Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b6bc72c2-3f86-36f7-9d2b-9536624bc6aa.roa
File:                     b6bc72c2-3f86-36f7-9d2b-9536624bc6aa.roa (raw, json)
Hash identifier:          3TQHfs1fC4A4Lq8HGuryHv77DnvLCh0D0UF5SoKh1hg=
Subject key identifier:   30:CD:E2:71:45:8F:C3:9B:1F:60:95:D4:D8:0C:EE:0C:AC:69:F3:5B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583DF40B2AB897FFF2366E587EC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b6bc72c2-3f86-36f7-9d2b-9536624bc6aa.roa
Signing time:             Wed 18 May 2022 12:00:00 +0000
ROA not before:           Wed 18 May 2022 12:00:00 +0000
ROA not after:            Sat 19 Nov 2022 05:00:00 +0000
asID:                     399203
IP address blocks:        2001:470:cf::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f4:0b:2a:b8:97:ff:f2:36:6e:58:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 18 12:00:00 2022 GMT
            Not After : Nov 19 05:00:00 2022 GMT
        Subject: CN=e29e5118-d60e-4748-be58-6a4721ed2896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:12:db:84:1a:17:e3:2b:c7:49:06:47:87:eb:
                    42:3a:e7:90:22:ba:8d:ca:65:28:82:d7:49:65:fa:
                    57:ed:9c:b9:fe:6e:2b:86:26:2d:cd:14:04:ea:53:
                    42:5b:fb:e1:b3:11:1a:98:75:b3:60:ec:0b:cb:07:
                    4e:47:0c:b1:26:d2:60:f6:13:06:fd:44:5b:c7:b4:
                    ac:55:25:12:fe:71:d0:43:41:1d:8c:96:69:91:70:
                    b1:5c:83:2c:7e:ef:dc:da:a2:fa:c9:1e:04:b8:69:
                    bf:ae:b6:d7:43:ba:68:93:14:bc:94:03:81:68:ac:
                    84:0c:9a:0e:e3:4c:09:e9:3b:cd:18:b5:85:82:3d:
                    ee:1c:12:56:da:f4:be:97:35:a0:7d:45:90:58:41:
                    0d:d2:40:f6:12:c2:13:f0:6d:91:ee:05:d0:f6:77:
                    27:04:1a:e9:18:e8:3a:7f:64:00:c3:6a:35:0f:38:
                    22:15:14:39:23:7b:6b:cd:f1:b3:53:8a:3a:8d:e3:
                    61:67:ff:ae:07:2b:70:36:e3:44:a0:d8:c5:bc:9e:
                    63:95:f3:0f:65:52:b8:1b:e4:e4:c2:dd:00:36:b6:
                    fc:aa:42:4a:66:d6:6d:de:0d:42:62:1e:0e:a5:ff:
                    dc:9c:1c:bc:fc:4a:a3:04:88:d7:3d:a3:00:be:3a:
                    ed:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CD:E2:71:45:8F:C3:9B:1F:60:95:D4:D8:0C:EE:0C:AC:69:F3:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b6bc72c2-3f86-36f7-9d2b-9536624bc6aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:cf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:24:e6:34:42:27:be:52:cd:25:25:65:33:e6:52:d3:9e:de:
         78:7b:f0:8e:4f:ab:73:76:07:05:32:f0:29:16:49:61:c3:2f:
         96:b7:f3:ac:38:fa:30:87:25:00:20:f2:8d:a2:eb:ec:3f:45:
         e1:81:05:47:a4:a6:9d:98:89:8a:cb:f0:f9:14:39:92:99:d7:
         82:8b:27:f3:05:ac:c4:4e:5e:ff:d5:af:8d:99:8b:dc:2d:9e:
         fb:92:d2:6e:c9:fe:0a:d1:9e:24:16:8e:50:3c:21:4b:49:e7:
         21:ec:da:2d:69:10:66:54:90:d1:b2:4b:18:d2:dc:1d:8a:2c:
         3b:38:12:52:07:4d:73:0a:59:4e:3b:a5:81:2c:cf:5a:2b:f2:
         3e:67:f7:d7:55:90:2d:eb:10:3d:85:ee:51:a3:b0:84:cf:3a:
         71:dd:d6:87:63:c7:8e:73:b9:ed:2f:f1:a8:f3:c3:08:0e:f4:
         5e:1d:57:8e:09:e5:b5:b6:83:bb:ae:9e:ac:c5:53:a8:1a:57:
         f6:17:72:a8:0b:ee:3b:ae:77:18:67:9d:27:07:d8:6e:c2:6b:
         ee:99:a6:65:5a:9f:af:83:af:ea:89:db:e2:cf:af:66:2b:b8:
         55:ef:93:66:89:23:ee:8f:96:dd:33:c1:77:d3:44:0b:09:6f:
         e2:12:9c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----