6b:1e:7f:df:b9:39:12:cf:ab:17:ae:7b:d0:40:c8:
         59:b5:8c:ce
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W3RDKqRenqM5GAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
OTc3N2NjNzUtYmM1Yi00YTVlLTkwNDItNzQzNTViN2QwMWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYlg+JTY8XYnjCEgmm2QyMaUuw7Auae5D6qu
HYVc2kzJDZmd0YLqIn7gJi00HYKBnZCTUP16vnLcX7REggmmIPzHROuCue+fHge7
n6Q73CpmNLeVHC08P2Otmsw5s5UgB6ivM7tWuHh5Cmg9wDTbqpYPY+AAAqnt3Gju
RlQJh7J9bvHW3MRs9PThexsMUCLJecG4E8D6Gbm2o0JoZdesqYCdNKwb8W6GDhUV
blKQsHRyRkNXa+7B2EaNCIzwSeJF+hHi+uJGRBSpdo/DDZwQgqqbTtsXruVV6wDb
sXC6XbB19M4sbEOws0Fm65Ej+xCgv2lHemdbOwO1gnBoLhieqwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFBAPJEtze+3qo0IVVEb+SalTAQ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTgwMjRlZDAtNDI2NC0z
ZjM4LWI2YTctNzI0YWYyOTE3MzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALv
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHG5tBHYyfHHYIf/CP6KruAye/Cxjbi1fvoxra8Plqp4kxyYWR0b
BUIE+k/zDbvaDQzbP2MDovtlU0s8Safgr/mB/QqyzF6V5tLub3Q+OwBzG5QwEopF
MUg7UXHUhrxxZ+Gj+Ka1rodmIL0kuCiqBGZy28P+JI0HWgsAwERrEuP2D9NtuTyP
bbr5qQb9oa1/W1ep+os/yfokfpcJHr8gvpSekaESeZ54MfheAiPftjlsE8fRXjeh
VluX4N8yKUURdRdjmdMC9D5lR2LdzS2oKutL2w7rVRwXeFa73oOqFu6ZDn5Mhm2/
vLZhSHTwcGsef9+5ORLPqxeue9BAyFm1jM4=
-----END CERTIFICATE-----