Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d90683d5-05e3-3dd0-accb-7a86c5b0ec0e.roa
File:                     d90683d5-05e3-3dd0-accb-7a86c5b0ec0e.roa (raw, json)
Hash identifier:          sOh4CFh1d7KPMfUGXlZn59uPDR28/huCUvEyTRE2nGY=
Subject key identifier:   2B:89:3C:9A:10:BA:C4:12:9F:F2:98:54:D2:DF:32:3D:FD:BA:19:B5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843895A9279AA8046EBFF720B40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d90683d5-05e3-3dd0-accb-7a86c5b0ec0e.roa
Signing time:             Fri 13 Oct 2023 13:00:20 +0000
ROA not before:           Fri 13 Oct 2023 13:00:20 +0000
ROA not after:            Thu 11 Jan 2024 14:00:20 +0000
asID:                     400642
IP address blocks:        166.0.7.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:89:5a:92:79:aa:80:46:eb:ff:72:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 13 13:00:20 2023 GMT
            Not After : Jan 11 14:00:20 2024 GMT
        Subject: CN=1918637d-99a3-461a-b3e2-a3c1aedc474b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:01:a4:fc:3e:50:6b:f9:9b:f0:af:bc:32:a8:
                    89:49:d8:9a:b5:99:d6:2c:b2:76:01:15:96:57:3e:
                    eb:2b:1e:2c:d3:f5:7c:2f:36:98:54:61:62:8e:6d:
                    99:ca:b3:8b:af:45:c7:82:74:7d:78:15:5b:01:ce:
                    dd:86:51:81:3e:b3:59:dc:74:0c:10:cb:fd:e0:50:
                    e1:75:c2:0c:af:01:2d:59:da:bb:5c:b7:e4:14:78:
                    70:3c:bc:b7:7a:55:a4:6a:eb:d1:a8:d1:1f:11:bc:
                    f1:98:7a:ab:db:d9:2d:60:f7:fc:9f:18:f0:66:0e:
                    d4:4b:ad:eb:c8:c2:d9:84:b7:62:83:95:a2:58:c8:
                    2b:eb:65:35:dc:ed:06:46:72:b7:65:d6:d4:0c:b6:
                    ac:61:12:69:b6:58:8e:58:c8:81:b7:52:6e:e6:fa:
                    26:0e:d8:66:45:59:52:55:fa:30:78:fa:3d:21:da:
                    96:3d:dd:63:0a:6c:a3:20:75:73:0b:96:e8:2d:63:
                    9c:7c:e5:6d:68:b6:fe:5b:55:d3:eb:95:a0:d6:ff:
                    0d:9c:cb:36:c9:7f:e2:06:6a:a5:b5:a2:be:60:a5:
                    d0:5b:fa:29:25:e5:e2:ef:07:0b:3c:79:a2:55:18:
                    79:d9:26:53:2d:bd:2f:0e:12:b7:17:36:b4:c4:23:
                    c4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:89:3C:9A:10:BA:C4:12:9F:F2:98:54:D2:DF:32:3D:FD:BA:19:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d90683d5-05e3-3dd0-accb-7a86c5b0ec0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:cc:86:59:16:61:63:4c:14:4c:d7:99:b1:66:84:80:5c:2f:
         26:2e:de:15:d5:37:ea:e3:b2:0d:6f:de:4b:63:44:87:eb:46:
         6e:65:31:06:97:53:f0:71:87:29:ba:d7:95:60:2a:6a:0c:11:
         03:a8:e0:b3:26:ee:70:12:c9:5a:2e:31:58:fe:7b:86:cd:41:
         1f:f2:48:65:d4:f4:a2:1a:38:c2:2f:80:75:ea:9e:8d:1a:ce:
         f5:40:8e:79:48:b2:66:63:14:7f:5f:8a:2c:ce:47:eb:6b:ce:
         ef:00:9d:87:94:33:3c:40:53:cb:5a:85:fb:d4:88:9f:4f:05:
         d9:3b:e0:b2:50:65:5c:72:db:b5:6e:e9:67:99:f2:5c:0b:32:
         32:48:76:c7:44:c6:c6:ee:41:74:85:8f:90:3f:25:51:a2:ca:
         11:a7:51:fc:8e:92:1b:42:51:83:f9:6d:af:7e:71:9e:f5:d5:
         6f:ca:4d:f3:6f:81:17:ce:13:6d:31:44:df:f7:cb:eb:f3:f2:
         26:c4:09:93:59:c8:1b:26:66:ac:24:04:6a:5d:5b:bb:e4:35:
         71:96:fb:36:e3:02:52:bf:f9:c2:7e:4e:39:b0:6c:1c:cc:ee:
         15:f6:56:7a:c3:31:d0:0f:b3:d8:9b:24:91:5b:f6:f0:f4:77:
         54:62:b5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----