Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb4da784-60e6-33f0-b522-bbaf94e16d2e.roa
File:                     bb4da784-60e6-33f0-b522-bbaf94e16d2e.roa (raw, json)
Hash identifier:          /E/U18UR2pspvMFTUGzRkxQjQenKnrXkGSYbUGrh41c=
Subject key identifier:   FA:E8:DD:5B:23:D0:25:D7:14:19:A9:46:95:74:D1:3C:8E:B5:64:57
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858404F2CA9CDFF73A58BE3EC94C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb4da784-60e6-33f0-b522-bbaf94e16d2e.roa
Signing time:             Tue 20 Dec 2022 12:00:00 +0000
ROA not before:           Tue 20 Dec 2022 12:00:00 +0000
ROA not after:            Wed 21 Jun 2023 04:00:00 +0000
asID:                     11399
IP address blocks:        2001:470:ed::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:4f:2c:a9:cd:ff:73:a5:8b:e3:ec:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec 20 12:00:00 2022 GMT
            Not After : Jun 21 04:00:00 2023 GMT
        Subject: CN=21837aaa-f08f-4a9c-8b3d-c7fdc726d2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:89:91:90:54:d7:b1:c9:57:e5:95:4e:63:ec:
                    23:0c:18:2c:cd:1e:38:76:36:1c:1f:3f:6a:f0:9f:
                    90:83:4a:be:8d:85:77:90:4b:2d:79:38:cb:7d:a5:
                    af:4f:ba:6e:c6:b5:13:d8:c0:da:3b:e4:0e:e5:6f:
                    09:b2:f3:42:c6:ca:1f:b4:46:15:c1:1e:bf:c5:69:
                    8b:f0:99:03:3d:86:4f:96:5f:3a:23:19:92:ff:48:
                    87:25:ac:31:89:8c:01:0c:8b:a8:7f:d6:e0:54:38:
                    3f:6d:51:63:e4:29:7c:3b:c3:72:1c:9f:2e:01:9f:
                    76:c6:d7:d6:b1:72:d3:7f:e0:0b:88:5a:b1:b6:1b:
                    10:e3:af:f3:ac:13:dd:e0:a7:c5:b5:1d:17:30:51:
                    47:53:95:48:60:23:53:b1:81:58:58:71:a8:0c:b7:
                    29:67:65:9e:9c:e7:70:09:58:6c:cb:6f:15:90:df:
                    07:85:42:4f:74:fe:09:09:9c:80:9e:31:6b:bc:8d:
                    38:1e:fb:1b:5b:a3:5a:68:f7:3f:9e:1f:05:a0:8e:
                    ed:1c:01:1c:35:22:d7:2b:d2:c3:85:45:31:c9:7c:
                    6b:8b:39:61:c4:01:0f:3f:cd:19:d5:22:56:74:4e:
                    c0:26:86:11:d5:ba:bb:2e:c8:16:8f:7e:99:0c:cb:
                    c8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E8:DD:5B:23:D0:25:D7:14:19:A9:46:95:74:D1:3C:8E:B5:64:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb4da784-60e6-33f0-b522-bbaf94e16d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:ed::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:36:36:b5:6c:89:ea:d8:22:5e:67:68:e2:64:36:9f:3d:89:
         82:f4:86:78:18:30:10:c0:d2:b3:53:de:18:55:d1:e3:11:dd:
         fa:70:5b:3e:1e:af:1e:c1:39:0d:97:cc:22:95:d3:a1:6e:7d:
         2f:a2:0d:a3:d0:7a:ed:89:5f:6a:ff:43:a8:45:a5:a4:8a:5a:
         66:a3:df:0b:35:51:48:d6:4b:20:81:1c:fe:02:75:fb:d7:21:
         d6:04:5c:f0:82:4c:6e:8d:53:5c:c7:2f:a1:a4:8a:b8:e1:09:
         46:8e:4c:c7:3f:86:da:d8:d0:e8:de:b7:0f:c1:b0:5a:d6:8d:
         1e:00:35:40:a7:50:40:6a:06:f7:21:2b:3a:1e:e0:40:b6:75:
         69:42:04:6b:e2:0b:92:65:5b:e4:bf:cd:ec:31:e0:ba:55:20:
         20:53:90:30:91:43:0c:92:03:0f:b8:ec:a7:e5:aa:53:9a:1a:
         86:f9:d3:f1:f3:a4:84:6d:5e:2f:b2:40:ef:bd:fe:0f:e9:a6:
         1b:09:31:d8:2c:b9:59:7f:4d:ab:dd:1d:66:33:fc:ed:3a:e2:
         9e:a4:e5:04:d8:20:98:a5:26:17:e9:f4:f8:f6:b7:64:bf:34:
         f8:5d:28:6a:d0:7c:1d:bd:aa:b4:d8:06:03:47:f2:35:81:59:
         80:d1:19:66
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEBPLKnN/3Oli+PslMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMTIyMDEyMDAwMFoXDTIzMDYyMTA0MDAwMFowLzEtMCsGA1UEAxMk
MjE4MzdhYWEtZjA4Zi00YTljLThiM2QtYzdmZGM3MjZkMmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYmRkFTXsclX5ZVOY+wjDBgszR44djYcHz9q
8J+Qg0q+jYV3kEsteTjLfaWvT7puxrUT2MDaO+QO5W8JsvNCxsoftEYVwR6/xWmL
8JkDPYZPll86IxmS/0iHJawxiYwBDIuof9bgVDg/bVFj5Cl8O8NyHJ8uAZ92xtfW
sXLTf+ALiFqxthsQ46/zrBPd4KfFtR0XMFFHU5VIYCNTsYFYWHGoDLcpZ2WenOdw
CVhsy28VkN8HhUJPdP4JCZyAnjFrvI04HvsbW6NaaPc/nh8FoI7tHAEcNSLXK9LD
hUUxyXxrizlhxAEPP80Z1SJWdE7AJoYR1bq7LsgWj36ZDMvIHwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPro3Vsj0CXXFBmpRpV00TyOtWRXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmI0ZGE3ODQtNjBlNi0z
M2YwLWI1MjItYmJhZjk0ZTE2ZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADt
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALM2NrVsierYIl5naOJkNp89iYL0hngYMBDA0rNT3hhV0eMR3fpw
Wz4erx7BOQ2XzCKV06FufS+iDaPQeu2JX2r/Q6hFpaSKWmaj3ws1UUjWSyCBHP4C
dfvXIdYEXPCCTG6NU1zHL6GkirjhCUaOTMc/htrY0Ojetw/BsFrWjR4ANUCnUEBq
BvchKzoe4EC2dWlCBGviC5JlW+S/zewx4LpVICBTkDCRQwySAw+47KflqlOaGob5
0/HzpIRtXi+yQO+9/g/pphsJMdgsuVl/TavdHWYz/O064p6k5QTYIJilJhfp9Pj2
t2S/NPhdKGrQfB29qrTYBgNH8jWBWYDRGWY=
-----END CERTIFICATE-----