Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b784102f-ecea-3d0b-bc95-16a3d538ebfb.roa
File:                     b784102f-ecea-3d0b-bc95-16a3d538ebfb.roa (raw, json)
Hash identifier:          K7DAHULzGXJxWAeo0V3r+TkBPG5mfJUml/Qz8FJJoeI=
Subject key identifier:   BD:8A:14:82:89:DF:29:35:8B:67:14:C7:A6:7B:87:DE:89:32:3A:F7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D79351A0DE3AD989981BE37A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b784102f-ecea-3d0b-bc95-16a3d538ebfb.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     394330
IP address blocks:        2001:470:b3::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:35:1a:0d:e3:ad:98:99:81:be:37:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=eb5526c3-0e34-4d57-97a4-accc252fe206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c4:df:17:7a:54:17:af:5b:58:be:8d:4e:6d:
                    e9:0a:63:ee:42:0a:12:83:b3:11:bd:36:8a:8c:1c:
                    80:1c:a7:ec:e6:0e:94:e8:05:6f:8b:28:92:82:f1:
                    27:f6:4a:49:2b:86:e5:b9:4b:64:98:9a:9c:14:96:
                    60:b2:57:00:2e:84:36:9c:fa:c0:af:93:c1:a2:7d:
                    bc:59:ea:65:e5:55:ba:bd:f9:c2:be:25:ef:4f:87:
                    70:28:f9:95:d7:db:8a:5a:9f:50:73:f6:4c:bc:f3:
                    7a:c9:63:d1:58:23:c6:16:dd:6f:6e:29:81:f7:97:
                    eb:4d:35:4b:a4:3f:a5:43:c0:31:89:d8:e1:56:00:
                    86:b7:06:3a:04:9b:64:75:18:cc:39:6e:d0:73:8e:
                    8d:76:c1:81:e1:b5:05:1a:04:07:94:96:c8:ff:99:
                    8c:1a:b0:ae:0b:fa:12:ec:36:d1:e6:2a:a1:12:89:
                    21:dc:ff:c4:72:4a:fe:c1:60:8f:ce:6d:6a:a7:be:
                    fe:12:0d:38:49:e9:85:90:50:ee:f0:69:41:89:a5:
                    76:37:c3:b7:65:94:bb:c6:e6:a9:97:54:36:9a:47:
                    22:59:8b:08:00:c3:f3:5c:80:94:02:84:55:f7:e0:
                    5e:5b:26:36:a9:3a:7e:e5:69:ff:73:13:66:29:c0:
                    50:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8A:14:82:89:DF:29:35:8B:67:14:C7:A6:7B:87:DE:89:32:3A:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b784102f-ecea-3d0b-bc95-16a3d538ebfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:b3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:f3:f3:d6:8a:9b:78:4b:65:c5:c4:64:a6:2d:06:98:ea:ef:
         73:80:2e:54:8c:07:cd:c2:5d:56:48:98:1e:5b:35:22:20:92:
         72:25:91:fc:c9:76:8d:21:d6:43:ca:b0:09:87:bc:4d:c5:3a:
         85:57:82:e9:9e:26:90:69:d7:c9:87:84:80:81:46:06:b6:5c:
         c7:31:7b:58:d2:e3:6b:16:5b:93:9d:26:fc:c4:e9:18:97:20:
         b7:82:1a:45:da:3c:0b:5c:40:bf:7b:0e:41:3e:cb:25:37:15:
         f4:d6:8a:60:c0:5c:f5:b2:06:07:60:61:44:b1:31:1f:bf:1a:
         e5:5a:22:3b:19:3e:52:15:99:af:dd:14:67:9c:ef:c5:37:f0:
         92:41:81:12:43:bd:43:30:1e:c9:08:47:88:0a:67:7b:ee:4c:
         af:76:bd:c2:de:22:cf:ec:31:a1:de:03:41:1d:de:bd:34:df:
         85:35:c8:ef:ed:66:7f:f0:13:d7:70:bc:c9:74:e6:3a:a9:76:
         61:1d:9d:5e:98:b0:dd:e5:b3:eb:0f:ad:ae:0a:de:d9:d4:4b:
         d7:aa:31:48:9c:f8:f5:17:bd:57:b0:dd:da:91:71:52:a7:73:
         41:86:a5:40:9f:5e:68:5e:39:b7:ac:32:31:11:ee:8f:62:77:
         08:83:ea:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----