Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/48eed840-762a-3a19-a57f-7c9200bd651a.roa
File:                     48eed840-762a-3a19-a57f-7c9200bd651a.roa (raw, json)
Hash identifier:          kdANM/hQmfLyOatQEsOvAoNNzu/8ZbOipdEmXw9iE5E=
Subject key identifier:   2D:EA:E3:33:7C:6B:42:84:20:9A:9B:55:D9:D3:BB:E6:FC:4D:F7:E0
Certificate issuer:       /CN=74bdcdb1-ade3-4be9-818b-4809959ddfcc
Certificate serial:       010D0C9F43285844E75298F69E73378EB72B5400
Authority key identifier: 1C:A2:9E:F3:A1:6B:AC:78:B0:93:45:1A:15:A0:36:2D:89:9C:02:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/48eed840-762a-3a19-a57f-7c9200bd651a.roa
Signing time:             Thu 15 Feb 2024 21:37:17 +0000
ROA not before:           Thu 15 Feb 2024 21:37:17 +0000
ROA not after:            Wed 15 May 2024 20:37:17 +0000
asID:                     400735
IP address blocks:        23.172.24.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e7:52:98:f6:9e:73:37:8e:b7:2b:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74bdcdb1-ade3-4be9-818b-4809959ddfcc
        Validity
            Not Before: Feb 15 21:37:17 2024 GMT
            Not After : May 15 20:37:17 2024 GMT
        Subject: CN=45af96ed-e770-4535-8c06-89cebd19f363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fb:46:cd:c9:1b:06:41:76:d9:02:86:c7:e7:
                    c8:dc:67:eb:7e:ac:96:06:a0:ae:1b:f3:4b:fa:e3:
                    ac:7c:f5:a7:8a:dc:af:9b:45:94:dd:9c:2a:ca:12:
                    f4:a3:59:95:01:e8:bd:2d:43:81:8c:03:4e:4c:f0:
                    af:56:4c:4c:29:9e:78:c7:d2:cc:a0:e1:4c:57:13:
                    e8:e9:d6:33:2a:15:76:5e:2f:1a:57:3a:3b:66:04:
                    47:01:aa:4e:ba:47:34:09:78:de:a6:a1:39:0a:c1:
                    88:ac:94:84:5d:4a:c5:ad:aa:b2:21:1b:60:fa:4d:
                    c1:33:ee:c1:8a:63:6a:3a:dd:3e:77:29:22:9b:ec:
                    b3:d5:8b:0f:a0:6d:70:36:93:48:e7:e1:69:cc:9e:
                    5e:06:ac:21:d6:92:73:fc:0f:b3:54:38:f0:b6:b9:
                    9e:d3:04:d0:6f:ae:4e:b3:95:a3:e7:8a:af:ee:fd:
                    aa:56:2d:c0:53:41:00:2a:07:e4:bb:33:ef:69:bc:
                    b1:5e:28:16:de:57:f8:f9:93:6f:dd:52:34:7e:ea:
                    fc:5f:3b:c8:95:9f:99:61:18:56:f4:28:39:c4:19:
                    40:71:d8:e0:72:1a:cd:04:1b:56:e8:67:08:2a:df:
                    ab:42:c0:ba:33:6e:4d:8a:bc:91:7f:1a:7c:7f:07:
                    b9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EA:E3:33:7C:6B:42:84:20:9A:9B:55:D9:D3:BB:E6:FC:4D:F7:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/48eed840-762a-3a19-a57f-7c9200bd651a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/74bdcdb1-ade3-4be9-818b-4809959ddfcc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:A2:9E:F3:A1:6B:AC:78:B0:93:45:1A:15:A0:36:2D:89:9C:02:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:13:01:e5:53:13:3d:c8:03:d1:c5:60:36:2c:52:5d:1b:6a:
         4a:63:ef:85:b2:be:40:81:67:5f:3d:eb:b2:20:ac:f0:3b:da:
         61:7c:c2:4b:1c:14:ac:3c:38:59:a8:fa:ee:e1:af:fb:de:f3:
         8b:a7:1c:2d:02:09:d2:3d:64:18:da:68:7e:1d:0a:14:d8:6e:
         8f:09:cc:c6:32:cc:ce:98:17:89:b8:81:eb:3e:d2:c8:67:1c:
         a6:2a:34:78:50:7a:31:1a:0a:95:56:6d:f4:b3:7a:04:03:1c:
         c6:89:29:36:b6:40:a4:1b:5b:7d:c1:8f:07:8d:4d:e8:57:4e:
         6a:7c:87:37:f4:60:72:c1:03:3b:40:5d:b0:f9:de:e1:16:cc:
         f6:f6:2e:09:9d:b7:15:50:5c:91:49:a3:05:06:e3:e8:9a:32:
         b5:35:b3:ab:bf:ce:62:ba:b4:df:9a:61:d2:a6:89:01:33:68:
         ca:0a:e4:70:5d:af:7b:8f:6a:35:33:08:dc:5f:02:e1:11:55:
         8c:fa:3e:16:fb:67:e5:28:0d:0c:8a:f3:f9:09:91:b8:75:f3:
         eb:c6:84:b0:72:63:b6:27:ee:59:3e:00:3a:98:06:c0:2d:79:
         e6:53:87:07:27:95:37:35:a5:bf:58:72:cf:48:f9:2e:cd:f8:
         83:fa:c8:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETnUpj2nnM3jrcrVAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRiZGNkYjEtYWRlMy00YmU5LTgxOGItNDgwOTk1OWRk
ZmNjMB4XDTI0MDIxNTIxMzcxN1oXDTI0MDUxNTIwMzcxN1owLzEtMCsGA1UEAxMk
NDVhZjk2ZWQtZTc3MC00NTM1LThjMDYtODljZWJkMTlmMzYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/tGzckbBkF22QKGx+fI3GfrfqyWBqCuG/NL
+uOsfPWnityvm0WU3ZwqyhL0o1mVAei9LUOBjANOTPCvVkxMKZ54x9LMoOFMVxPo
6dYzKhV2Xi8aVzo7ZgRHAapOukc0CXjepqE5CsGIrJSEXUrFraqyIRtg+k3BM+7B
imNqOt0+dykim+yz1YsPoG1wNpNI5+FpzJ5eBqwh1pJz/A+zVDjwtrme0wTQb65O
s5Wj54qv7v2qVi3AU0EAKgfkuzPvabyxXigW3lf4+ZNv3VI0fur8XzvIlZ+ZYRhW
9Cg5xBlAcdjgchrNBBtW6GcIKt+rQsC6M25NiryRfxp8fwe51QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3q4zN8a0KEIJqbVdnTu+b8TffgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NGJk
Y2RiMS1hZGUzLTRiZTktODE4Yi00ODA5OTU5ZGRmY2MvNDhlZWQ4NDAtNzYyYS0z
YTE5LWE1N2YtN2M5MjAwYmQ2NTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzRiZGNkYjEtYWRlMy00YmU5LTgx
OGItNDgwOTk1OWRkZmNjLzc0YmRjZGIxLWFkZTMtNGJlOS04MThiLTQ4MDk5NTlk
ZGZjYy5jcmwwHwYDVR0jBBgwFoAUHKKe86FrrHiwk0UaFaA2LYmcAiEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NGJkY2RiMS1hZGUzLTRiZTktODE4Yi00ODA5
OTU5ZGRmY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6wYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFcTAeVTEz3IA9HFYDYsUl0bakpj74WyvkCBZ18967IgrPA72mF8wksc
FKw8OFmo+u7hr/ve84unHC0CCdI9ZBjaaH4dChTYbo8JzMYyzM6YF4m4ges+0shn
HKYqNHhQejEaCpVWbfSzegQDHMaJKTa2QKQbW33BjweNTehXTmp8hzf0YHLBAztA
XbD53uEWzPb2LgmdtxVQXJFJowUG4+iaMrU1s6u/zmK6tN+aYdKmiQEzaMoK5HBd
r3uPajUzCNxfAuERVYz6Phb7Z+UoDQyK8/kJkbh18+vGhLByY7Yn7lk+ADqYBsAt
eeZThwcnlTc1pb9Ycs9I+S7N+IP6yGw=
-----END CERTIFICATE-----