Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf455257-5a57-31b7-ae98-ac7c7713e839.roa
File:                     cf455257-5a57-31b7-ae98-ac7c7713e839.roa (raw, json)
Hash identifier:          xUiK2agw8T9zYxFaABnw6RvBO11R8bdjk217JLd2/8U=
Subject key identifier:   04:4A:49:81:D3:A8:AD:13:28:2E:6D:8C:72:58:1B:DD:E5:5F:E0:45
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584299A5342DF72537F1B8407D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf455257-5a57-31b7-ae98-ac7c7713e839.roa
Signing time:             Wed 19 Jul 2023 16:16:48 +0000
ROA not before:           Wed 19 Jul 2023 16:16:48 +0000
ROA not after:            Tue 17 Oct 2023 16:16:48 +0000
asID:                     834
IP address blocks:        166.0.136.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:99:a5:34:2d:f7:25:37:f1:b8:40:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 19 16:16:48 2023 GMT
            Not After : Oct 17 16:16:48 2023 GMT
        Subject: CN=6b27e442-446f-4916-87af-be3349ed1ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d6:86:75:92:81:b5:b0:92:da:40:70:31:30:
                    c0:3e:74:35:26:22:e4:fb:72:11:1d:85:69:38:55:
                    00:42:b8:bf:3c:63:a3:18:68:79:e4:f0:82:8c:e9:
                    72:ce:7d:18:13:86:8a:6c:d0:b7:2c:1d:80:ce:81:
                    41:d7:c4:89:ae:87:ef:9b:39:4a:6b:09:8c:8a:21:
                    03:86:38:df:54:6e:86:e8:19:27:5e:45:68:f5:0e:
                    08:5b:30:0a:13:f2:ab:fa:e3:f5:7e:64:47:cc:de:
                    66:3e:85:b0:0d:c1:8b:32:ea:c2:30:ed:c3:dd:54:
                    0f:78:91:7c:44:90:21:e7:3c:7b:62:81:bc:5f:bf:
                    97:54:8b:e8:75:65:9a:71:8b:5e:f3:5f:e4:7b:65:
                    49:f5:69:84:f4:2d:e0:9c:40:9a:23:bf:23:3d:0b:
                    bd:d1:e5:e3:97:bc:77:19:d2:ba:e6:93:39:9c:e4:
                    67:66:b9:27:fe:15:c3:c9:f8:c8:91:63:5b:e2:51:
                    f4:36:cb:9b:1c:21:9c:15:c4:6a:37:36:56:06:ac:
                    36:b1:2a:6a:3e:9e:ef:bf:d7:d3:00:2d:e4:fe:59:
                    3f:0c:6d:be:97:cd:d7:2e:0b:3b:00:94:9b:43:bf:
                    c0:18:65:b3:77:aa:e4:ff:e7:36:92:c3:02:76:f7:
                    48:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4A:49:81:D3:A8:AD:13:28:2E:6D:8C:72:58:1B:DD:E5:5F:E0:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf455257-5a57-31b7-ae98-ac7c7713e839.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:26:7b:f7:1e:c0:b8:51:6c:99:d9:d3:45:51:29:28:68:53:
         5d:da:2a:84:2b:01:0d:5d:c1:9e:0f:02:8d:b9:00:bf:87:ff:
         5d:c3:c5:84:d3:50:ba:bf:23:27:07:58:06:31:a2:5f:25:5d:
         73:a8:a4:9a:2d:48:02:b5:92:06:7a:cb:05:57:e6:49:11:b9:
         8e:b5:59:a1:47:14:a3:43:39:1e:a0:0b:4a:bf:ce:2e:8a:f3:
         e0:46:62:b1:82:1c:55:20:f2:19:14:e5:41:d2:73:49:70:0a:
         bd:b4:ce:55:14:ae:dc:87:4f:27:b2:17:4d:a6:54:f3:40:a1:
         be:23:2d:f5:ed:0b:37:1e:5d:54:fe:6e:d6:44:0a:41:80:63:
         b7:68:62:83:58:4f:7b:4d:dd:3b:e9:6b:a6:58:8c:2f:f7:5e:
         dd:19:f9:c9:fb:c1:0f:13:d6:db:81:6a:e7:18:d6:76:89:ba:
         5f:b2:2a:da:fe:1f:3b:21:5c:3d:aa:ea:96:df:63:69:31:4d:
         e0:e5:50:79:85:93:eb:63:ad:9a:ed:1f:58:70:8f:4f:d9:06:
         8f:ec:4a:0f:08:4d:27:29:ac:73:98:ba:df:a2:6f:6b:4c:22:
         ba:9b:f1:a3:bb:f7:f8:b9:81:16:3c:10:c2:aa:c1:6b:c9:f9:
         54:ed:7e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----