Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dad670d5-56c4-3b10-b0b5-c1fe4eb93a5d.roa
File:                     dad670d5-56c4-3b10-b0b5-c1fe4eb93a5d.roa (raw, json)
Hash identifier:          07JKMcQa5lPRRR/seGn6piCdYOF0SpIuqD3bGDhBVBM=
Subject key identifier:   98:F0:99:E1:EA:6C:F2:B8:4F:6D:37:3C:5A:A7:24:12:50:EB:15:1C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446DB20ACFB4FD5EEE7F4C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dad670d5-56c4-3b10-b0b5-c1fe4eb93a5d.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Tue 18 Jul 2023 05:07:26 +0000
asID:                     61317
IP address blocks:        108.165.232.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:db:20:ac:fb:4f:d5:ee:e7:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Jul 18 05:07:26 2023 GMT
        Subject: CN=19596a9f-0783-4f89-a86b-9cb3677d8646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:20:e3:a5:45:e5:95:47:40:a6:bd:23:ac:41:
                    9b:4b:0c:b1:ed:23:4c:43:fb:60:c9:11:ba:8c:e5:
                    85:47:6e:ce:cc:a9:68:f3:e4:2e:a9:6f:ea:75:3e:
                    57:dd:4e:de:4c:2a:7a:ea:f4:04:d0:b6:73:af:e8:
                    0d:5a:ae:c1:53:41:d8:25:52:e1:78:7a:3f:6b:c3:
                    81:25:5e:d1:77:26:c8:a1:f2:85:59:fd:06:7c:24:
                    83:24:7c:94:4c:b9:b5:7b:45:d9:60:ec:29:e1:b5:
                    29:bb:e6:1a:2f:6d:9e:32:f7:4c:41:fa:9e:44:6c:
                    3c:a7:7a:c7:4b:d9:47:52:9a:d5:02:c8:30:1e:32:
                    02:3a:81:10:ab:bf:64:89:6e:b3:08:25:6b:51:40:
                    85:52:7c:db:cb:e1:36:40:69:cc:a5:f4:25:4f:e7:
                    fa:58:63:10:a7:0f:2f:2f:ba:d9:b1:d1:67:aa:04:
                    9b:ea:b6:f7:31:51:91:d9:ab:e6:e2:ee:06:80:cc:
                    64:2a:24:5c:8d:95:fc:b4:52:77:a1:67:c3:b3:57:
                    81:6a:c2:03:96:08:c0:6d:a1:7f:8d:04:2f:16:3b:
                    35:3c:60:bb:54:bc:a0:5b:45:3e:40:d6:7d:0e:d6:
                    81:78:a8:ea:a4:7d:7d:85:ac:01:d9:a8:a7:c6:e7:
                    1b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F0:99:E1:EA:6C:F2:B8:4F:6D:37:3C:5A:A7:24:12:50:EB:15:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dad670d5-56c4-3b10-b0b5-c1fe4eb93a5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:72:13:00:86:31:2a:16:e8:ed:32:98:62:9e:35:ba:bf:51:
         09:95:73:71:d8:dc:c6:f2:6a:05:c1:54:27:e6:1e:79:ef:90:
         4e:6e:8a:e5:70:af:1e:6f:6f:27:ed:88:95:c6:c9:6d:27:62:
         28:c6:31:ee:9b:04:ce:93:1c:17:48:f9:a7:a3:6b:e2:f2:d5:
         17:e9:22:0a:e5:a1:87:d3:11:2a:c8:81:fe:85:aa:00:34:74:
         8b:a3:5b:b6:0f:69:ab:6e:b0:15:ec:b5:71:eb:2d:2b:e2:34:
         c3:cf:bf:4e:c0:cd:01:80:66:46:33:f6:06:2c:ab:02:b5:6f:
         82:13:03:31:0b:67:8d:ae:6d:74:0c:5c:0d:61:9a:33:3f:ab:
         a6:b6:46:da:5e:01:27:d4:b7:0a:b0:47:4d:62:4c:23:13:bf:
         33:82:e7:49:9d:02:b2:2b:7f:ef:31:53:2e:55:04:25:4c:3b:
         66:39:42:06:9a:e8:c8:cc:80:27:61:ad:00:26:fc:0c:be:0e:
         b6:52:4d:bf:bc:84:28:8b:4d:82:3c:7b:a9:7a:10:78:a5:92:
         79:c6:e9:b6:4d:28:d4:34:29:bb:cb:bf:07:7b:b6:1d:6d:09:
         57:50:8b:87:69:75:f1:ef:b1:97:44:3f:37:94:57:bb:c6:50:
         53:82:b1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----