Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25a8aac4-55fc-3f14-b70b-46983b6f8732.roa
File:                     25a8aac4-55fc-3f14-b70b-46983b6f8732.roa (raw, json)
Hash identifier:          4GNPjzRltnmGqeoD0fBdRGfYjTR7TBvZPJZvnu2Rj4U=
Subject key identifier:   10:2F:9F:43:79:59:3D:98:7A:6A:D4:0E:CB:E6:BE:E1:BD:38:19:29
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A5157C9544E71502DB3C1C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25a8aac4-55fc-3f14-b70b-46983b6f8732.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     40300
IP address blocks:        66.160.194.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:51:57:c9:54:4e:71:50:2d:b3:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=2f017208-88b8-497c-834d-bb47dab6b1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4e:a9:d7:58:cb:4d:49:af:c3:0a:f8:bb:43:
                    bd:8c:cf:30:96:5e:e6:26:fe:44:55:89:76:b9:0f:
                    98:6a:57:86:89:52:9e:91:16:1f:33:78:83:e5:cf:
                    0c:28:00:69:9d:e0:ec:bd:a9:36:ab:60:e2:fa:8a:
                    7c:8f:86:47:b5:b0:f6:3d:81:bd:3e:4b:dc:d4:21:
                    57:82:a9:6c:56:ba:7c:de:90:a9:64:f2:60:22:19:
                    9e:3b:96:a6:2f:97:60:95:58:91:26:e1:d3:79:3d:
                    c1:57:c6:f0:ce:d0:d7:d2:9c:c1:f5:36:d8:5c:4d:
                    ed:47:0a:9f:73:3b:07:17:f8:42:01:89:16:b5:54:
                    a6:46:25:75:80:d1:02:f1:86:20:37:bd:f1:d4:83:
                    c3:f1:69:05:28:6f:3b:bf:aa:b6:10:ea:cd:4a:50:
                    76:aa:d5:12:ca:c3:1f:b9:fa:77:a3:17:83:4b:4a:
                    90:9b:91:8e:b2:65:d6:28:13:e7:e3:ef:4d:67:dd:
                    fd:c0:de:ec:dc:c2:37:d3:47:d7:2a:f3:a8:92:ae:
                    83:90:03:26:13:8d:88:4c:75:71:f3:06:de:b1:9a:
                    f2:b1:60:a7:ff:c3:ba:2c:ce:6e:24:6a:56:db:93:
                    40:9e:4f:f7:b8:c3:3c:46:cf:ff:63:be:fd:47:56:
                    84:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2F:9F:43:79:59:3D:98:7A:6A:D4:0E:CB:E6:BE:E1:BD:38:19:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25a8aac4-55fc-3f14-b70b-46983b6f8732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.160.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:b6:1a:90:7a:9b:57:32:f1:3d:69:f0:fd:30:f6:e5:76:6a:
         ac:0b:fd:ef:02:c2:2d:4b:15:f4:d4:52:cb:0d:8e:e6:39:33:
         c6:64:de:52:78:bb:53:16:ab:3f:b4:74:da:31:c9:5b:9d:17:
         de:b3:d9:61:44:38:80:c8:04:fa:87:6b:50:f4:01:90:75:fa:
         33:61:5a:8e:51:57:16:81:2c:e7:08:50:40:a9:e1:f8:b2:6f:
         eb:8f:38:05:0c:b5:f6:6a:1e:09:72:dd:cf:d7:ba:34:25:a8:
         62:72:ba:89:f9:a5:ab:7b:13:cb:b5:dd:62:7a:f1:26:c5:25:
         09:b1:9c:80:cf:53:20:78:7a:45:a5:8b:92:76:5c:50:c0:ee:
         82:40:97:31:d8:7a:9a:bf:9a:4c:8d:ab:c9:76:e0:47:b4:34:
         f7:c0:f6:70:c6:ef:c4:0d:a1:3d:b3:82:17:96:df:ac:72:9e:
         2d:54:35:23:ac:13:3a:85:a4:55:9e:6d:15:f0:71:3d:82:98:
         30:b7:8f:8e:c1:18:16:c2:41:38:83:b8:d3:0a:06:99:ea:dd:
         3c:75:d9:1c:a2:bc:e1:bf:05:e4:9b:af:f4:6b:69:98:6d:9a:
         e6:be:bd:12:18:d1:50:55:d7:11:3c:db:6b:b9:69:7e:c2:45:
         9c:9d:98:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----