Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e1fa0f3f-8a38-39a9-82b2-2481790f282b.roa
File:                     e1fa0f3f-8a38-39a9-82b2-2481790f282b.roa (raw, json)
Hash identifier:          7voWs9IUUtLeMvTTmpzPuzoyP+lgxWrya3SR22+a1lk=
Subject key identifier:   ED:F7:B0:E7:9E:6C:30:29:16:75:73:DF:FA:D6:FB:D0:F4:69:C4:8C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA661AC07B8DA834F76E080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e1fa0f3f-8a38-39a9-82b2-2481790f282b.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     29762
IP address blocks:        2001:470:57::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:61:ac:07:b8:da:83:4f:76:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=915a8f52-f1f4-4d3f-b604-8f1630bc13ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8d:52:7b:33:ec:64:db:71:9e:77:40:9d:2b:
                    1b:51:b3:f6:d5:bd:e9:f5:c0:85:d3:23:ec:58:f7:
                    88:b6:8e:b8:0d:f1:e5:fb:49:d2:a0:f3:b3:00:48:
                    f9:41:14:46:00:c1:f1:7b:5d:72:e7:7e:1d:1a:a7:
                    f1:5b:b5:fd:2c:d9:fc:7f:96:35:bd:4b:0b:c6:05:
                    24:2b:d1:19:ba:18:e4:f7:a9:ec:7c:ba:47:0c:df:
                    a3:58:fb:36:f8:da:50:d3:a8:5e:6d:83:5a:b0:0b:
                    e5:bc:17:f2:37:c8:3b:8b:93:cb:62:17:f1:21:df:
                    52:99:14:30:e0:d5:7d:92:a5:e2:91:30:13:b3:14:
                    ac:e4:53:6f:41:d9:2c:b5:c5:d7:3e:4b:ab:da:f3:
                    e4:cb:b6:8d:2c:13:13:ad:16:2b:3e:b3:11:d1:94:
                    53:f3:02:ed:46:62:05:40:1c:cd:10:e7:0b:08:69:
                    c0:8c:e5:a2:11:60:10:17:85:d7:1e:f7:09:58:2b:
                    49:56:b4:3f:bc:05:73:5b:1b:e4:6e:8f:37:fd:9c:
                    32:08:70:b1:81:78:b3:19:9d:57:03:04:a9:3a:89:
                    56:d6:e5:80:e0:1f:3e:eb:d9:34:8e:ed:24:33:43:
                    7b:07:5d:69:1b:74:d1:7c:68:b8:70:10:62:31:2b:
                    0e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F7:B0:E7:9E:6C:30:29:16:75:73:DF:FA:D6:FB:D0:F4:69:C4:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e1fa0f3f-8a38-39a9-82b2-2481790f282b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:57::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:3a:cb:43:a5:d0:2b:53:60:3c:ef:3b:5e:87:b8:6a:71:7e:
         58:bc:13:48:a8:25:bc:1c:a1:a4:bb:0c:38:22:10:ed:b4:d8:
         c6:25:e4:88:53:68:a3:28:9d:8f:3a:8e:2c:49:54:15:36:a5:
         30:e1:39:4e:53:bc:49:b0:db:83:02:42:a0:bc:45:2a:2a:15:
         52:cd:b0:cb:3e:d0:cf:33:fc:fd:5b:aa:86:12:e0:33:e4:74:
         eb:b6:a0:15:05:d8:90:57:4c:bc:1d:7a:23:b8:0c:e9:01:81:
         50:41:17:c7:7c:07:20:a0:df:09:84:8f:22:bf:4c:ff:e8:29:
         2d:f6:33:fe:d6:c2:39:d4:81:5d:46:be:f3:c8:9b:b8:34:c3:
         23:76:80:e9:e3:de:db:f2:ba:72:f3:55:f1:3d:4e:4b:41:bd:
         79:42:75:d8:8e:9c:04:18:e0:66:39:33:6e:c1:16:d4:d7:1e:
         ae:ce:80:fa:30:7f:05:1b:4c:9f:e0:76:f9:de:16:d6:51:72:
         bc:30:e9:07:5a:60:4c:fb:e3:90:23:71:fc:da:70:bc:11:8e:
         8f:0a:28:4b:3f:05:e5:a2:b4:fd:9e:19:bd:55:b6:8b:be:64:
         ea:49:80:5a:da:7e:9b:8b:cd:2b:56:e1:ef:ab:eb:82:6b:7a:
         0f:ee:90:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----