Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/df4e95f1-06d2-3a09-961f-158d970847d5.roa
File:                     df4e95f1-06d2-3a09-961f-158d970847d5.roa (raw, json)
Hash identifier:          MQ6w6JXXywK5wQ4Mog4KrxnjVclWt3iVTQIYdCihiuo=
Subject key identifier:   F5:70:8A:1C:4B:C0:6C:21:B9:19:86:F7:F5:12:52:7E:17:24:E1:69
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285843596A2FC9847B2CD4D45C1180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/df4e95f1-06d2-3a09-961f-158d970847d5.roa
Signing time:             Mon 25 Sep 2023 12:00:00 +0000
ROA not before:           Mon 25 Sep 2023 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.165.0/24 maxlen: 24
                          172.69.166.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:59:6a:2f:c9:84:7b:2c:d4:d4:5c:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 25 12:00:00 2023 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=b27d0c86-f19f-4b73-8c21-39fe5842fd3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:19:5f:d5:e0:cb:63:18:ed:e3:2d:c6:91:
                    06:80:c7:b0:77:6e:b7:39:87:35:e7:19:f0:65:3c:
                    eb:a3:b3:2f:fc:5c:29:d9:b4:f4:c2:cd:da:ad:0e:
                    44:35:22:db:c6:60:23:aa:9a:31:e1:1a:29:60:6a:
                    43:f6:56:67:15:28:65:11:dc:69:3e:f0:bc:f7:2f:
                    f6:c2:ef:50:55:99:70:5c:33:00:a6:7d:c3:d5:0c:
                    42:8c:70:e8:d6:e7:63:a8:c5:ad:96:f2:9f:d0:db:
                    4c:52:6a:99:2c:d7:c6:68:bc:df:2a:5c:31:57:f8:
                    15:f8:8c:0b:28:0a:c0:b3:02:07:b1:57:99:59:e0:
                    6a:9e:65:1c:44:f4:55:77:d5:99:b7:6c:e0:f8:f6:
                    1d:76:e8:e7:68:6f:4f:ab:7b:d0:cf:a3:27:95:12:
                    ca:3e:31:34:6a:52:8e:d0:29:be:95:e6:fc:3f:cb:
                    d7:7f:9a:42:a0:10:ba:22:05:fd:09:a2:8c:e6:b4:
                    cd:7a:c6:41:b2:0e:ae:8f:b6:81:1f:72:d3:aa:a1:
                    6a:5d:bf:b8:25:ef:64:28:6c:94:da:45:71:b7:69:
                    c8:2e:0c:6d:ac:bd:ee:78:69:09:86:03:3c:ac:ba:
                    da:4c:ae:ea:d5:55:74:b3:18:19:22:32:b3:a8:9e:
                    49:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:70:8A:1C:4B:C0:6C:21:B9:19:86:F7:F5:12:52:7E:17:24:E1:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/df4e95f1-06d2-3a09-961f-158d970847d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.165.0-172.69.166.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:b9:11:b5:04:9b:12:66:99:86:34:d5:f2:c4:11:ad:ac:dd:
         ba:12:a9:05:02:3a:b3:c2:1e:3c:a2:7d:7e:c0:7d:60:1b:61:
         b8:82:61:15:1d:64:74:66:d3:1a:7b:46:ee:e4:38:1f:17:e3:
         0d:33:c1:53:14:e9:bb:df:13:a6:12:4f:95:01:bc:4f:0a:31:
         df:5a:bd:47:b4:85:32:4f:af:a7:cf:b3:fa:aa:16:36:3e:a6:
         4a:db:4f:3a:42:1f:66:73:58:30:8b:55:93:be:a2:37:a2:25:
         82:0d:fe:36:42:29:66:60:0f:4f:a0:64:cc:26:9c:4b:cd:fe:
         d3:16:fe:4d:f2:7c:6b:2a:fb:44:2a:f1:bb:65:02:59:15:75:
         eb:d8:01:e3:f8:3b:d3:ed:99:f3:a6:32:81:3a:8d:77:2b:c0:
         c7:44:74:98:48:a2:b2:a8:71:d0:d5:04:47:21:c9:5d:2e:79:
         ef:b9:89:9d:a9:06:6e:2d:32:f6:df:6c:b6:84:c2:86:6e:a9:
         91:04:4f:dd:44:86:42:25:83:21:74:74:61:e7:8f:e6:3b:45:
         5d:0d:bd:4c:29:f2:81:37:d0:e7:a2:e8:b5:4a:c9:77:b8:7c:
         10:48:d6:7a:56:4d:5f:42:d0:64:c0:f0:19:ff:b2:32:06:3f:
         ef:3f:60:44
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWENZai/JhHss1NRcEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTIzMDkyNTEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk
YjI3ZDBjODYtZjE5Zi00YjczLThjMjEtMzlmZTU4NDJmZDNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ8ZX9Xgy2MY7eMtxpEGgMewd263OYc15xnw
ZTzro7Mv/Fwp2bT0ws3arQ5ENSLbxmAjqpox4RopYGpD9lZnFShlEdxpPvC89y/2
wu9QVZlwXDMApn3D1QxCjHDo1udjqMWtlvKf0NtMUmqZLNfGaLzfKlwxV/gV+IwL
KArAswIHsVeZWeBqnmUcRPRVd9WZt2zg+PYddujnaG9Pq3vQz6MnlRLKPjE0alKO
0Cm+leb8P8vXf5pCoBC6IgX9CaKM5rTNesZBsg6uj7aBH3LTqqFqXb+4Je9kKGyU
2kVxt2nILgxtrL3ueGkJhgM8rLraTK7q1VV0sxgZIjKzqJ5JDwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFPVwihxLwGwhuRmG9/USUn4XJOFpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGY0ZTk1ZjEtMDZkMi0z
YTA5LTk2MWYtMTU4ZDk3MDg0N2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACsRaUD
BACsRaYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAcbkRtQSbEmaZhjTV8sQRrazduhKpBQI6s8IePKJ9fsB9
YBthuIJhFR1kdGbTGntG7uQ4HxfjDTPBUxTpu98TphJPlQG8Twox31q9R7SFMk+v
p8+z+qoWNj6mSttPOkIfZnNYMItVk76iN6Ilgg3+NkIpZmAPT6BkzCacS83+0xb+
TfJ8ayr7RCrxu2UCWRV169gB4/g70+2Z86YygTqNdyvAx0R0mEiisqhx0NUERyHJ
XS5577mJnakGbi0y9t9stoTChm6pkQRP3USGQiWDIXR0YeeP5jtFXQ29TCnygTfQ
56LotUrJd7h8EEjWelZNX0LQZMDwGf+yMgY/7z9gRA==
-----END CERTIFICATE-----