Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2acc4643-b885-3333-b8c1-70c9a95aa369.roa
File:                     2acc4643-b885-3333-b8c1-70c9a95aa369.roa (raw, json)
Hash identifier:          SuZwfttE3IsSqLsnEkKrrldNxyw4GItqpQ/w8QQTBGg=
Subject key identifier:   50:05:4C:A0:C8:76:72:ED:A8:82:EB:CA:85:98:1D:85:29:25:00:B3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A518A8C90208E35C404C560
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2acc4643-b885-3333-b8c1-70c9a95aa369.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     54371
IP address blocks:        2001:470:82::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:51:8a:8c:90:20:8e:35:c4:04:c5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=b6d20a24-9367-4e4d-8dc7-ad1ca896711f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2e:f4:77:36:71:c7:28:c6:2e:4a:d8:d5:fe:
                    a5:b3:c7:14:07:47:c5:54:30:19:8e:c7:b7:1a:ba:
                    dc:59:bc:9f:9b:07:d4:8a:79:1c:82:f7:0c:56:c8:
                    f5:18:23:36:53:78:10:bc:f6:8f:46:f2:94:e8:5d:
                    86:2d:7f:d0:21:32:a7:1d:54:17:8a:62:3d:68:bc:
                    a2:57:23:9b:c0:f4:66:02:6e:6d:d7:a2:ef:35:71:
                    03:cb:f2:63:d2:1c:2e:27:7b:a4:f1:f6:9c:fd:53:
                    07:61:c4:05:80:8c:ae:87:83:70:b8:e0:9a:ac:a0:
                    c4:e6:fd:77:cc:f2:e3:00:3d:1a:2e:48:e4:e0:bc:
                    21:01:3d:29:fa:4d:19:1d:b2:b4:3d:c9:71:3c:b3:
                    77:c1:79:1d:73:04:83:40:f0:9a:cc:c1:a8:37:a8:
                    f3:ab:27:51:16:d1:3f:5f:84:8b:91:85:f6:46:a8:
                    b3:c3:92:ea:45:a3:71:56:02:62:c6:71:fa:0d:9a:
                    d7:2b:23:53:f3:83:d3:6d:8d:fc:9a:4a:93:22:62:
                    e9:01:02:30:32:91:a4:7c:f9:a5:1d:dd:12:d8:24:
                    43:f3:d7:4b:4a:b1:0c:4f:38:21:8a:e4:1f:e8:0a:
                    fd:6d:1f:d8:d6:f6:25:c3:eb:40:fb:ab:b4:a3:00:
                    09:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:05:4C:A0:C8:76:72:ED:A8:82:EB:CA:85:98:1D:85:29:25:00:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2acc4643-b885-3333-b8c1-70c9a95aa369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:82::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:45:8e:a0:d4:ea:d0:f9:1c:00:50:20:83:0e:da:37:b2:59:
         cc:c4:e8:77:bf:f5:4b:dd:02:74:07:e5:24:47:07:81:34:2f:
         38:4b:e1:69:cb:6f:0d:81:72:ce:b4:0c:bf:1e:1a:62:24:bc:
         ee:7e:f0:81:07:1c:fc:bd:18:0b:03:2a:bd:f9:2d:4f:e4:d1:
         af:25:a0:4e:2b:17:b7:57:b6:b4:0c:84:eb:f7:6d:78:37:26:
         19:a9:d2:dd:33:ac:45:96:5e:3a:22:0d:97:1c:34:e9:c9:c9:
         0b:8e:b3:38:a7:3a:0f:e2:16:70:7d:c4:d4:28:19:e4:09:20:
         87:fb:ac:3e:b6:f0:9c:57:99:f9:27:c5:09:d9:34:cc:49:20:
         d5:49:81:ed:3a:30:58:03:79:86:23:e7:62:c5:e8:10:38:12:
         c5:81:be:0c:38:e7:7b:9c:1e:33:1b:d8:f0:03:e8:ed:19:85:
         52:00:17:09:0f:f4:82:33:c6:4d:03:9a:73:ad:99:1d:01:c0:
         b9:c8:a8:23:31:a4:42:20:27:35:a0:80:95:90:57:db:98:de:
         a6:65:b7:fd:b6:0e:47:87:2b:0d:59:67:c6:4b:66:2b:da:a4:
         1e:7c:2d:67:9a:ef:8c:21:71:5c:54:88:7e:43:5a:cc:60:7b:
         91:fd:8c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----