Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bc7a153d-9d89-3ffb-a772-184a00b479e6.roa
File:                     bc7a153d-9d89-3ffb-a772-184a00b479e6.roa (raw, json)
Hash identifier:          MU5LItW90Rmnca2ZLOIWg6ODzzE4jhkaFzmOXPAqCuM=
Subject key identifier:   64:49:83:79:73:F8:5A:9C:18:17:04:B4:5A:A5:8C:5E:97:61:1E:51
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285842BAA7DB2BBCD9B085A0490980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bc7a153d-9d89-3ffb-a772-184a00b479e6.roa
Signing time:             Sun 30 Jul 2023 12:00:00 +0000
ROA not before:           Sun 30 Jul 2023 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.147.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ba:a7:db:2b:bc:d9:b0:85:a0:49:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 30 12:00:00 2023 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=eb9ff1ec-3459-4afe-8757-f437b77cce99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1f:04:1b:00:59:c9:81:a1:95:37:16:58:9e:
                    b9:5f:85:0d:3b:cf:39:df:63:63:38:e2:3a:65:3f:
                    1b:f3:03:1a:a9:99:d2:33:8c:b3:a0:27:7e:d4:47:
                    b9:1c:35:57:c9:09:58:ee:80:eb:35:3a:9d:17:13:
                    cb:c0:33:68:62:1e:2c:6e:f1:d0:32:4f:28:a2:eb:
                    8b:69:f8:a3:76:66:60:93:47:b9:c2:21:2d:84:7c:
                    b1:4c:5a:10:dd:e5:e9:e2:3c:a0:6f:bd:ce:02:73:
                    d0:3f:72:20:2d:ea:08:8d:bc:75:37:93:d0:00:55:
                    5a:bf:be:b2:09:21:06:96:0a:b3:51:11:fc:4e:98:
                    be:be:0b:47:f5:c7:ff:5a:2d:ba:72:c3:ec:7b:78:
                    c6:70:92:e0:d2:df:f4:0e:1e:27:b6:4c:ad:42:36:
                    bd:7a:c1:1d:18:88:c5:c8:50:e1:38:7d:c4:7b:27:
                    31:d8:84:aa:f9:fb:4c:e9:fa:2f:84:43:6c:91:30:
                    fe:ec:f2:2c:23:c2:cd:82:3a:e5:e2:11:00:4a:4a:
                    e3:9a:14:cd:2d:bd:32:76:f2:e8:03:0e:24:b0:65:
                    5f:1e:b0:2d:8e:a1:be:1d:3e:9d:e4:3e:2e:c8:c5:
                    3c:04:c5:c8:31:b2:2d:9d:21:b0:7c:eb:36:1e:aa:
                    43:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:49:83:79:73:F8:5A:9C:18:17:04:B4:5A:A5:8C:5E:97:61:1E:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bc7a153d-9d89-3ffb-a772-184a00b479e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:85:6f:a6:c0:e0:f7:53:8d:bd:c3:cb:0e:47:05:79:b5:ef:
         e1:7e:2f:1e:0e:7e:b4:85:bc:5e:2a:ba:86:6c:d7:f0:ca:b9:
         2a:cd:00:af:f6:62:c0:06:ba:23:fe:f1:84:21:f6:84:96:13:
         70:4d:d0:da:77:b5:e1:ff:0f:92:ab:bc:fe:ac:e6:94:c1:cf:
         2e:5f:a6:44:1a:3f:5d:a6:00:41:4e:f4:6c:ec:81:60:cf:16:
         7b:e1:83:b9:a5:00:40:af:57:8e:0f:8e:36:36:c3:9b:97:81:
         3e:d8:67:44:3e:06:2f:57:ce:29:83:40:f1:07:9b:2e:fb:6f:
         01:2e:39:55:1c:b4:ae:99:84:d2:ea:f1:3d:a0:72:0d:fd:8b:
         81:a3:80:8e:56:d5:e8:65:71:5a:87:3a:01:1e:fb:d6:8c:bb:
         fe:b1:67:7f:e9:5e:e1:39:d3:81:0d:b0:7e:e3:05:ac:a1:29:
         f0:7d:f0:35:40:31:b0:d3:7f:70:ac:8e:48:5f:d3:17:e0:db:
         f5:80:e2:b9:ae:94:ee:b7:01:f8:81:41:c3:f8:ef:b0:84:a3:
         29:31:68:88:ad:f9:aa:11:d5:31:4e:dd:9f:d3:ee:7b:5b:a3:
         5c:8e:41:b4:54:e1:82:aa:27:d7:d7:0d:76:c8:bd:6e:bc:e6:
         8b:19:45:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----