Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/878b70cf-4a2d-3d86-818a-c9ef210e0d98.roa
File:                     878b70cf-4a2d-3d86-818a-c9ef210e0d98.roa (raw, json)
Hash identifier:          YBiq8W9SEaS0x8aDVu6ljer6gAcrNGaip5/N0gpXssM=
Subject key identifier:   1A:32:AA:39:81:B9:2E:60:F3:CD:71:52:E7:52:89:DB:45:49:5F:D9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285846A30232A381E27771E1FB9C00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/878b70cf-4a2d-3d86-818a-c9ef210e0d98.roa
Signing time:             Mon 22 Jul 2024 12:00:00 +0000
ROA not before:           Mon 22 Jul 2024 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        172.68.233.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a3:02:32:a3:81:e2:77:71:e1:fb:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 22 12:00:00 2024 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=3118af9b-bf5c-4ba2-a530-da2ced24f7de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4d:f5:69:72:0b:9a:41:f4:c4:c0:b5:fd:fb:
                    48:9a:21:2c:3a:d3:c1:cb:94:0e:58:cb:79:da:2b:
                    14:63:ba:ef:9d:cd:ca:47:02:30:ff:77:c9:8b:dd:
                    59:dd:eb:c4:5a:37:bf:be:98:a5:70:6a:35:7f:81:
                    36:ab:c2:7d:50:96:da:24:4d:68:28:11:0a:c4:5a:
                    a1:e1:db:b5:9c:c2:79:8b:8c:1a:38:e0:b8:96:95:
                    cb:6c:0b:cb:d4:fc:ea:7b:6b:bf:cf:05:22:21:03:
                    c6:63:dd:c2:52:57:f7:c9:af:85:48:c6:d6:a5:72:
                    0e:37:0d:f5:d4:0f:e1:5b:59:98:e1:9d:06:a8:07:
                    27:47:3f:5e:15:e1:1f:53:41:6f:25:25:06:52:5a:
                    4c:fb:dd:dd:04:8f:8e:d5:51:ae:66:47:e6:d8:6e:
                    20:f8:e1:ed:0e:e1:9a:50:96:db:b9:8e:a3:bb:19:
                    31:a3:43:49:d9:e3:f3:b2:ee:5a:df:7e:67:18:22:
                    49:17:5e:d6:c4:dc:86:6b:7e:74:55:28:cc:3f:f7:
                    9f:e0:b9:a7:e5:c4:b1:ca:c8:d7:07:04:dd:5c:80:
                    d0:a3:6a:98:cb:6c:34:25:f5:ff:2d:a3:02:48:03:
                    a3:c2:21:61:60:3b:1a:f6:4b:f5:45:1b:6b:ae:c7:
                    c6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:32:AA:39:81:B9:2E:60:F3:CD:71:52:E7:52:89:DB:45:49:5F:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/878b70cf-4a2d-3d86-818a-c9ef210e0d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c9:02:11:28:6c:dd:2a:8f:45:57:99:9b:ac:51:9d:d5:da:
         47:7c:02:ca:6e:79:00:e5:8f:37:57:f9:af:e6:d1:2f:49:fb:
         05:00:69:c4:f9:66:3f:3d:b7:74:28:cd:b1:66:23:17:2c:ca:
         ee:fd:45:c8:55:89:74:9d:4c:b5:9e:d1:48:ba:89:f7:08:be:
         77:6e:d4:6f:63:a8:08:2f:39:5d:b9:38:7e:3e:13:9c:7f:d4:
         d8:1e:74:bb:37:15:c4:8a:01:a0:d3:59:4f:eb:6d:db:02:1e:
         a0:a7:ec:09:32:45:8c:31:84:b7:b1:18:ec:63:81:91:f6:d1:
         b9:c4:1d:61:c2:74:56:c1:a9:05:4e:da:50:a7:71:e9:eb:2c:
         eb:5f:72:9e:d2:ed:f8:99:ce:dd:21:61:59:4c:87:b0:c9:37:
         62:35:2c:34:27:e3:b4:38:a9:f8:1e:6e:82:09:3d:92:32:5c:
         15:9b:fa:2d:8d:a2:23:2d:28:d1:cb:59:ab:98:4f:58:45:e4:
         46:87:f0:1a:5d:b2:07:f5:18:da:36:ff:c0:11:ea:4f:c6:5d:
         e2:b9:31:ee:dd:e2:18:3e:d6:00:e3:0d:ea:42:da:0a:14:6b:
         d5:e4:c5:49:48:52:11:a9:93:af:8e:3a:b8:af:c3:2c:4b:bc:
         b3:da:f8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----