Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/14c7a221-686d-3f3d-a166-05d1a10f1a13.roa
File:                     14c7a221-686d-3f3d-a166-05d1a10f1a13.roa (raw, json)
Hash identifier:          43NQuMKaquuEp35+mbWAfXvh45b/aL7tX6K/FQ0nw+g=
Subject key identifier:   5F:7B:E3:95:98:59:6E:3F:00:80:6E:59:3C:DB:0D:9F:59:0E:DE:1E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285845851B57BE61E080195C3A4D00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/14c7a221-686d-3f3d-a166-05d1a10f1a13.roa
Signing time:             Thu 11 Apr 2024 12:00:00 +0000
ROA not before:           Thu 11 Apr 2024 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        172.70.124.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:1b:57:be:61:e0:80:19:5c:3a:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 11 12:00:00 2024 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=113bc7b2-bf5a-416e-811b-a0af62a67528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3e:01:d0:67:2d:c6:e8:c7:fa:a0:a8:7d:8d:
                    73:f5:00:4a:a4:f8:78:d3:99:aa:d6:5b:77:8a:7c:
                    99:d8:bb:63:06:7c:64:aa:df:e4:ed:0c:ff:b8:5c:
                    d6:8c:9e:18:ad:dc:36:81:4c:c1:0b:a3:7a:d0:b2:
                    4e:66:66:ba:8f:28:33:d2:d3:b3:c8:87:a7:83:f4:
                    9a:4b:60:fc:c9:92:40:b7:bb:a9:b5:60:3c:2c:9b:
                    48:4e:e3:c9:be:42:9b:31:3d:74:53:55:41:32:76:
                    28:c8:a9:34:0a:db:4e:aa:7d:7e:fb:4e:c7:d7:21:
                    65:b2:af:dd:15:ee:32:4e:19:2c:9b:e0:c2:e9:b7:
                    bd:f6:55:87:12:bd:01:04:d3:b7:94:b7:a6:6f:99:
                    fc:3d:e6:60:24:f4:bb:23:72:af:20:5f:ac:5b:ae:
                    4f:d1:1d:ed:49:96:89:79:ed:0f:2f:95:5a:a3:95:
                    10:18:ac:7b:9a:5b:ab:0f:6a:20:24:f9:c1:59:40:
                    6e:ee:fa:fc:ed:3c:dd:e3:82:fb:87:8b:ec:d0:7f:
                    21:5e:90:37:7b:83:a5:1e:74:2e:70:a8:54:3e:56:
                    be:54:8e:20:52:b3:d2:fc:5d:16:2c:24:4b:38:fd:
                    fb:33:f7:3c:4d:fa:ab:b7:2a:e4:02:8b:c7:c2:ec:
                    88:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7B:E3:95:98:59:6E:3F:00:80:6E:59:3C:DB:0D:9F:59:0E:DE:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/14c7a221-686d-3f3d-a166-05d1a10f1a13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:db:33:40:9b:4a:8e:c6:b8:35:86:02:c7:63:45:df:10:89:
         54:d5:cd:4c:67:4f:f7:4f:39:0f:f3:14:51:dc:92:8e:9e:79:
         4b:98:65:eb:6f:64:36:3e:98:58:d0:cf:ff:10:7a:f7:94:df:
         e9:72:09:ac:35:82:e3:ce:af:56:06:91:87:e3:f6:27:21:e6:
         61:82:61:90:66:cd:4b:cb:c5:dd:52:dd:93:36:c8:e3:d4:17:
         54:ed:b2:99:28:d2:65:1e:5c:80:d0:8f:df:2e:0c:77:d3:62:
         fd:b4:fd:a0:f1:22:57:0c:da:6e:9f:79:a0:82:28:48:e0:ea:
         2b:be:d6:73:98:d1:3a:67:7b:66:6e:fe:ad:54:4b:87:49:0d:
         97:f8:86:b7:b3:b7:17:87:ae:3c:d2:62:8d:28:38:a7:fe:1e:
         0f:0f:4b:0f:c9:0e:74:33:8e:ff:8d:a4:95:ca:c7:b1:31:38:
         5f:10:4a:37:19:28:15:0a:b5:6a:e9:67:c6:92:ea:38:93:81:
         83:4f:a5:a7:35:30:9f:3c:ff:d7:7b:36:ae:ff:b5:c8:ff:7e:
         e4:7a:54:fa:d8:b9:34:a8:c6:53:5f:e7:a6:a6:4e:fb:df:e3:
         f8:c5:94:80:45:01:b7:8c:32:6c:84:1e:e7:4f:ed:d0:e7:fb:
         01:14:dd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----