Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/6a1ceba9-5d55-301c-aa53-6483e0e2eb31.roa
File:                     6a1ceba9-5d55-301c-aa53-6483e0e2eb31.roa (raw, json)
Hash identifier:          f0Hg+JDoNP7+AbNTdSNJvCo9g9sHe74cPAALnFt+cTQ=
Subject key identifier:   D9:41:88:2C:B0:D3:ED:EA:A6:2F:2B:3C:F5:09:22:0A:29:0D:6B:2E
Certificate issuer:       /CN=e670a794-6ccb-491d-aeb1-ca84859c3950
Certificate serial:       010D0C9F43285843B8C7EA85E730B2562EF857E0
Authority key identifier: E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/6a1ceba9-5d55-301c-aa53-6483e0e2eb31.roa
Signing time:             Mon 30 Oct 2023 12:43:45 +0000
ROA not before:           Mon 30 Oct 2023 12:43:45 +0000
ROA not after:            Sun 28 Jan 2024 13:43:45 +0000
asID:                     60842
IP address blocks:        66.245.166.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:b8:c7:ea:85:e7:30:b2:56:2e:f8:57:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e670a794-6ccb-491d-aeb1-ca84859c3950
        Validity
            Not Before: Oct 30 12:43:45 2023 GMT
            Not After : Jan 28 13:43:45 2024 GMT
        Subject: CN=4a488625-9075-4996-9221-ac249c6dd8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:68:94:4c:44:12:d6:94:7b:5a:ba:11:ee:72:
                    64:f4:54:bd:bb:dd:3e:35:25:d1:5d:51:b4:26:d5:
                    ce:ab:f4:0f:db:a4:d3:f0:1d:ac:b8:3e:9a:61:f8:
                    fc:13:50:2a:88:5b:cb:7f:b7:03:2c:c3:fa:31:f0:
                    8e:af:27:5b:28:7c:35:8e:c7:c4:92:ac:15:c1:7d:
                    1a:8d:d8:07:4e:1e:55:60:0d:58:d8:0e:60:f2:b3:
                    5a:26:6d:0f:5b:7e:40:f6:05:2a:6a:db:b6:11:d3:
                    b5:77:b0:0e:1a:d2:92:04:d0:16:40:a9:00:83:c7:
                    0e:4f:a9:71:85:98:e2:f4:27:74:e8:d3:2d:66:2d:
                    5d:b3:c5:fe:b6:77:0f:39:9a:1f:d4:cd:ed:7d:af:
                    56:41:ab:49:3e:0c:cf:9b:66:16:c7:29:31:bb:37:
                    96:9c:e1:c6:67:0a:8b:8c:e7:17:d0:3c:3a:a5:e9:
                    c7:89:27:46:3f:a0:64:e9:02:a1:5a:39:50:c7:4b:
                    aa:07:13:fa:2f:87:b7:3c:30:90:94:5d:51:5d:6d:
                    66:57:53:e6:16:5c:38:23:27:b4:28:9b:67:33:aa:
                    55:c6:fe:07:2f:cb:e3:fd:8b:f5:3b:f8:9b:c0:c0:
                    b1:38:a7:93:51:82:3a:50:cb:37:bb:85:5d:e8:aa:
                    0a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:41:88:2C:B0:D3:ED:EA:A6:2F:2B:3C:F5:09:22:0A:29:0D:6B:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/6a1ceba9-5d55-301c-aa53-6483e0e2eb31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.crl

            X509v3 Authority Key Identifier:
                keyid:E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:5f:f7:47:15:c4:2d:ac:28:b5:0a:eb:db:a8:a0:7c:d4:3b:
         d7:eb:33:3f:6f:e0:e8:bc:41:a6:f1:a3:d7:53:bb:ea:3f:22:
         bf:9e:63:16:f6:28:62:08:f3:83:2b:85:83:13:45:0f:31:0a:
         f5:4a:12:de:97:9f:f0:23:98:65:2c:ba:aa:38:8e:64:18:52:
         44:6d:0e:41:d4:10:d5:e0:9e:ff:5c:81:dd:ce:4e:8f:19:b2:
         d9:79:94:ac:1f:67:aa:0e:37:4e:91:3a:3e:c0:3d:8a:24:36:
         66:4a:c5:f1:cd:4c:4d:3a:43:62:0b:c2:87:01:ce:0b:62:d0:
         a1:f0:60:aa:d2:12:fc:bf:64:85:fb:c7:53:92:56:1f:de:f0:
         6d:ab:c9:b1:4c:fd:e9:a8:15:5f:b3:e9:f0:00:41:ce:e9:f9:
         ce:70:fc:06:71:2a:32:78:19:30:c4:12:4d:f2:1e:5f:5e:cb:
         62:dd:68:2d:81:b4:9c:a2:6f:d3:93:98:2c:4a:ea:35:ab:ff:
         42:76:de:70:d9:54:92:39:d5:16:df:20:2c:14:c5:4a:2c:ea:
         55:99:99:cf:4f:e8:8b:e2:d3:ec:c5:f2:dc:6d:47:37:32:e8:
         46:5c:8d:d2:20:e4:43:22:b2:7f:e6:a9:5a:0e:74:7e:95:d6:
         3f:c0:b7:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEO4x+qF5zCyVi74V+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTY3MGE3OTQtNmNjYi00OTFkLWFlYjEtY2E4NDg1OWMz
OTUwMB4XDTIzMTAzMDEyNDM0NVoXDTI0MDEyODEzNDM0NVowLzEtMCsGA1UEAxMk
NGE0ODg2MjUtOTA3NS00OTk2LTkyMjEtYWMyNDljNmRkOGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02iUTEQS1pR7WroR7nJk9FS9u90+NSXRXVG0
JtXOq/QP26TT8B2suD6aYfj8E1AqiFvLf7cDLMP6MfCOrydbKHw1jsfEkqwVwX0a
jdgHTh5VYA1Y2A5g8rNaJm0PW35A9gUqatu2EdO1d7AOGtKSBNAWQKkAg8cOT6lx
hZji9Cd06NMtZi1ds8X+tncPOZof1M3tfa9WQatJPgzPm2YWxykxuzeWnOHGZwqL
jOcX0Dw6penHiSdGP6Bk6QKhWjlQx0uqBxP6L4e3PDCQlF1RXW1mV1PmFlw4Iye0
KJtnM6pVxv4HL8vj/Yv1O/ibwMCxOKeTUYI6UMs3u4Vd6KoKCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNlBiCyw0+3qpi8rPPUJIgopDWsuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lNjcw
YTc5NC02Y2NiLTQ5MWQtYWViMS1jYTg0ODU5YzM5NTAvNmExY2ViYTktNWQ1NS0z
MDFjLWFhNTMtNjQ4M2UwZTJlYjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTY3MGE3OTQtNmNjYi00OTFkLWFl
YjEtY2E4NDg1OWMzOTUwL2U2NzBhNzk0LTZjY2ItNDkxZC1hZWIxLWNhODQ4NTlj
Mzk1MC5jcmwwHwYDVR0jBBgwFoAU6Lr0Qpc6EjYTGTvfCyac1GGi5yIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lNjcwYTc5NC02Y2NiLTQ5MWQtYWViMS1jYTg0
ODU5YzM5NTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvWmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF9f90cVxC2sKLUK69uooHzUO9frMz9v4Oi8Qabxo9dTu+o/Ir+eYxb2
KGII84MrhYMTRQ8xCvVKEt6Xn/AjmGUsuqo4jmQYUkRtDkHUENXgnv9cgd3OTo8Z
stl5lKwfZ6oON06ROj7APYokNmZKxfHNTE06Q2ILwocBzgti0KHwYKrSEvy/ZIX7
x1OSVh/e8G2rybFM/emoFV+z6fAAQc7p+c5w/AZxKjJ4GTDEEk3yHl9ey2LdaC2B
tJyib9OTmCxK6jWr/0J23nDZVJI51RbfICwUxUos6lWZmc9P6Ivi0+zF8txtRzcy
6EZcjdIg5EMisn/mqVoOdH6V1j/AtzI=
-----END CERTIFICATE-----