Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/137cee11-5462-3c3b-b022-48f5ed70b720.roa
File:                     137cee11-5462-3c3b-b022-48f5ed70b720.roa (raw, json)
Hash identifier:          wbhs2TodOoARqAlYAKJMDvAwKPeLgAuBXchzD6+fn94=
Subject key identifier:   23:3F:9E:09:BA:5E:E3:25:3C:77:0E:6C:24:72:95:D1:33:AB:C6:80
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845F7E944690D38AD5564BD9500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/137cee11-5462-3c3b-b022-48f5ed70b720.roa
Signing time:             Thu 23 May 2024 13:00:34 +0000
ROA not before:           Thu 23 May 2024 13:00:34 +0000
ROA not after:            Wed 21 Aug 2024 13:00:34 +0000
asID:                     210222
IP address blocks:        2001:470:1b9::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f7:e9:44:69:0d:38:ad:55:64:bd:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 23 13:00:34 2024 GMT
            Not After : Aug 21 13:00:34 2024 GMT
        Subject: CN=c42ef829-463f-40a1-b351-cbf211996d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:67:25:23:2b:da:9c:31:f7:95:ac:71:f9:56:
                    2f:66:8d:0f:10:e6:04:71:24:a9:54:2f:b0:d7:e9:
                    1b:17:0d:de:66:7e:19:51:ba:37:5c:d8:93:a5:29:
                    3a:59:dc:5a:e5:60:85:9f:ab:ca:5d:84:c2:38:3b:
                    5e:d5:25:97:29:03:b1:24:d8:7b:bc:4f:04:9b:17:
                    76:19:d0:f9:63:52:a5:91:14:42:8b:25:8e:90:dd:
                    3c:74:59:db:be:81:8c:93:c4:d5:7c:95:d8:97:98:
                    d7:da:87:34:74:ef:dc:a1:b4:d7:05:9f:f8:a8:df:
                    52:b0:e6:44:2f:0e:d7:d3:68:31:79:8b:51:e7:ca:
                    c3:fc:10:e2:bc:ed:90:f1:48:39:44:a8:31:e9:40:
                    0f:0c:e2:e9:d2:a9:bc:ef:f5:40:6b:31:0d:6d:78:
                    df:fb:39:fe:09:67:b2:4b:75:92:8b:c6:af:27:b6:
                    1d:dd:05:f1:f3:7f:95:22:38:1d:b8:0e:a7:64:24:
                    ef:82:72:4b:34:83:ea:2a:65:5c:2a:71:a6:bc:de:
                    43:17:18:f0:0f:b5:05:eb:06:97:cc:e6:22:99:83:
                    7a:97:c3:30:a1:39:10:75:b9:f6:91:ce:09:db:66:
                    d7:87:3a:d9:bb:4a:a2:72:11:5d:13:19:fa:1b:80:
                    df:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3F:9E:09:BA:5E:E3:25:3C:77:0E:6C:24:72:95:D1:33:AB:C6:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/137cee11-5462-3c3b-b022-48f5ed70b720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1b9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:0f:df:b8:64:dd:ad:c0:87:50:87:f3:e1:8b:b3:fe:fa:b7:
         db:82:bc:7c:55:d1:52:2c:04:21:d8:53:bb:45:87:e3:6d:42:
         eb:f2:33:09:33:b3:f4:b3:ff:da:68:f9:fe:46:17:e6:9a:9b:
         5a:f1:03:42:d3:46:b5:ca:bd:d7:dc:55:9e:38:57:cb:f7:1c:
         df:e9:00:88:01:75:90:14:35:10:7c:0a:97:79:4e:6e:93:92:
         c6:75:e9:fb:4e:75:61:e6:34:1f:b5:d9:e4:23:f4:61:26:38:
         5d:a8:67:5a:c3:9a:2d:ee:38:b3:dd:f2:6c:ce:b5:21:a5:c7:
         08:54:a8:98:94:71:3e:ba:e7:5d:e3:b0:70:1b:e2:27:73:ac:
         41:9b:6f:5e:3d:23:b2:64:49:00:5d:5d:e8:7b:f8:e0:59:f0:
         79:cd:66:34:5c:95:79:7d:7f:46:5c:14:a5:ec:68:1f:03:15:
         09:ea:78:df:b0:66:a1:23:8a:15:74:f7:36:00:93:00:cf:b8:
         81:b1:85:dc:52:c5:08:df:06:38:eb:3f:37:a0:73:6f:b3:9b:
         b3:0f:14:c2:fe:ca:a1:4f:7f:6c:59:b5:b4:a4:4b:dd:ec:6f:
         11:a3:0f:02:22:56:fd:09:44:b7:10:5f:b7:65:24:40:a3:5b:
         73:86:a9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----