Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bcf3a78d-b719-39be-b909-f18111afad63.roa
File:                     bcf3a78d-b719-39be-b909-f18111afad63.roa (raw, json)
Hash identifier:          q86QhCQw7yVUmfg4st4XbysPXGI70bn347ykeIpHKSE=
Subject key identifier:   1B:95:E6:1F:0B:1B:B0:47:72:30:30:CA:81:A0:7E:20:2A:0F:7A:A4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648DBFB0D7E5370CB2CC3C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bcf3a78d-b719-39be-b909-f18111afad63.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     14363
IP address blocks:        2001:470:98::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8d:bf:b0:d7:e5:37:0c:b2:cc:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=dada923a-8fc8-4d49-8280-07bbc009f908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:bc:f5:33:63:26:ea:cc:ae:b5:77:68:e4:
                    aa:e7:ed:17:3f:59:d6:31:66:86:00:07:05:3c:2f:
                    b3:af:47:64:06:90:e7:e0:8a:df:8d:66:3c:d8:73:
                    a4:e9:1e:bb:28:16:98:f9:a0:52:6b:c4:9f:91:aa:
                    e7:31:06:e9:9a:b8:a6:9d:db:f6:6d:fc:7c:25:9c:
                    e7:50:19:bc:53:04:22:02:04:07:69:d4:c1:c5:90:
                    ad:91:dc:e5:19:ec:b3:e9:56:a6:8d:d3:77:ac:28:
                    43:74:5d:39:8b:e8:33:f6:91:7c:ae:80:97:7e:06:
                    9a:f3:a1:28:1b:de:e2:23:7e:8e:e1:6c:45:39:15:
                    3b:f9:b9:bb:c5:18:2b:5c:31:58:1b:76:cb:d4:42:
                    32:2a:12:cc:3b:00:8a:28:fd:0d:2e:48:74:84:c6:
                    42:99:b1:61:d6:dd:51:9d:2a:64:2a:78:49:4a:13:
                    4d:9d:dd:76:4c:24:93:86:90:3b:b8:af:3a:ea:12:
                    b5:f5:3a:17:dd:3f:cc:51:09:17:c8:da:e5:d8:c0:
                    01:9b:55:a8:1f:33:85:f9:2d:f9:67:e5:0e:3d:7d:
                    1a:fe:cc:62:37:3e:c9:c0:2c:7e:7a:9d:df:94:63:
                    d7:20:37:5e:32:d6:89:08:f4:50:cb:7a:09:b2:e8:
                    93:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:95:E6:1F:0B:1B:B0:47:72:30:30:CA:81:A0:7E:20:2A:0F:7A:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bcf3a78d-b719-39be-b909-f18111afad63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:98::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:42:23:25:5b:a1:6d:1c:f5:99:37:5a:7a:ab:f7:84:5d:ec:
         b3:81:e4:d9:25:ca:49:a0:8f:4a:78:bd:a3:68:c7:b5:33:52:
         8e:c0:b1:da:e3:06:f9:72:5c:db:c2:6b:5c:ef:00:45:75:6f:
         04:f2:36:37:97:44:05:1c:c5:23:44:b0:10:f6:46:cf:c9:e1:
         9b:d2:70:b0:a1:2d:b1:b7:eb:53:f1:90:2b:c6:e1:b6:4d:b8:
         20:c5:d2:ad:27:ba:c3:e3:30:b0:c5:c3:4d:5f:f4:42:84:a0:
         6b:e5:f5:98:32:a9:21:23:3c:ea:35:bd:ac:36:ab:5a:c2:19:
         2c:e3:42:e3:aa:dc:7f:c0:8a:22:d9:4d:f1:fe:54:4c:63:8b:
         d5:d2:03:55:a4:15:7b:94:e3:3f:a3:b6:1b:27:b6:98:8e:83:
         e4:a3:ac:bc:b3:10:78:6e:59:93:d3:2c:b2:8f:5b:57:1e:bc:
         70:78:c8:06:c8:9a:10:2c:16:6c:a9:f9:d6:3e:dd:29:c2:fc:
         42:8f:e4:30:0e:0f:a5:b7:29:74:60:dd:48:ea:17:d9:fe:a2:
         71:43:c5:d4:65:50:00:64:d7:f7:e2:12:b8:ec:8e:61:e3:3c:
         79:93:06:e3:f2:0f:c0:a2:cb:0b:96:8e:cd:8c:08:4b:4e:fc:
         b8:bd:6c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----