Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/70d62c0b-909f-3375-acce-583939c0307b.roa
File:                     70d62c0b-909f-3375-acce-583939c0307b.roa (raw, json)
Hash identifier:          Gg3WzWbaDeCKCnquLlRW8BUbu05X68ZQDGER9oulUio=
Subject key identifier:   3E:31:6F:03:1C:65:87:B5:A9:D2:B6:63:6A:FE:D5:6A:83:16:3E:5A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847A08B53086885C1F46554F660
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/70d62c0b-909f-3375-acce-583939c0307b.roa
Signing time:             Tue 22 Oct 2024 15:30:00 +0000
ROA not before:           Tue 22 Oct 2024 15:30:00 +0000
ROA not after:            Mon 20 Jan 2025 16:30:00 +0000
asID:                     11798
IP address blocks:        166.0.90.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:8b:53:08:68:85:c1:f4:65:54:f6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 22 15:30:00 2024 GMT
            Not After : Jan 20 16:30:00 2025 GMT
        Subject: CN=ee713a9a-298a-47d3-bf74-290b48e35d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:82:05:b6:60:c5:5f:89:f7:3a:de:d8:f8:fd:
                    ff:81:a6:1c:ba:17:25:e0:d7:9c:03:c6:12:28:30:
                    9b:08:5c:eb:b5:b5:d1:75:88:3e:5d:d0:98:fa:9e:
                    1f:99:d8:9f:9a:2b:ea:c5:c3:d0:2f:e1:c9:ee:82:
                    1a:35:6c:13:fb:f9:a0:b3:e2:9e:78:54:6e:7c:59:
                    79:19:c5:19:bc:ca:02:0d:37:3b:a7:97:e3:07:fc:
                    c3:4a:7f:fe:5e:fe:a6:f7:e7:f2:9f:9c:dc:42:5d:
                    60:f8:bf:3e:54:03:c8:71:7b:b7:7a:6e:46:a0:dc:
                    71:74:83:3e:91:38:19:49:c4:b4:cb:6e:14:e5:7e:
                    96:14:30:35:a4:e2:85:e3:cc:25:ba:3a:e1:da:f8:
                    29:a3:08:15:aa:7f:48:d3:cc:47:5e:07:d7:7f:76:
                    b3:45:66:25:76:d1:6b:5d:c5:00:3d:27:9e:d0:dc:
                    bb:d8:64:89:13:0d:ea:74:2b:79:70:80:6b:65:ad:
                    77:31:2b:50:ac:5c:f7:7f:dd:50:48:23:c9:77:1e:
                    b5:9f:01:35:3d:0c:73:22:2a:b9:82:61:c9:47:c9:
                    62:19:3f:00:35:98:01:c9:a6:1f:7e:a0:cb:4a:4b:
                    bc:76:af:fe:18:94:fb:4e:d8:55:a1:38:cf:d6:19:
                    9b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:31:6F:03:1C:65:87:B5:A9:D2:B6:63:6A:FE:D5:6A:83:16:3E:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/70d62c0b-909f-3375-acce-583939c0307b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:6b:ad:c5:59:de:68:f1:23:2c:cf:c5:50:2f:d0:8b:22:21:
         93:d0:f5:74:7e:59:b8:1a:58:a8:0c:ad:80:9c:d4:0a:1f:e5:
         7c:db:b9:b7:28:d8:40:5d:4b:54:54:06:6c:ab:d2:be:5a:bd:
         db:5d:1f:bb:b5:70:6b:d7:f4:05:7a:d8:49:fc:5a:8d:73:64:
         3e:07:d4:68:2e:de:3a:9a:d8:fa:11:22:3a:30:98:b4:f4:9f:
         08:8b:d6:91:1f:8e:40:a7:a2:56:7b:11:cf:c2:03:c3:f6:f5:
         9b:97:1f:85:44:43:67:af:78:9a:b0:b3:9c:10:49:6b:ef:42:
         7e:0d:83:fd:83:d4:09:02:0f:dc:f8:85:7d:d0:26:23:85:7e:
         9d:78:f8:6a:08:a1:7b:47:c7:8e:f4:4b:10:fa:41:5d:c7:07:
         4d:9d:f2:c2:ef:0b:c9:74:f9:90:18:35:52:85:55:bf:61:b1:
         cd:df:c1:84:5c:f6:f8:8d:90:d1:33:94:d0:80:92:7e:ad:9f:
         7f:2d:09:d4:65:c7:3c:82:27:00:f1:d2:72:50:ea:53:35:65:
         92:e1:77:56:82:eb:e1:7a:d8:2c:f2:11:0f:8a:c6:51:2a:33:
         64:96:53:a1:ef:16:6f:44:75:40:79:dc:2e:c8:c7:ae:1b:74:
         40:e9:da:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----