Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cfbed3ea-b6de-3951-b2de-06cc3abc90b6.roa
File:                     cfbed3ea-b6de-3951-b2de-06cc3abc90b6.roa (raw, json)
Hash identifier:          0aMLUvY/81FTzjGvPb1qF52O7JVOBDHloSHpq7B6Fnw=
Subject key identifier:   0B:90:EA:97:AC:40:17:0C:F7:64:6B:D4:82:C9:BA:ED:04:A5:32:CF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584237E905F6F64233F8E02A2380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cfbed3ea-b6de-3951-b2de-06cc3abc90b6.roa
Signing time:             Wed 14 Jun 2023 16:04:14 +0000
ROA not before:           Wed 14 Jun 2023 16:04:14 +0000
ROA not after:            Tue 12 Sep 2023 16:04:14 +0000
asID:                     834
IP address blocks:        108.165.40.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:37:e9:05:f6:f6:42:33:f8:e0:2a:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 14 16:04:14 2023 GMT
            Not After : Sep 12 16:04:14 2023 GMT
        Subject: CN=0422acfb-65e9-4da3-8dc1-a7b5426126c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6c:c0:fe:19:d6:12:f5:7c:95:e0:0f:35:1b:
                    76:68:cb:28:ed:de:ff:56:89:4d:8d:0c:38:3c:b0:
                    53:a2:51:ef:8f:8b:43:cf:78:d0:82:7e:cc:54:2c:
                    e8:a0:f7:e3:3c:0e:56:68:e4:b3:61:06:c2:12:cf:
                    98:ef:61:6a:d6:46:89:f2:69:7f:f5:24:a8:02:6f:
                    ec:8c:af:87:ae:8a:ae:c0:b2:86:51:9d:bb:0a:67:
                    9d:f6:8b:f7:09:3f:2a:dc:13:9c:28:97:cd:d6:86:
                    02:d9:0c:5a:77:fa:3c:b4:75:6d:f7:cf:16:80:5f:
                    2e:46:19:7d:22:d6:bb:9b:ac:36:18:21:29:3b:b1:
                    1c:c5:26:3d:62:c9:3f:e7:f7:16:c6:b8:e1:38:69:
                    43:b8:c7:18:c4:6b:b6:ac:bc:48:d4:66:16:ef:ee:
                    4d:34:2a:0d:3f:a3:12:b8:a4:c0:c8:b9:6d:00:98:
                    26:50:57:2e:1c:26:f3:9a:41:01:15:70:d4:3f:9d:
                    ca:4e:e9:c6:64:54:a4:f9:33:e9:f0:25:e7:14:e4:
                    3a:d4:4d:4a:e8:c7:65:12:39:30:71:42:08:65:26:
                    ea:41:9c:03:7f:c7:9c:42:99:e1:dc:c9:77:67:e3:
                    d3:3d:e6:f7:6e:1b:2f:5d:a9:c3:b3:1c:cd:ce:51:
                    eb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:90:EA:97:AC:40:17:0C:F7:64:6B:D4:82:C9:BA:ED:04:A5:32:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cfbed3ea-b6de-3951-b2de-06cc3abc90b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:85:88:6b:75:15:00:45:68:50:13:fc:1c:14:43:af:aa:95:
         a4:9c:a2:91:3c:b3:34:cb:30:62:20:77:41:be:8d:aa:87:0a:
         4d:75:88:46:9d:71:28:42:02:8c:e7:45:8d:94:13:87:00:22:
         d5:f2:cf:aa:a8:7e:2d:82:4e:a6:9e:56:54:51:0e:af:cf:08:
         75:a6:9b:94:a3:c0:6a:74:9f:36:04:95:06:8d:d8:ad:69:cf:
         7c:ef:1d:26:cb:c5:90:11:97:39:a6:ed:45:cd:ba:fd:a2:02:
         35:da:a5:a3:14:da:2c:46:68:7e:7c:c2:04:11:63:d6:1c:01:
         9a:10:18:01:60:42:b8:b3:d7:40:76:6a:f3:22:0b:7a:9b:2a:
         5f:14:33:5a:35:cc:15:18:d2:5d:87:95:49:cc:fd:1e:3c:33:
         a8:5a:e2:1b:30:49:10:16:a6:f7:85:00:8f:83:0a:19:63:53:
         cc:8c:06:4a:d7:02:20:be:93:1e:99:77:6b:b9:0c:cf:09:05:
         d6:52:ee:6b:bc:ae:6c:ab:ad:95:9e:46:fc:83:4d:b3:3b:fb:
         80:15:fc:10:f1:2c:e7:88:d7:0c:ae:3f:4a:b8:92:8c:50:b4:
         e3:0b:cb:0d:8b:17:01:72:93:26:3d:ac:35:cd:52:f7:36:77:
         b9:00:71:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEI36QX29kIz+OAqI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDYxNDE2MDQxNFoXDTIzMDkxMjE2MDQxNFowLzEtMCsGA1UEAxMk
MDQyMmFjZmItNjVlOS00ZGEzLThkYzEtYTdiNTQyNjEyNmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2zA/hnWEvV8leAPNRt2aMso7d7/VolNjQw4
PLBTolHvj4tDz3jQgn7MVCzooPfjPA5WaOSzYQbCEs+Y72Fq1kaJ8ml/9SSoAm/s
jK+HroquwLKGUZ27Cmed9ov3CT8q3BOcKJfN1oYC2Qxad/o8tHVt988WgF8uRhl9
Ita7m6w2GCEpO7EcxSY9Ysk/5/cWxrjhOGlDuMcYxGu2rLxI1GYW7+5NNCoNP6MS
uKTAyLltAJgmUFcuHCbzmkEBFXDUP53KTunGZFSk+TPp8CXnFOQ61E1K6MdlEjkw
cUIIZSbqQZwDf8ecQpnh3Ml3Z+PTPeb3bhsvXanDsxzNzlHrowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAuQ6pesQBcM92Rr1ILJuu0EpTLPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvY2ZiZWQzZWEtYjZkZS0z
OTUxLWIyZGUtMDZjYzNhYmM5MGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKUoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKeFiGt1FQBFaFAT/BwUQ6+qlaScopE8szTLMGIgd0G+jaqHCk11iEad
cShCAoznRY2UE4cAItXyz6qofi2CTqaeVlRRDq/PCHWmm5SjwGp0nzYElQaN2K1p
z3zvHSbLxZARlzmm7UXNuv2iAjXapaMU2ixGaH58wgQRY9YcAZoQGAFgQriz10B2
avMiC3qbKl8UM1o1zBUY0l2HlUnM/R48M6ha4hswSRAWpveFAI+DChljU8yMBkrX
AiC+kx6Zd2u5DM8JBdZS7mu8rmyrrZWeRvyDTbM7+4AV/BDxLOeI1wyuP0q4koxQ
tOMLyw2LFwFykyY9rDXNUvc2d7kAcQw=
-----END CERTIFICATE-----