Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e4764c2d-c51a-32a4-aa4c-657d069a782f.roa
File:                     e4764c2d-c51a-32a4-aa4c-657d069a782f.roa (raw, json)
Hash identifier:          xqi/8WvoO6xb0VcJ+zAQYv9VYAMMOnXlZgB5Lz+wIpY=
Subject key identifier:   85:F6:C2:A5:51:90:63:E4:FA:D7:C0:76:E2:5D:D5:A8:E6:F0:E3:7E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E4470622C9782E2DEF88FC80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e4764c2d-c51a-32a4-aa4c-657d069a782f.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Fri 11 Aug 2023 21:12:47 +0000
asID:                     211584
IP address blocks:        166.0.43.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:06:22:c9:78:2e:2d:ef:88:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug 11 21:12:47 2023 GMT
        Subject: CN=d53aa5a2-e037-4cba-8b82-d3a06093b1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:07:c1:66:b8:6d:12:57:99:e2:76:90:a3:
                    38:f1:98:ab:68:3c:1d:f6:30:7b:40:56:76:7a:aa:
                    20:e7:8d:f2:57:d5:68:2d:e0:79:49:58:91:36:72:
                    71:5e:1f:17:42:80:e8:cc:b2:df:2b:3f:29:ea:40:
                    0f:4e:37:1d:a3:f6:1b:85:47:ac:53:e8:ec:67:39:
                    6f:af:5f:3c:9d:30:8e:a6:f0:ec:86:77:44:10:dc:
                    b8:c9:04:04:fb:6f:f6:4b:4f:0c:52:ed:cd:16:de:
                    03:b9:5e:4e:56:f8:e2:2f:de:c6:e0:b4:f9:8a:f0:
                    56:8d:e6:42:87:e4:1f:ec:b3:9b:44:ca:f3:f5:c2:
                    86:de:55:32:38:1a:03:8b:73:f1:eb:6f:74:04:9a:
                    03:e9:fa:52:55:1c:b7:76:8e:37:9d:e1:8f:f9:eb:
                    45:db:c6:10:1b:7d:1e:22:78:d3:ae:22:b2:a5:b7:
                    64:b7:ed:d8:d5:17:27:38:3e:03:fd:1e:db:96:ab:
                    42:29:bc:83:c9:d7:fd:f1:58:32:d8:4c:eb:bc:c8:
                    4f:31:5c:57:67:53:2f:2a:c8:59:d0:96:36:d8:a4:
                    01:69:3d:5c:68:d1:0f:b6:dc:18:7b:dd:ad:2e:4a:
                    c7:28:01:33:bd:99:0c:3d:c2:f0:f1:ec:2c:78:8d:
                    90:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F6:C2:A5:51:90:63:E4:FA:D7:C0:76:E2:5D:D5:A8:E6:F0:E3:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e4764c2d-c51a-32a4-aa4c-657d069a782f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:11:5f:4b:7b:7d:06:23:85:97:37:e8:e3:2b:8f:fe:3a:01:
         92:e6:8f:e5:24:11:7d:c7:df:f8:65:0e:71:35:48:03:08:f9:
         0f:ed:40:5f:05:3c:d4:9e:53:39:1b:9c:76:13:80:80:59:43:
         89:dc:24:7e:90:45:b6:a3:af:9a:25:d6:70:5a:d3:ea:9c:5b:
         f7:08:19:50:50:c5:cc:82:70:f0:1c:37:b1:f8:5d:3e:45:12:
         6e:08:f3:40:49:8a:1c:71:f3:7e:2c:a2:fd:dd:9b:b2:34:0a:
         82:95:a4:97:4c:19:51:08:5d:1c:f6:b5:8b:77:b7:f6:d7:ed:
         43:e0:79:5e:08:df:ad:5f:7e:1e:eb:a7:77:ba:27:cc:6e:90:
         dd:11:58:b4:5b:2c:1b:17:a8:66:9c:d6:95:c9:9c:ef:d6:c5:
         4e:cb:64:1f:00:c2:f9:ce:5d:2a:45:2d:08:e8:f6:32:7f:87:
         1c:73:4a:72:da:72:2c:3c:25:27:a4:63:16:aa:4e:b9:b1:5e:
         56:5d:4d:f3:67:8c:8f:a8:1d:e1:99:37:68:ae:c8:48:67:64:
         94:38:67:68:3c:e0:98:ca:0e:3f:b0:59:ef:8a:db:3f:87:47:
         06:00:12:88:9b:7e:0c:f3:5e:fe:d2:25:da:c2:e2:17:b9:09:
         62:ae:3d:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkRwYiyXguLe+I/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDgxMTIxMTI0N1owLzEtMCsGA1UEAxMk
ZDUzYWE1YTItZTAzNy00Y2JhLThiODItZDNhMDYwOTNiMWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2wHwWa4bRJXmeJ2kKM48ZiraDwd9jB7QFZ2
eqog543yV9VoLeB5SViRNnJxXh8XQoDozLLfKz8p6kAPTjcdo/YbhUesU+jsZzlv
r188nTCOpvDshndEENy4yQQE+2/2S08MUu3NFt4DuV5OVvjiL97G4LT5ivBWjeZC
h+Qf7LObRMrz9cKG3lUyOBoDi3Px6290BJoD6fpSVRy3do43neGP+etF28YQG30e
InjTriKypbdkt+3Y1RcnOD4D/R7blqtCKbyDydf98Vgy2EzrvMhPMVxXZ1MvKshZ
0JY22KQBaT1caNEPttwYe92tLkrHKAEzvZkMPcLw8ewseI2QKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIX2wqVRkGPk+tfAduJd1ajm8ON+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTQ3NjRjMmQtYzUxYS0z
MmE0LWFhNGMtNjU3ZDA2OWE3ODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgArMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADsRX0t7fQYjhZc36OMrj/46AZLmj+UkEX3H3/hlDnE1SAMI+Q/tQF8F
PNSeUzkbnHYTgIBZQ4ncJH6QRbajr5ol1nBa0+qcW/cIGVBQxcyCcPAcN7H4XT5F
Em4I80BJihxx834sov3dm7I0CoKVpJdMGVEIXRz2tYt3t/bX7UPgeV4I361ffh7r
p3e6J8xukN0RWLRbLBsXqGac1pXJnO/WxU7LZB8AwvnOXSpFLQjo9jJ/hxxzSnLa
ciw8JSekYxaqTrmxXlZdTfNnjI+oHeGZN2iuyEhnZJQ4Z2g84JjKDj+wWe+K2z+H
RwYAEoibfgzzXv7SJdrC4he5CWKuPaQ=
-----END CERTIFICATE-----