Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c9dbc207-b225-3a04-836f-03b2d3552af1.roa
File:                     c9dbc207-b225-3a04-836f-03b2d3552af1.roa (raw, json)
Hash identifier:          3+mfv1emexF09+BNgV1gHYgSPWuVHloyADx1jQEqI1Y=
Subject key identifier:   1E:48:0E:60:4F:74:3D:22:A7:65:DF:83:67:8A:20:11:7B:4B:68:BD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843A1154F69AB28506588F79980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c9dbc207-b225-3a04-836f-03b2d3552af1.roa
Signing time:             Sun 22 Oct 2023 01:00:15 +0000
ROA not before:           Sun 22 Oct 2023 01:00:15 +0000
ROA not after:            Sat 20 Jan 2024 02:00:15 +0000
asID:                     207419
IP address blocks:        166.0.0.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:a1:15:4f:69:ab:28:50:65:88:f7:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 22 01:00:15 2023 GMT
            Not After : Jan 20 02:00:15 2024 GMT
        Subject: CN=1ada9e62-5b01-48d5-94f7-cbc42b595c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:27:b1:bb:18:e7:f4:e6:6f:ae:0c:a7:13:04:
                    ef:87:05:0f:de:ac:95:5f:32:81:69:48:6c:6f:86:
                    3f:39:34:ad:57:ac:e4:93:e6:9a:f8:e1:9a:44:13:
                    ba:51:e6:f5:14:a3:5b:b3:34:e0:e1:11:a0:59:46:
                    c1:29:bc:09:63:5c:fe:de:c6:39:61:6a:fe:c0:83:
                    98:ca:8f:e1:91:3c:91:43:0a:c8:db:39:4b:cd:47:
                    62:3c:a0:ca:da:f9:85:af:da:18:2f:19:d0:0b:e1:
                    c0:2a:d0:13:06:c3:28:77:bb:9d:6d:ad:c0:66:2f:
                    34:d2:a4:f7:71:0f:90:8f:40:c5:40:80:63:a2:89:
                    1b:c3:63:c0:de:49:4c:fe:af:ab:c8:11:66:b5:14:
                    15:f7:22:d7:d7:f8:2a:a2:3d:8b:21:09:d5:7d:9d:
                    59:22:a1:6a:66:37:5f:5e:06:24:c0:3e:22:46:50:
                    80:64:26:43:23:bb:a6:91:9d:23:aa:77:13:bc:99:
                    90:92:17:1b:86:ab:49:1a:bf:d0:d8:f6:29:2b:e0:
                    07:e8:c7:73:d8:f2:7f:62:39:0f:35:63:b8:3b:f6:
                    4e:24:6b:5b:86:d8:66:eb:6c:14:e6:86:9f:95:7b:
                    10:9b:db:4c:9b:ab:8e:7a:cb:ee:b4:a7:1e:81:63:
                    4e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:48:0E:60:4F:74:3D:22:A7:65:DF:83:67:8A:20:11:7B:4B:68:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c9dbc207-b225-3a04-836f-03b2d3552af1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:a4:8f:9a:cc:ce:2f:67:a2:aa:8a:3c:be:47:82:e5:4d:12:
         56:9b:51:0e:f9:dd:53:a1:6c:56:90:91:35:86:a7:7a:f3:a0:
         77:b8:ca:1f:52:61:5d:6f:76:86:e1:d7:f3:70:7e:1b:e6:f0:
         98:2b:a0:73:b3:50:dd:df:a2:a1:3a:41:09:cc:43:fa:ea:e0:
         d6:59:97:0d:c2:03:b2:e0:fd:56:69:86:d5:b8:2d:1a:94:1f:
         60:2e:be:78:2e:17:b6:fc:a5:bb:ee:17:06:64:b4:db:22:03:
         a6:ec:60:f6:3f:a2:fa:34:43:45:b5:06:4e:3f:fa:b9:dd:e3:
         03:ea:76:e7:ff:3b:b8:a7:e1:47:a8:04:c3:f8:ee:90:9f:99:
         72:d3:11:fb:ef:3b:f0:f8:c3:9f:42:0b:ab:84:d4:43:d3:a6:
         db:87:23:1c:0c:05:50:08:c1:7a:b7:0f:c5:da:5c:4d:8b:f3:
         6b:2e:0d:c4:dc:8f:4a:60:f3:f4:e3:38:4d:1d:21:ab:55:df:
         70:0e:9f:35:e2:7a:2e:92:14:ba:3a:ba:f4:88:42:5d:34:e2:
         a5:fa:f8:67:f4:99:e5:7b:1d:a7:5a:53:7d:72:fb:ba:40:19:
         91:66:55:bb:dc:8d:47:e1:1f:85:74:47:75:18:93:84:12:60:
         dc:ec:7c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----