Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d0650c1-5f6b-377e-a404-e338fc5dccb3.roa
File:                     3d0650c1-5f6b-377e-a404-e338fc5dccb3.roa (raw, json)
Hash identifier:          leWUn9Ryyr2pI/QbpkSGogt7u6z8OtDPqsK5YTHOVdI=
Subject key identifier:   07:F9:7F:F0:74:49:42:51:BF:55:7D:A7:DD:FD:C2:A3:A1:4E:3E:CB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858436E5E5E5CA7DAC0E2AAB2A140
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d0650c1-5f6b-377e-a404-e338fc5dccb3.roa
Signing time:             Mon 02 Oct 2023 12:00:00 +0000
ROA not before:           Mon 02 Oct 2023 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.8.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:6e:5e:5e:5c:a7:da:c0:e2:aa:b2:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct  2 12:00:00 2023 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=1f5d5aee-fdb9-4309-a5a7-f0309b1fc49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:39:4d:94:c1:bb:98:10:31:b8:3f:8e:af:6d:
                    17:a5:e8:12:9e:3a:95:99:0e:ac:99:3d:9a:e2:fe:
                    7f:dc:3f:85:51:d6:7f:59:b6:c5:ac:6e:bf:f7:d2:
                    d0:0a:21:32:53:d6:8d:3c:4a:21:d7:66:47:c2:40:
                    ca:9b:81:e2:7e:32:8e:bf:77:49:89:f1:50:03:60:
                    19:5c:e5:ab:b1:70:7e:a1:e2:e3:a6:2b:a1:9d:35:
                    8f:dc:2f:72:84:17:e8:52:7f:bf:0f:40:54:bb:c0:
                    02:8f:d9:9e:95:af:69:17:a6:ea:56:8c:40:08:c9:
                    50:7f:3c:1b:d5:68:ef:a9:62:53:32:62:45:d7:24:
                    05:79:92:0c:be:dc:dd:10:c2:91:f0:a3:05:02:cf:
                    b6:f0:ed:c8:dd:e3:b6:81:04:1d:02:7e:2f:88:9a:
                    c0:87:52:af:96:b2:3e:46:dc:42:e5:52:4e:7f:fd:
                    66:eb:e8:d7:59:95:fc:11:0f:69:a5:49:29:04:1f:
                    5b:96:59:2b:05:78:ae:67:12:b9:85:b7:4b:11:52:
                    0a:98:de:b3:dd:d1:36:2c:43:f0:c9:2f:b8:6c:1d:
                    5d:a6:e8:ca:62:42:d8:79:93:50:71:06:8b:9b:6a:
                    55:31:9d:ce:e5:36:a8:84:bc:5e:4d:97:36:4d:52:
                    35:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F9:7F:F0:74:49:42:51:BF:55:7D:A7:DD:FD:C2:A3:A1:4E:3E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d0650c1-5f6b-377e-a404-e338fc5dccb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:d4:d5:39:25:c9:d7:66:13:98:e2:80:24:6c:6e:f6:d9:a6:
         92:34:36:79:f1:f2:88:1b:9f:d2:9b:90:90:47:37:04:5f:ec:
         b9:bf:74:4e:aa:54:fb:0c:53:d2:ba:a2:5c:f2:7c:2b:59:4e:
         c8:0f:5a:8f:30:8e:2b:d4:07:88:47:08:7b:97:39:24:1e:5d:
         92:3e:72:bb:53:a4:96:96:8d:68:ca:5d:f6:7f:ba:91:8b:a7:
         e0:4d:6c:9d:66:6a:23:48:2a:62:75:50:ad:3d:14:c6:3e:94:
         be:01:b8:3c:c0:bd:cf:1d:84:17:64:07:a3:c8:48:e6:68:2f:
         43:30:1c:f3:6e:b2:bf:f2:f3:77:92:17:bb:2b:36:63:53:42:
         ee:23:71:b4:3c:92:66:cd:a1:ed:64:c1:ab:e9:79:f8:f1:b1:
         a4:0e:68:19:1b:81:0a:4f:fe:19:db:25:66:f9:9f:e6:12:27:
         f3:0b:bf:76:8c:a1:b5:92:8d:3f:26:8a:18:3d:74:11:fd:18:
         c6:ca:19:82:4e:f3:b5:78:83:a3:fa:f7:39:7a:81:c7:91:8b:
         e9:d2:75:bd:05:31:6b:27:db:49:e0:fa:37:26:68:bc:fd:36:
         a4:26:0c:c3:5a:3d:5c:5f:5c:98:9a:5e:82:64:e3:7e:61:05:
         25:cb:ad:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWENuXl5cp9rA4qqyoUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTIzMTAwMjEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk
MWY1ZDVhZWUtZmRiOS00MzA5LWE1YTctZjAzMDliMWZjNDlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTlNlMG7mBAxuD+Or20XpegSnjqVmQ6smT2a
4v5/3D+FUdZ/WbbFrG6/99LQCiEyU9aNPEoh12ZHwkDKm4HifjKOv3dJifFQA2AZ
XOWrsXB+oeLjpiuhnTWP3C9yhBfoUn+/D0BUu8ACj9mela9pF6bqVoxACMlQfzwb
1WjvqWJTMmJF1yQFeZIMvtzdEMKR8KMFAs+28O3I3eO2gQQdAn4viJrAh1KvlrI+
RtxC5VJOf/1m6+jXWZX8EQ9ppUkpBB9bllkrBXiuZxK5hbdLEVIKmN6z3dE2LEPw
yS+4bB1dpujKYkLYeZNQcQaLm2pVMZ3O5TaohLxeTZc2TVI1uQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAf5f/B0SUJRv1V9p939wqOhTj7LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2QwNjUwYzEtNWY2Yi0z
NzdlLWE0MDQtZTMzOGZjNWRjY2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILU1TklyddmE5jigCRsbvbZppI0Nnnx8ogbn9KbkJBHNwRf7Lm/dE6q
VPsMU9K6olzyfCtZTsgPWo8wjivUB4hHCHuXOSQeXZI+crtTpJaWjWjKXfZ/upGL
p+BNbJ1maiNIKmJ1UK09FMY+lL4BuDzAvc8dhBdkB6PISOZoL0MwHPNusr/y83eS
F7srNmNTQu4jcbQ8kmbNoe1kwavpefjxsaQOaBkbgQpP/hnbJWb5n+YSJ/MLv3aM
obWSjT8mihg9dBH9GMbKGYJO87V4g6P69zl6gceRi+nSdb0FMWsn20ng+jcmaLz9
NqQmDMNaPVxfXJiaXoJk435hBSXLrUc=
-----END CERTIFICATE-----