Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/2d4b00ee-a864-39af-a434-2102736838b1.roa
File:                     2d4b00ee-a864-39af-a434-2102736838b1.roa (raw, json)
Hash identifier:          okCYdEWvxJlbRalkPxBPI/JWg5ZiA3kwsmirFu8/SJc=
Subject key identifier:   7A:D6:9A:7B:5C:36:A9:83:E1:F4:60:4B:17:32:80:B9:11:9E:7F:62
Certificate issuer:       /CN=e670a794-6ccb-491d-aeb1-ca84859c3950
Certificate serial:       010D0C9F432858440F3CA6E630695BB185C50200
Authority key identifier: E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/2d4b00ee-a864-39af-a434-2102736838b1.roa
Signing time:             Thu 30 Nov 2023 11:58:28 +0000
ROA not before:           Thu 30 Nov 2023 11:58:28 +0000
ROA not after:            Wed 28 Feb 2024 11:58:28 +0000
asID:                     53356
IP address blocks:        66.245.165.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:0f:3c:a6:e6:30:69:5b:b1:85:c5:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e670a794-6ccb-491d-aeb1-ca84859c3950
        Validity
            Not Before: Nov 30 11:58:28 2023 GMT
            Not After : Feb 28 11:58:28 2024 GMT
        Subject: CN=7c54ba7c-ec21-4a7a-837b-0ca32174d9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b3:8e:9d:48:db:4f:55:fe:ed:dc:11:67:32:
                    35:74:65:b6:46:b3:d3:01:3c:84:7b:5c:a2:df:fb:
                    e3:20:68:65:c4:b5:ac:23:2a:37:2b:18:38:b8:46:
                    55:17:67:e4:fa:c1:b5:ad:50:64:7b:7b:99:3b:c9:
                    9c:3c:56:39:02:27:ad:1e:1f:e0:97:9b:16:bb:86:
                    c2:cd:12:70:13:9e:90:17:d9:be:4e:12:3b:c2:3c:
                    95:8b:e2:b2:4e:c0:05:ac:58:14:a7:e1:41:54:0f:
                    09:d5:c0:f2:d8:42:97:03:56:23:2f:0e:a2:58:55:
                    b0:ba:f2:e7:3c:cd:00:cd:58:df:06:83:fb:c8:84:
                    d0:25:4b:2d:4b:6e:60:ab:5c:fd:a6:88:fb:6f:d0:
                    fb:0d:80:59:b7:1e:27:3f:ec:25:77:16:c1:63:00:
                    e4:a2:04:49:1c:47:ab:ad:9d:02:ec:01:51:9e:87:
                    9b:0f:2a:84:78:18:e2:90:0c:75:c0:b7:35:b6:c3:
                    4c:0d:0f:4d:ba:0d:bd:b8:85:6c:2a:5a:5e:73:52:
                    8a:b2:15:d2:41:a8:89:e8:8b:a9:cd:74:8a:5f:2c:
                    63:13:23:09:77:cd:e4:97:da:d3:f6:cb:33:79:70:
                    62:99:59:5f:2d:7b:41:8d:4e:52:82:63:03:77:e5:
                    48:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D6:9A:7B:5C:36:A9:83:E1:F4:60:4B:17:32:80:B9:11:9E:7F:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/2d4b00ee-a864-39af-a434-2102736838b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.crl

            X509v3 Authority Key Identifier:
                keyid:E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:c8:fe:5d:6d:32:34:b5:1c:45:1d:b5:cb:69:19:e4:d0:9c:
         64:ea:43:f1:f8:70:53:31:13:0b:1e:14:dd:e9:39:c0:df:45:
         3d:f0:9a:3e:87:65:f4:2a:7e:59:32:84:44:6b:df:a3:78:26:
         a9:60:3e:36:5a:aa:17:b8:fd:ce:c0:68:6c:08:17:60:0c:99:
         b4:f3:1b:c8:75:62:fd:a0:de:04:6e:f7:2d:b9:24:28:6c:14:
         c5:c6:8b:2a:67:06:7b:c8:e6:08:db:56:f2:1c:44:5e:6c:b3:
         39:48:24:4d:06:dc:ea:64:e7:e7:f9:29:5e:b5:83:9c:ec:bb:
         de:1d:ba:7c:84:c6:1b:9e:d0:28:9c:07:fa:3a:60:a2:8b:31:
         fd:ab:16:e6:d4:9c:fd:6a:e1:40:92:64:90:0e:7a:f9:9e:a5:
         df:a1:ca:ae:8b:f8:22:d8:b4:b2:0b:b1:9b:f2:da:57:bf:b7:
         88:aa:cd:c9:f6:73:54:aa:6a:34:30:20:31:9e:cb:66:c5:ea:
         4a:d5:cb:f2:9a:64:77:19:ae:9d:b4:37:62:f9:c6:6f:ae:0e:
         64:af:1f:e0:54:a5:6f:b6:4f:e8:fd:87:20:6d:1a:2a:d4:8e:
         db:88:99:18:b3:d1:e9:27:cf:79:87:62:af:bb:cb:aa:36:9a:
         91:c9:57:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----