Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/799dafa0-63ae-32da-8f81-4aa349fa66e6.roa
File:                     799dafa0-63ae-32da-8f81-4aa349fa66e6.roa (raw, json)
Hash identifier:          wATpW0O077yziEvvzoLXrP20BpzjUtGIEP2qsDzDDik=
Subject key identifier:   B2:C6:CA:66:DE:D8:C4:30:28:F0:25:39:45:FF:01:19:89:F4:9F:44
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285846358D70F370BFC8D84065D680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/799dafa0-63ae-32da-8f81-4aa349fa66e6.roa
Signing time:             Thu 13 Jun 2024 12:00:00 +0000
ROA not before:           Thu 13 Jun 2024 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        172.68.11.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:35:8d:70:f3:70:bf:c8:d8:40:65:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 13 12:00:00 2024 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=14b122b4-5e41-4fe6-b957-bc6fe8a992fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1a:d3:89:cc:f4:08:26:7c:39:a1:ef:18:94:
                    89:f5:2a:21:4c:f9:69:51:69:05:62:69:ed:4b:fe:
                    c8:5c:d1:15:10:be:af:c7:4b:5a:ce:60:22:df:02:
                    be:75:99:47:e6:06:6c:8c:65:b8:93:3c:f4:c1:6c:
                    3e:c3:20:98:3b:b2:72:11:31:cd:c9:37:ca:6d:10:
                    83:8d:fc:97:b9:3a:0f:e6:e8:18:c0:f4:10:ec:ae:
                    47:2d:26:93:c4:4e:e4:c9:36:7c:d3:90:0a:cc:60:
                    cc:62:28:1d:6d:03:2b:2b:f4:1f:6d:9d:75:b3:ff:
                    ef:ad:7a:3f:df:8e:7e:0c:2a:04:e1:67:1f:53:c4:
                    8f:87:30:85:d9:5c:39:72:8b:6b:66:c4:de:77:94:
                    6e:c0:57:37:72:a5:fe:9f:8e:e7:f2:75:ed:ab:22:
                    cd:16:43:f3:ae:79:32:61:1a:47:61:15:86:c6:31:
                    d9:25:49:3f:e4:69:3e:fd:e2:8a:d7:19:67:38:98:
                    b1:7f:92:83:fa:5d:c6:88:83:06:ae:19:fa:ae:69:
                    45:3e:42:bf:82:80:ec:f0:76:db:c0:e9:47:07:6e:
                    c5:27:c9:fd:59:d8:1e:c7:80:de:f0:3e:7c:1d:fc:
                    58:fd:0e:cc:0f:ca:06:fa:6a:db:14:a8:42:2a:c8:
                    86:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C6:CA:66:DE:D8:C4:30:28:F0:25:39:45:FF:01:19:89:F4:9F:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/799dafa0-63ae-32da-8f81-4aa349fa66e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:06:08:7c:bf:0b:de:55:59:67:d3:94:f7:44:43:a8:17:4b:
         33:10:30:d2:b1:d8:50:3e:06:da:3e:13:64:9f:64:a3:1b:c4:
         06:b2:96:51:20:6a:ce:c9:f4:4c:cc:de:28:e1:b8:2a:7f:60:
         7a:f3:e0:31:af:b4:03:c2:e7:37:b7:45:6a:9e:88:c8:24:20:
         76:75:f1:c8:8f:88:d7:82:99:a0:57:ba:1e:02:d9:d2:b2:0c:
         8a:20:49:e5:d0:1b:bf:b8:7f:c3:21:e8:b7:48:d8:16:c2:21:
         7e:a1:2d:0d:71:30:f2:ca:cb:73:a0:aa:9a:c0:6d:db:1a:33:
         ad:a7:5b:c8:ca:d1:26:fa:ac:16:52:0a:dc:ed:1d:a8:c7:f8:
         87:22:d3:b0:8b:1e:3a:eb:7c:88:b9:31:9d:9c:bd:e5:c4:52:
         f5:94:bb:36:26:4c:68:c6:70:67:21:eb:06:0f:69:22:8a:88:
         bd:dd:de:cc:ca:d2:5e:6b:de:cc:6b:41:c5:41:11:f6:97:11:
         c2:29:32:45:d7:be:5a:51:c6:56:68:8d:2c:a1:3e:2f:a9:38:
         27:30:23:93:d7:3f:18:03:c0:55:91:c9:ab:5e:22:16:fd:a7:
         49:6b:26:8c:1f:96:fb:f8:31:f4:c5:2e:ca:0c:17:cc:db:bc:
         84:cc:39:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----