Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3137322e39392e3233322e302f32342d3234203d3e20333938333935.roa
File:                     3137322e39392e3233322e302f32342d3234203d3e20333938333935.roa (raw, json)
Hash identifier:          U4lP/Kaj/OjeLTvPIHX2Acn3Ay+45hj72FD2RKBheG8=
Subject key identifier:   7B:6C:81:3B:2A:35:22:C1:7C:DE:D7:C2:40:C5:C4:23:12:C0:AF:98
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       6341201617393513EAFC361DB830D2D402C71613
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3137322e39392e3233322e302f32342d3234203d3e20333938333935.roa
Signing time:             Sun 16 Apr 2023 09:53:31 +0000
ROA not before:           Sun 16 Apr 2023 09:48:31 +0000
ROA not after:            Sun 14 Apr 2024 09:53:31 +0000
asID:                     398395
IP address blocks:        172.99.232.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:41:20:16:17:39:35:13:ea:fc:36:1d:b8:30:d2:d4:02:c7:16:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Apr 16 09:48:31 2023 GMT
            Not After : Apr 14 09:53:31 2024 GMT
        Subject: CN=7B6C813B2A3522C17CDED7C240C5C42312C0AF98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b5:3e:8e:12:7e:4c:3f:cf:c1:77:b1:00:41:
                    25:a0:7b:12:50:e9:57:9e:40:da:df:9a:59:92:c5:
                    44:46:22:79:52:bf:7e:e6:8a:9b:ce:ee:c7:b8:45:
                    f9:18:20:dd:8e:7f:76:7a:ca:37:67:5b:b9:b2:73:
                    03:d0:17:eb:ce:15:92:17:80:ee:43:d2:37:cc:85:
                    57:38:1d:a4:a2:55:c4:3a:fe:94:ba:47:b6:a0:95:
                    5d:51:90:f8:ec:84:fa:5c:49:2e:70:ec:a1:b0:07:
                    23:61:aa:ae:77:14:c1:fc:61:67:2d:ce:4e:cc:33:
                    bb:de:96:66:d5:03:1d:4e:18:7c:4d:4c:3c:2c:27:
                    0c:4b:b1:92:ff:96:ce:23:d2:33:84:18:cd:34:3e:
                    da:76:2d:36:fa:75:dd:be:16:ed:71:37:5e:a4:f4:
                    a2:d4:a1:c2:99:6b:dc:bd:53:07:75:03:1d:dd:1e:
                    fd:c5:4e:62:81:e3:ce:14:c0:e0:c8:51:35:64:73:
                    22:1a:1a:f8:28:a9:0c:5b:68:06:09:2b:63:df:91:
                    44:09:41:61:90:48:54:ed:20:04:8f:87:45:67:d9:
                    d1:5c:72:b1:86:57:d9:18:d1:02:60:e5:38:06:4b:
                    50:2a:62:5f:9b:7a:c2:aa:e3:36:97:00:d5:87:3d:
                    29:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6C:81:3B:2A:35:22:C1:7C:DE:D7:C2:40:C5:C4:23:12:C0:AF:98
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3137322e39392e3233322e302f32342d3234203d3e20333938333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:0b:c0:b3:46:8b:58:c5:a6:55:71:27:1b:7a:1f:04:c8:1a:
         8f:81:c3:0b:36:78:23:05:21:77:9f:b6:1b:c4:ae:6e:f1:33:
         34:49:58:21:90:3e:9f:ef:44:d8:00:53:0a:c8:2f:2c:5a:6b:
         48:97:6e:62:29:9d:32:71:0e:c9:8a:95:a8:d4:38:ce:9c:1c:
         1d:80:dd:cc:59:7f:16:b2:5d:16:be:81:b9:86:0b:0a:39:b0:
         ef:dc:9b:43:41:c1:d7:a2:de:0d:03:6c:6d:b1:90:f8:ef:2b:
         50:5e:f0:27:e1:3d:78:b0:e0:4f:14:5d:a8:ba:96:e9:35:3f:
         2e:f5:dd:8c:e3:0c:d5:71:d9:a0:a4:6d:5d:7e:1d:7a:c6:ec:
         48:77:91:21:5b:84:31:44:68:1e:b4:1f:90:3a:0e:ca:39:62:
         7d:7b:2f:cb:c7:d5:6d:c5:78:af:d7:ad:89:ec:98:d2:89:d3:
         f3:17:62:66:85:7e:17:2e:a6:e3:9a:35:d2:4d:d4:1c:f2:4e:
         39:8c:14:e7:49:b5:85:96:31:36:55:76:8a:16:3e:69:94:47:
         18:22:6c:14:30:70:2d:e9:82:54:b9:df:7f:fe:ef:32:f6:1c:
         a5:2b:2f:31:38:3e:c5:08:cd:63:c3:da:c8:2a:38:b3:11:a6:
         10:4b:66:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----