Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2052e7ee-9c88-300b-b4a4-1db52b00590a.roa
File:                     2052e7ee-9c88-300b-b4a4-1db52b00590a.roa (raw, json)
Hash identifier:          SmxRBMcfSXjOmolQefvBqEXB/TH3NcRzO1Wuy+iXMpA=
Subject key identifier:   EE:89:78:9B:E8:49:1B:30:3F:CF:18:D9:7E:F0:9F:BD:C4:BD:02:32
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858402DAC784E59B6E1E0DADA4F40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2052e7ee-9c88-300b-b4a4-1db52b00590a.roa
Signing time:             Thu 08 Dec 2022 12:00:00 +0000
ROA not before:           Thu 08 Dec 2022 12:00:00 +0000
ROA not after:            Fri 09 Jun 2023 04:00:00 +0000
asID:                     397078
IP address blocks:        2001:470:78::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:2d:ac:78:4e:59:b6:e1:e0:da:da:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  8 12:00:00 2022 GMT
            Not After : Jun  9 04:00:00 2023 GMT
        Subject: CN=30c8016a-aaa9-4aac-8535-6b6d7c06abf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:29:3b:74:5d:9f:30:07:b1:b7:60:d4:d1:d7:
                    7f:9c:65:b5:49:a2:c8:9d:31:5d:9b:28:36:4d:8a:
                    9b:7d:e4:9b:74:cc:14:3a:f5:1a:b9:9d:dd:9a:ab:
                    78:83:49:29:40:00:4a:4c:3a:5b:62:26:db:ad:c6:
                    74:d9:d7:b1:f3:a6:34:e4:79:86:dd:e8:a4:72:2b:
                    29:ca:24:b9:d7:d5:8e:0c:76:2c:d7:32:77:d6:39:
                    c1:da:11:cd:ac:bf:58:49:9e:fb:f7:45:c5:f1:31:
                    cb:36:2c:41:a3:a3:94:95:ea:c8:00:ca:55:d2:f6:
                    ea:39:3e:0a:d5:77:61:b3:48:20:c1:2c:24:f8:3d:
                    a3:e5:4c:d6:c8:31:0f:5c:97:aa:4c:80:90:1b:09:
                    3f:80:d7:79:40:e5:94:f2:70:d6:e4:20:5f:51:85:
                    e8:77:ea:b7:fe:44:7f:71:a4:77:3e:4d:7f:b5:b9:
                    d9:9b:15:5b:32:48:30:f0:80:9a:61:c4:65:69:9c:
                    d8:9e:24:a3:b5:b1:d3:a5:1e:64:e8:21:df:1f:d8:
                    b0:ce:80:a8:f9:5f:ad:14:28:0d:fa:ed:ac:a1:da:
                    53:5a:bf:c6:73:84:f8:8b:f5:b7:4a:5d:42:b1:c2:
                    3c:f5:e8:95:e7:df:ef:55:5a:89:8b:b4:8b:58:27:
                    f9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:89:78:9B:E8:49:1B:30:3F:CF:18:D9:7E:F0:9F:BD:C4:BD:02:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2052e7ee-9c88-300b-b4a4-1db52b00590a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:78::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:d3:b7:19:b1:18:1b:74:bb:45:c6:41:39:dc:33:6e:c4:c6:
         66:d7:c1:e6:b2:03:c2:49:54:7c:65:47:a7:3d:1b:f7:06:82:
         1e:e1:63:95:b1:01:41:35:e4:c4:e0:99:ea:01:87:be:37:98:
         9e:74:58:90:34:ec:13:cf:ac:12:a4:cf:51:e3:3d:2e:7b:ef:
         04:de:8f:a0:05:ac:5a:5d:88:25:60:81:75:33:4c:60:09:08:
         71:8d:d1:8a:b2:cf:17:63:c9:82:57:6c:0b:e2:25:01:e7:bf:
         05:7e:d4:1e:20:11:6d:e5:6f:ed:fd:de:b9:50:55:5b:4c:5b:
         bb:1e:1b:93:a9:8d:75:d6:73:72:6b:5d:e2:57:fe:b1:aa:93:
         d3:b9:ac:70:a0:94:05:72:f2:56:42:36:db:20:f7:6a:14:45:
         08:de:10:f5:75:41:37:6a:26:b2:64:6a:18:4f:5c:3e:db:34:
         b4:e6:80:31:99:63:ae:8b:7d:2a:c6:dc:d3:da:17:e7:1b:a8:
         12:bb:ba:97:d5:42:9a:ee:b6:d4:56:73:87:4b:f8:1f:57:ec:
         78:4b:8a:ef:63:7a:f1:56:fd:15:29:15:b7:3c:68:dc:14:ba:
         5a:d8:fb:19:bf:64:a3:2e:4b:06:e0:78:df:b0:96:01:10:58:
         9a:c3:6c:86
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEAtrHhOWbbh4NraT0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMTIwODEyMDAwMFoXDTIzMDYwOTA0MDAwMFowLzEtMCsGA1UEAxMk
MzBjODAxNmEtYWFhOS00YWFjLTg1MzUtNmI2ZDdjMDZhYmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSk7dF2fMAext2DU0dd/nGW1SaLInTFdmyg2
TYqbfeSbdMwUOvUauZ3dmqt4g0kpQABKTDpbYibbrcZ02dex86Y05HmG3eikcisp
yiS519WODHYs1zJ31jnB2hHNrL9YSZ7790XF8THLNixBo6OUlerIAMpV0vbqOT4K
1Xdhs0ggwSwk+D2j5UzWyDEPXJeqTICQGwk/gNd5QOWU8nDW5CBfUYXod+q3/kR/
caR3Pk1/tbnZmxVbMkgw8ICaYcRlaZzYniSjtbHTpR5k6CHfH9iwzoCo+V+tFCgN
+u2sodpTWr/Gc4T4i/W3Sl1CscI89eiV59/vVVqJi7SLWCf5lwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO6JeJvoSRswP88Y2X7wn73EvQIyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjA1MmU3ZWUtOWM4OC0z
MDBiLWI0YTQtMWRiNTJiMDA1OTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAB4
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABXTtxmxGBt0u0XGQTncM27ExmbXweayA8JJVHxlR6c9G/cGgh7h
Y5WxAUE15MTgmeoBh743mJ50WJA07BPPrBKkz1HjPS577wTej6AFrFpdiCVggXUz
TGAJCHGN0YqyzxdjyYJXbAviJQHnvwV+1B4gEW3lb+393rlQVVtMW7seG5OpjXXW
c3JrXeJX/rGqk9O5rHCglAVy8lZCNtsg92oURQjeEPV1QTdqJrJkahhPXD7bNLTm
gDGZY66LfSrG3NPaF+cbqBK7upfVQpruttRWc4dL+B9X7HhLiu9jevFW/RUpFbc8
aNwUulrY+xm/ZKMuSwbgeN+wlgEQWJrDbIY=
-----END CERTIFICATE-----