Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e3ad3d74-bd0a-37ae-90f2-f269b574f9d6.roa
File:                     e3ad3d74-bd0a-37ae-90f2-f269b574f9d6.roa (raw, json)
Hash identifier:          nHsOCGPTF/+AbiL7ndmvDwHqIE+P87U7X9IL+yBT5SA=
Subject key identifier:   0E:A6:53:C4:42:8B:59:B8:56:2F:4D:78:85:BB:3C:BA:33:75:F1:43
Certificate issuer:       /CN=e670a794-6ccb-491d-aeb1-ca84859c3950
Certificate serial:       010D0C9F432858430140705A1B2B38D11E6E8D00
Authority key identifier: E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e3ad3d74-bd0a-37ae-90f2-f269b574f9d6.roa
Signing time:             Fri 25 Aug 2023 18:57:51 +0000
ROA not before:           Fri 25 Aug 2023 18:57:51 +0000
ROA not after:            Thu 23 Nov 2023 19:57:51 +0000
asID:                     400384
IP address blocks:        66.245.167.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:01:40:70:5a:1b:2b:38:d1:1e:6e:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e670a794-6ccb-491d-aeb1-ca84859c3950
        Validity
            Not Before: Aug 25 18:57:51 2023 GMT
            Not After : Nov 23 19:57:51 2023 GMT
        Subject: CN=1af493ab-a214-4308-91d9-a49a7043e76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:f4:f0:32:f1:62:80:2a:87:95:08:c2:79:
                    10:83:cd:28:a1:e4:fe:d9:12:be:7c:f9:e6:b6:bf:
                    43:f2:86:43:a0:84:3e:41:83:32:ac:6b:63:c3:3e:
                    82:e6:e4:98:1c:33:67:b0:6f:46:6e:07:9c:e5:7e:
                    4f:38:c5:6d:2f:25:72:e9:eb:66:94:3d:31:86:5d:
                    e8:18:40:43:ba:a9:d3:3a:4e:5a:bf:93:e4:73:31:
                    54:5b:6d:c8:a8:42:f7:ba:84:dd:2a:3c:87:3a:01:
                    bf:09:62:4a:a8:13:c5:de:01:2a:80:bb:2d:8e:f7:
                    7d:02:c5:73:cc:39:ca:68:b3:10:5c:3d:8b:36:42:
                    d5:18:35:09:f8:d3:45:56:93:76:6d:ed:2e:ac:62:
                    88:de:fb:51:b8:57:27:59:85:20:a5:cf:cf:4c:50:
                    05:e3:c8:72:7e:a9:91:af:c0:d6:96:4f:1c:aa:c7:
                    d6:ba:25:a9:8f:b6:24:5f:2f:c9:4d:af:a8:1d:b4:
                    6d:49:05:e6:0b:d4:e8:f7:1e:27:69:84:67:8a:b9:
                    48:dc:02:3a:85:03:64:2b:48:b0:40:1c:f0:0b:68:
                    f6:e9:20:99:a7:b6:ac:38:4a:ed:95:bb:25:07:78:
                    f0:a9:92:a3:61:3d:85:78:0a:d3:de:6d:ff:cf:ac:
                    99:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A6:53:C4:42:8B:59:B8:56:2F:4D:78:85:BB:3C:BA:33:75:F1:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e3ad3d74-bd0a-37ae-90f2-f269b574f9d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.crl

            X509v3 Authority Key Identifier:
                keyid:E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:bb:1e:ea:b6:06:66:41:66:35:67:52:46:85:cc:ff:4b:42:
         25:b3:81:3b:e0:10:53:53:c7:3d:f2:3e:57:f8:19:f4:f7:0b:
         cd:93:60:de:49:66:f2:73:ba:47:43:8b:f0:20:46:4f:66:07:
         59:5d:aa:c2:ee:ae:84:7a:81:02:df:cb:e0:e5:da:4a:d1:f3:
         bf:66:62:a2:bb:44:59:28:ef:90:3f:33:c5:ea:5c:47:3b:8e:
         71:77:27:df:8d:56:5a:3f:9a:a2:74:58:8c:2c:38:5d:40:26:
         eb:4d:ad:d9:07:b9:b5:5b:cf:83:49:4b:b8:e0:c8:07:d3:04:
         8d:1e:61:21:e8:db:d0:9b:ce:ee:9e:cc:94:d3:33:1c:f0:f1:
         14:5c:72:fc:b2:d7:d3:06:e2:62:5b:a9:27:92:97:d0:d6:29:
         43:96:43:01:f1:68:27:68:64:ce:e4:7a:c0:ee:ad:80:f3:12:
         f9:d7:cb:85:5f:b9:6c:df:b5:57:13:0c:e0:9f:21:20:98:24:
         9a:b9:f0:91:e8:ad:1a:26:31:52:ab:b3:8c:99:b3:8f:fc:28:
         ad:0d:7e:89:e9:4d:be:1e:91:e5:7e:16:91:ac:f0:7d:bc:59:
         19:9d:68:73:09:d4:91:ca:bf:14:29:fa:2f:9a:68:5b:13:fc:
         0b:e4:f1:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMBQHBaGys40R5ujQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTY3MGE3OTQtNmNjYi00OTFkLWFlYjEtY2E4NDg1OWMz
OTUwMB4XDTIzMDgyNTE4NTc1MVoXDTIzMTEyMzE5NTc1MVowLzEtMCsGA1UEAxMk
MWFmNDkzYWItYTIxNC00MzA4LTkxZDktYTQ5YTcwNDNlNzZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV/08DLxYoAqh5UIwnkQg80ooeT+2RK+fPnm
tr9D8oZDoIQ+QYMyrGtjwz6C5uSYHDNnsG9Gbgec5X5POMVtLyVy6etmlD0xhl3o
GEBDuqnTOk5av5PkczFUW23IqEL3uoTdKjyHOgG/CWJKqBPF3gEqgLstjvd9AsVz
zDnKaLMQXD2LNkLVGDUJ+NNFVpN2be0urGKI3vtRuFcnWYUgpc/PTFAF48hyfqmR
r8DWlk8cqsfWuiWpj7YkXy/JTa+oHbRtSQXmC9To9x4naYRnirlI3AI6hQNkK0iw
QBzwC2j26SCZp7asOErtlbslB3jwqZKjYT2FeArT3m3/z6yZTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA6mU8RCi1m4Vi9NeIW7PLozdfFDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lNjcw
YTc5NC02Y2NiLTQ5MWQtYWViMS1jYTg0ODU5YzM5NTAvZTNhZDNkNzQtYmQwYS0z
N2FlLTkwZjItZjI2OWI1NzRmOWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTY3MGE3OTQtNmNjYi00OTFkLWFl
YjEtY2E4NDg1OWMzOTUwL2U2NzBhNzk0LTZjY2ItNDkxZC1hZWIxLWNhODQ4NTlj
Mzk1MC5jcmwwHwYDVR0jBBgwFoAU6Lr0Qpc6EjYTGTvfCyac1GGi5yIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lNjcwYTc5NC02Y2NiLTQ5MWQtYWViMS1jYTg0
ODU5YzM5NTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvWnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABa7Huq2BmZBZjVnUkaFzP9LQiWzgTvgEFNTxz3yPlf4GfT3C82TYN5J
ZvJzukdDi/AgRk9mB1ldqsLuroR6gQLfy+Dl2krR879mYqK7RFko75A/M8XqXEc7
jnF3J9+NVlo/mqJ0WIwsOF1AJutNrdkHubVbz4NJS7jgyAfTBI0eYSHo29Cbzu6e
zJTTMxzw8RRccvyy19MG4mJbqSeSl9DWKUOWQwHxaCdoZM7kesDurYDzEvnXy4Vf
uWzftVcTDOCfISCYJJq58JHorRomMVKrs4yZs4/8KK0NfonpTb4ekeV+FpGs8H28
WRmdaHMJ1JHKvxQp+i+aaFsT/Avk8f4=
-----END CERTIFICATE-----