Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08c6ef38-cee2-3fa1-826b-42344e0a8687.roa
File:                     08c6ef38-cee2-3fa1-826b-42344e0a8687.roa (raw, json)
Hash identifier:          JgHQqVg9yQCagZr7L/nRWEmatNRu3jGTGYZMN4fkGMU=
Subject key identifier:   50:14:0B:A3:47:9D:F4:63:0E:C0:FF:73:96:C4:DD:F7:EB:F5:E4:4E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285844D05207173EA7978714BB7000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08c6ef38-cee2-3fa1-826b-42344e0a8687.roa
Signing time:             Tue 06 Feb 2024 12:00:00 +0000
ROA not before:           Tue 06 Feb 2024 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        172.68.121.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d0:52:07:17:3e:a7:97:87:14:bb:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb  6 12:00:00 2024 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=f8a722a7-a9bb-45eb-8a21-f3ff38e4df59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7c:0e:53:25:ef:86:5b:ce:78:92:5e:e2:39:
                    49:72:90:ac:6f:57:0e:e8:3b:10:a5:0d:71:e6:b3:
                    6c:9f:3e:91:11:eb:99:c5:79:c2:06:6f:97:80:3a:
                    bd:4b:2d:58:11:86:8b:93:a2:10:66:ea:76:4c:d5:
                    16:a5:56:7d:a7:5e:0c:20:42:56:40:05:d3:48:dc:
                    b1:16:f9:ed:57:c7:d8:da:19:cd:16:a9:9b:d5:92:
                    d1:7f:8a:ee:2f:a5:5b:14:06:42:26:6a:33:28:15:
                    aa:09:59:b9:0f:8a:c9:3f:1c:08:39:04:84:2c:24:
                    ee:fd:43:c2:ac:e8:0a:29:88:43:b9:52:6f:5c:31:
                    15:f8:fa:c7:bb:01:fa:3b:78:24:67:f6:40:03:44:
                    93:84:e0:58:11:84:93:31:79:58:cd:52:0b:57:94:
                    80:a4:df:be:97:5c:68:5f:d3:bb:ea:8d:a3:46:29:
                    19:50:0b:67:cd:51:1b:b6:5c:1c:8c:bc:91:d7:c6:
                    9c:cd:b3:c4:52:9c:30:9a:55:0e:d4:f4:26:a0:05:
                    47:aa:17:59:50:0b:72:96:76:79:89:05:ed:1b:b0:
                    64:8b:ca:49:f6:e1:b1:86:4c:74:30:3e:4a:bd:e8:
                    67:3c:06:55:a3:d2:94:07:58:8b:07:93:b1:76:3c:
                    61:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:14:0B:A3:47:9D:F4:63:0E:C0:FF:73:96:C4:DD:F7:EB:F5:E4:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08c6ef38-cee2-3fa1-826b-42344e0a8687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:c1:44:d2:13:e5:c9:b8:63:8f:b6:3c:55:3d:e9:8c:6f:05:
         b5:fc:a9:5e:15:07:01:ed:f7:38:f2:e2:f4:11:9e:8d:05:4e:
         d2:8b:d6:a4:fc:ad:1a:2c:b9:8d:00:55:6e:12:95:87:76:5f:
         6d:da:ee:c8:ef:bc:ba:cb:9e:7d:ed:39:c7:6e:e0:30:c6:fc:
         21:6a:3f:5b:49:d8:57:c3:e4:6a:91:63:c3:bd:f8:3c:c3:40:
         44:ea:c7:43:49:2f:de:f9:56:72:19:6c:1f:c3:28:0c:fe:a3:
         15:61:ef:8f:10:9a:48:ed:c6:eb:79:7e:ec:88:bd:7a:36:74:
         8d:f8:38:7b:07:b2:2c:cd:60:cf:f0:d4:f0:13:4b:2e:8f:d7:
         07:b7:d4:3e:c0:ec:58:96:38:35:74:fb:50:85:f1:fa:3f:11:
         07:8e:be:9a:e3:ac:bb:3e:73:cd:51:b5:a4:0a:4d:a5:ec:4d:
         22:22:29:db:55:59:a2:de:a5:a6:4f:7b:05:94:68:61:d3:5a:
         60:92:e3:40:56:ee:94:0d:0b:24:30:1d:07:c1:90:ac:a7:fc:
         11:24:13:1a:9f:4d:b9:c2:56:77:20:57:03:29:55:d7:14:0d:
         11:da:d0:78:cb:48:54:db:70:77:20:3f:a8:02:1f:12:4e:35:
         9b:40:b7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----