Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/298ff628-4934-3724-bde2-eaaf5070ed8e.roa
File:                     298ff628-4934-3724-bde2-eaaf5070ed8e.roa (raw, json)
Hash identifier:          nHQ7G85iLbPpHNKhDKcXg18ByeXfWezvVWgh8x7ncb4=
Subject key identifier:   6E:27:0D:73:0E:0B:DB:9A:06:F9:13:C5:16:33:8A:3C:CF:DB:D7:84
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858455C1E3600CA4E027D5A7F4900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/298ff628-4934-3724-bde2-eaaf5070ed8e.roa
Signing time:             Wed 27 Mar 2024 12:00:00 +0000
ROA not before:           Wed 27 Mar 2024 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.243.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5c:1e:36:00:ca:4e:02:7d:5a:7f:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar 27 12:00:00 2024 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=bcfc1e58-8bbc-43f8-9cf1-50a3188949e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1d:6a:72:68:e1:45:c5:8e:99:bc:eb:53:1f:
                    ce:55:44:5f:dc:55:67:e8:ed:89:9d:28:f7:8e:1e:
                    92:f9:a1:f7:67:bb:6c:4c:d3:c6:3e:88:98:b3:ed:
                    25:9f:bf:5b:a2:15:96:72:c8:ba:cd:4d:4c:a3:14:
                    1a:65:47:2f:1d:03:6d:44:3a:1d:51:5c:63:6e:f5:
                    73:fb:25:92:47:51:95:0b:91:ba:e1:30:a9:49:8b:
                    88:f0:c4:a3:23:c7:d2:7b:a8:a2:b9:6d:5c:b5:1f:
                    e9:9c:ed:1c:d7:93:c4:7d:e9:a7:7f:fb:ff:94:18:
                    fb:ec:8b:c2:44:86:55:2a:94:e8:9e:6d:82:e2:66:
                    37:0d:89:86:15:83:0b:f2:21:2f:25:4c:0b:0d:90:
                    51:da:4f:de:4a:03:6c:18:b3:c1:37:e7:95:94:9f:
                    47:f8:48:ce:c5:75:f6:fa:af:c9:0a:d5:ac:98:e2:
                    6c:8d:b3:be:80:c4:dc:39:c8:35:ac:75:f0:16:27:
                    79:01:44:ce:f5:d0:01:fe:2b:45:05:1a:81:40:b6:
                    03:28:bd:c9:2b:18:aa:ea:49:96:41:e5:27:54:51:
                    24:51:85:a2:0b:a9:30:99:3e:b2:84:59:c3:d4:e1:
                    ff:ca:2e:55:f9:e8:9f:3c:10:9f:5c:6a:18:8b:99:
                    5b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:27:0D:73:0E:0B:DB:9A:06:F9:13:C5:16:33:8A:3C:CF:DB:D7:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/298ff628-4934-3724-bde2-eaaf5070ed8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:8d:5e:94:ad:cd:d5:bd:2e:36:4c:08:6c:7f:56:83:3d:39:
         a5:f5:94:8e:74:40:4e:3f:46:96:17:c1:04:f0:83:f8:0a:e8:
         64:bb:f3:86:1f:3f:8c:d9:95:e6:a8:d9:ab:3e:8c:1d:7c:1b:
         5e:64:76:98:d0:5e:41:aa:ae:a5:d1:4d:ed:be:20:30:e5:10:
         6f:46:11:0c:5c:a3:da:cc:69:7e:e3:f5:58:6c:50:bf:3f:29:
         88:4e:1e:51:ac:0b:96:ee:55:56:7f:b4:b8:d1:d4:07:4f:ac:
         c6:25:13:cd:e2:1b:64:be:1d:ac:7d:a0:b1:71:37:7c:f4:63:
         36:a1:51:99:7e:cb:69:56:68:58:28:c3:0b:43:87:40:3c:2b:
         02:fd:33:0f:14:8e:d3:fe:43:57:38:b5:86:c2:2a:48:29:d1:
         c3:fa:8f:16:a2:0a:14:75:62:5e:35:55:be:e4:5d:7f:bc:1e:
         60:ff:78:a1:9e:ab:8d:e4:86:ff:a9:10:fe:66:ed:6f:f2:ae:
         6c:2a:42:2c:3c:7b:9d:f2:f7:fc:2b:68:b7:50:62:d2:47:ba:
         d0:34:87:2f:a5:2a:b2:c7:d6:2f:20:7c:87:d9:0e:5d:c0:3d:
         f4:18:46:cf:07:b3:a4:f1:04:a7:2b:b1:26:79:5b:8a:96:ab:
         6b:73:80:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----