Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6fd732df-bad9-374e-8a77-11363cb0b387.roa
File:                     6fd732df-bad9-374e-8a77-11363cb0b387.roa (raw, json)
Hash identifier:          tnCbPQ5VC51T7DPY7z9bnSENRa+lBmCBDrONUijO9lQ=
Subject key identifier:   10:26:0B:60:1B:AB:D6:EE:6E:8E:38:F7:3E:C6:2C:24:6D:A6:C0:CC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D16378338E1A95C59C0E18100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6fd732df-bad9-374e-8a77-11363cb0b387.roa
Signing time:             Mon 28 Feb 2022 05:00:00 +0000
ROA not before:           Mon 28 Feb 2022 05:00:00 +0000
ROA not after:            Sun 28 Aug 2022 04:00:00 +0000
asID:                     399082
IP address blocks:        2001:470:5d::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:16:37:83:38:e1:a9:5c:59:c0:e1:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 28 05:00:00 2022 GMT
            Not After : Aug 28 04:00:00 2022 GMT
        Subject: CN=849a050c-41c5-4bc1-ae47-d6632d5a663a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a8:d2:46:78:d8:52:97:f8:af:c7:de:92:f0:
                    61:82:c5:25:8e:ba:0a:ef:56:ff:ed:67:70:17:bc:
                    44:02:ff:66:4c:0d:6e:4c:eb:44:69:f3:ce:f6:df:
                    75:8e:59:f4:85:a4:1a:91:91:7f:10:bf:b4:c6:b0:
                    e0:97:91:2e:d3:f9:72:4f:02:14:31:ee:7a:29:ab:
                    d5:1b:26:f9:a5:95:41:01:86:86:20:1d:a0:40:99:
                    e4:f2:e6:92:44:7a:b6:c5:b2:23:59:7c:45:14:32:
                    dc:11:1f:b0:0a:57:cc:51:8f:bc:76:ba:b0:8d:79:
                    35:ae:29:ab:06:53:3c:0a:d2:07:05:be:06:ef:e3:
                    99:31:50:3e:e6:70:2b:9d:10:ec:de:08:86:79:f0:
                    30:7c:39:e0:3f:1d:ba:13:91:54:f0:8b:e8:be:f0:
                    60:db:6c:c7:ea:11:f0:5f:99:a0:6a:26:74:2a:60:
                    ce:26:56:a1:18:f1:14:5c:40:ae:50:05:09:69:60:
                    1d:fc:fb:47:d6:9b:94:22:10:b5:27:ab:2d:ae:7a:
                    1f:97:c2:f4:99:18:39:2b:16:75:45:9c:9e:28:08:
                    f4:34:6b:2b:13:1a:9c:87:d5:7b:bb:b2:49:f6:ea:
                    85:ea:ea:1b:32:bf:6f:bb:d2:e9:67:b5:c2:2a:35:
                    2d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:26:0B:60:1B:AB:D6:EE:6E:8E:38:F7:3E:C6:2C:24:6D:A6:C0:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6fd732df-bad9-374e-8a77-11363cb0b387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:5d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:93:70:bb:4b:ed:4f:5e:07:e1:31:9a:4e:be:cf:2a:3c:e7:
         ca:c3:1c:29:11:c5:98:32:52:ec:73:08:3f:74:fe:1e:c4:90:
         eb:83:64:a7:56:a7:e2:72:b4:8d:51:0d:7c:94:99:8a:35:af:
         b9:8f:6d:b0:ec:a0:8b:42:01:58:1c:44:37:6b:88:56:59:0a:
         03:55:a7:dc:b4:ad:86:73:bb:f8:b6:57:f0:85:1e:c3:03:da:
         d0:8f:b4:bd:d8:18:13:41:6c:ae:77:58:67:dd:7a:49:3d:0a:
         21:3f:13:d2:7b:d6:27:0d:b1:5c:3e:c3:ea:8b:e1:8f:6b:62:
         9f:87:0a:0e:57:45:03:42:e3:8d:50:f2:0d:3c:41:52:c3:41:
         5d:bf:50:5c:de:df:9f:92:4d:d9:96:ac:d0:ed:a4:d1:b5:41:
         06:5a:f0:79:f7:2e:37:43:89:03:b9:ea:fb:11:fd:71:55:52:
         ba:06:f7:9b:7c:7d:73:1b:a0:19:84:83:e7:3b:60:55:01:be:
         1b:ba:ab:63:c7:58:10:1e:36:7e:2c:85:7c:13:75:a2:2d:54:
         e9:ae:7e:d0:45:d0:69:74:3d:41:41:24:9c:56:38:56:af:2b:
         f4:66:ad:90:b9:45:bb:6e:32:90:f5:f7:0f:3e:91:62:35:1e:
         a6:82:eb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:43 2023 by rpki-client on console-fra.rpki-client.org