Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a36773af-470c-3420-8e2d-11831037c364.roa
File:                     a36773af-470c-3420-8e2d-11831037c364.roa (raw, json)
Hash identifier:          xG5VX2/kZQO2WD9O906jsJKKBjruZaTGSxp3FbV9Kgg=
Subject key identifier:   10:FF:81:AC:83:58:6F:82:CE:2E:77:3F:FE:2E:5C:6A:77:BB:4D:FA
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285842030F8CA85FC8DA7F3C585780
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a36773af-470c-3420-8e2d-11831037c364.roa
Signing time:             Thu 25 May 2023 12:00:00 +0000
ROA not before:           Thu 25 May 2023 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.81.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:03:0f:8c:a8:5f:c8:da:7f:3c:58:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 25 12:00:00 2023 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=1e06d7a4-90e2-40e8-8833-5d655654acd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:06:77:0c:fc:3b:c0:9a:e5:d4:f5:98:39:43:
                    de:f6:52:31:a1:f8:44:ac:db:e9:5f:55:e3:35:9c:
                    d3:64:82:4b:57:ca:44:57:17:d9:14:e7:78:02:b3:
                    80:39:9c:a6:24:ef:7a:a8:1a:fa:31:f6:92:6e:49:
                    f7:35:2d:ae:43:02:ed:44:21:c2:8f:8c:86:73:75:
                    f6:36:e8:98:c8:46:95:bc:70:c1:2b:56:58:56:a7:
                    d2:aa:5e:c5:ab:a7:34:f3:e2:cd:fe:33:93:0d:cf:
                    2b:97:ef:2e:1e:34:5c:e1:f4:41:f7:31:2e:09:8a:
                    0c:67:32:db:95:48:6d:9d:ce:d0:08:bb:61:9c:ff:
                    1b:ff:eb:87:d4:0a:69:ad:c1:14:12:f1:07:35:d9:
                    6a:db:31:c8:07:90:75:73:4e:11:9a:40:0a:30:d0:
                    c9:e3:db:78:b1:9c:af:04:05:3c:0a:e3:b7:24:79:
                    e1:cd:6b:cb:67:c6:1a:ab:86:64:c5:7a:f2:ac:be:
                    8e:06:3b:1e:ce:be:fd:c3:72:68:49:fb:42:b0:48:
                    0a:9d:01:58:14:75:f8:19:0d:6f:6b:b6:33:95:b5:
                    ab:94:a3:8e:eb:cb:f7:27:6d:aa:06:56:c8:bf:2b:
                    33:34:dd:3b:ce:5d:ff:9b:f6:51:5a:1b:f7:14:18:
                    59:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FF:81:AC:83:58:6F:82:CE:2E:77:3F:FE:2E:5C:6A:77:BB:4D:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a36773af-470c-3420-8e2d-11831037c364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ce:f6:27:9e:0b:d3:86:40:b8:bf:53:aa:ed:4e:91:92:b3:
         bc:87:73:17:63:d7:01:1a:18:c3:af:bd:cc:52:76:97:33:c2:
         11:9d:ec:a0:2c:34:b3:4f:7b:59:19:1d:50:68:8c:9f:d9:75:
         0a:93:25:db:76:68:6d:64:f9:e1:d1:8d:89:ca:4f:1b:f2:e6:
         ed:68:c9:e3:b4:67:ad:ea:92:75:63:83:cd:42:7f:92:43:5f:
         ce:5a:94:ef:5f:09:5b:ef:02:28:db:5f:17:27:71:81:33:b3:
         9e:65:d5:64:55:92:f4:e3:47:e3:ac:54:77:a8:55:2a:32:b6:
         8b:1a:98:57:90:82:9a:83:b6:aa:2e:0b:9c:4f:1c:09:87:ba:
         8e:a0:78:c8:d6:1c:dd:0d:4e:5d:91:32:2f:3f:5e:f4:a2:df:
         64:5a:66:21:c6:1b:eb:43:a8:87:85:de:38:43:ed:7a:90:1a:
         a5:66:50:07:a9:02:a5:90:c5:9d:76:83:87:aa:86:28:88:a6:
         6c:b9:54:4c:60:e5:10:6b:69:c7:fb:09:22:08:e8:52:5e:bf:
         9c:62:2a:a6:47:43:93:d3:f8:cc:b9:14:5d:0b:bd:ad:09:e4:
         18:48:8b:e3:0c:5e:c6:4d:7b:f1:e3:a7:32:4a:2c:a6:f6:80:
         ea:6b:9b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----