Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209043.roa
File:                     AS209043.roa (raw, json)
Hash identifier:          HHa3eFOBOOZusPek+8oQMwUeS1dWLg+J5TpnuMnzlJM=
Subject key identifier:   74:70:C6:40:37:93:26:1C:B7:BD:A7:17:C1:C6:2B:8A:09:EF:C3:42
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       4B2661D8E11F48EF90DBE5943260B7FAC2759AC6
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209043.roa
Signing time:             Thu 20 Apr 2023 10:33:19 +0000
ROA not before:           Thu 20 Apr 2023 10:28:19 +0000
ROA not after:            Thu 18 Apr 2024 10:33:19 +0000
asID:                     209043
IP address blocks:        140.99.238.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:26:61:d8:e1:1f:48:ef:90:db:e5:94:32:60:b7:fa:c2:75:9a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Apr 20 10:28:19 2023 GMT
            Not After : Apr 18 10:33:19 2024 GMT
        Subject: CN=7470C6403793261CB7BDA717C1C62B8A09EFC342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2a:bc:7c:ae:07:c6:8a:2b:b2:fc:c8:c9:ca:
                    6f:b2:a8:63:b3:37:9b:1d:cb:95:0c:ff:eb:a5:ee:
                    c3:07:ee:b9:b2:fa:af:75:b4:61:10:d5:74:79:bd:
                    b7:7e:ae:0c:d4:88:4b:54:ca:02:d1:4c:53:ef:4b:
                    b1:ed:0d:15:8c:4a:4a:da:9d:9b:3b:54:14:5a:fd:
                    31:43:22:7c:84:1a:08:64:ba:aa:ac:57:06:d6:78:
                    ac:0d:e1:3a:ab:d4:2e:30:20:58:8a:6a:62:e9:e8:
                    73:b2:dd:0a:13:aa:70:fb:05:72:46:68:3c:82:e1:
                    75:f4:72:c6:f9:c4:78:94:f0:f5:77:1d:4b:e6:46:
                    cb:e8:bc:1e:fc:57:3e:cc:3f:59:12:14:c9:80:bd:
                    96:5c:95:ae:db:20:12:48:79:c5:14:3f:28:eb:36:
                    68:e6:30:4b:fc:90:9b:4b:37:72:0e:a8:d7:85:7c:
                    de:cb:50:f4:ac:ca:92:98:b2:fc:dd:09:fe:aa:1a:
                    46:f0:c0:dd:64:d3:f0:c2:c8:61:3e:cf:da:fe:a5:
                    e6:ea:64:e5:3c:9d:45:19:a6:b4:36:48:00:70:d5:
                    06:06:cd:9e:29:7c:e4:02:78:ab:83:1e:79:13:ea:
                    20:0d:f1:54:29:78:6f:ab:cb:c4:3c:4c:77:da:1c:
                    be:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:70:C6:40:37:93:26:1C:B7:BD:A7:17:C1:C6:2B:8A:09:EF:C3:42
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209043.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:81:75:f0:db:f0:62:81:5e:ed:ab:88:76:06:20:85:2d:e1:
         f3:76:72:fa:e3:0d:60:8c:ad:e1:18:b3:f9:4d:e5:70:66:f9:
         27:1f:7c:33:ab:67:63:9e:8e:ee:4b:d9:b0:84:be:95:84:36:
         60:0b:01:2c:4f:0d:ce:2f:1c:05:13:e6:d1:dd:6b:7e:15:b8:
         78:d6:a5:f8:d7:4a:f8:25:90:24:3b:73:b2:c6:25:f4:93:97:
         33:c4:05:86:14:2d:d1:33:c5:5b:14:a7:4c:30:f6:5a:a9:1b:
         91:a1:4d:c9:20:10:af:61:fb:fa:ba:f4:2b:c7:b4:98:98:8b:
         e4:f7:57:dd:ae:35:c2:66:a8:ca:9e:65:94:c0:c8:33:dc:9f:
         b9:01:82:01:b7:0c:d1:d3:03:66:55:8b:d5:99:fe:96:c7:e7:
         b3:a5:79:d3:5f:25:ee:4f:09:71:c5:62:0e:f9:70:b3:47:2b:
         9e:86:fd:52:6c:d0:34:98:c2:2f:96:bf:61:06:7f:0e:e7:c8:
         93:30:b3:7b:eb:37:01:df:14:82:6a:df:7c:d5:22:8e:91:8c:
         04:bb:ff:70:3c:94:9c:15:58:d4:9b:44:3e:24:c8:5a:34:e9:
         19:b5:93:8b:3b:be:e3:36:e2:72:29:50:e9:6b:32:18:0e:dc:
         d6:54:6a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----