Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebbdc049-dae9-3a2b-a894-abc5c80e37b9.roa
File:                     ebbdc049-dae9-3a2b-a894-abc5c80e37b9.roa (raw, json)
Hash identifier:          aWsi0ryHasr3a2f6uokYoy8bt+V14Mk6UVAadmqMcaE=
Subject key identifier:   67:52:F9:C9:37:66:3D:51:A7:CA:35:1E:16:B3:AC:D5:85:6D:44:49
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842EFF9E973C5090F81EC665080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebbdc049-dae9-3a2b-a894-abc5c80e37b9.roa
Signing time:             Sat 19 Aug 2023 14:27:00 +0000
ROA not before:           Sat 19 Aug 2023 14:27:00 +0000
ROA not after:            Fri 17 Nov 2023 15:27:00 +0000
asID:                     834
IP address blocks:        108.165.37.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ef:f9:e9:73:c5:09:0f:81:ec:66:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 19 14:27:00 2023 GMT
            Not After : Nov 17 15:27:00 2023 GMT
        Subject: CN=f08da374-a11a-4319-ac6e-5270f518fe1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2e:00:df:db:f4:55:4e:b6:f6:80:5c:d3:d6:
                    0e:a1:c5:1c:f9:eb:71:19:7f:13:62:aa:a5:9a:3d:
                    68:68:44:5e:cd:64:51:4c:4f:f2:7b:18:44:3a:dd:
                    0b:40:41:02:75:5c:a6:81:43:9a:23:58:85:a0:f0:
                    32:46:3e:ef:14:a1:a3:26:62:7a:20:64:f6:c0:a0:
                    29:db:b9:5a:42:33:25:d8:07:48:7c:69:6b:e6:4e:
                    ab:6f:c2:35:ef:bd:a2:dd:6f:c4:65:36:a6:68:49:
                    c1:bf:63:0a:0d:3e:af:3d:56:0d:80:7c:49:8f:e2:
                    4f:1f:cb:ab:af:27:fb:23:69:92:d0:2f:80:70:33:
                    57:27:e3:0f:27:95:54:8a:c5:49:6c:87:67:de:9a:
                    e0:70:b7:a4:37:40:a4:79:df:a0:26:b1:72:3a:a4:
                    d6:d7:71:6f:73:14:b4:a4:c1:67:ff:1b:8e:c0:88:
                    77:21:90:75:60:5c:6c:aa:90:35:b8:86:0c:d5:ed:
                    dd:a7:db:44:00:c1:82:cf:5e:3a:6b:34:ca:23:7e:
                    f5:e7:b6:a7:c9:0f:74:44:22:c1:80:f1:ac:1d:ba:
                    21:c0:10:2a:2f:07:a1:96:65:4f:85:ec:55:9c:a4:
                    7c:2a:3b:25:56:67:67:7c:ec:2b:77:89:58:f4:cf:
                    fd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:52:F9:C9:37:66:3D:51:A7:CA:35:1E:16:B3:AC:D5:85:6D:44:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebbdc049-dae9-3a2b-a894-abc5c80e37b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:fc:3b:d4:2d:b7:7a:c7:dc:47:f1:cc:b3:c1:4d:eb:40:c2:
         33:fe:8b:2e:91:bd:4b:7b:47:f6:3e:08:52:23:96:15:f4:7c:
         d3:4b:30:0d:ac:61:b5:b8:61:64:f8:27:f4:ea:af:ca:5a:75:
         a2:b0:02:3b:4e:ca:b8:d0:43:69:12:9c:05:8c:8c:ba:ed:ac:
         db:7c:00:2d:1c:7e:08:b5:1e:47:52:40:b8:3e:bb:b0:21:3e:
         86:2f:89:30:72:4f:9d:7a:53:92:bb:1f:82:8d:54:42:6c:2f:
         66:a4:c2:e5:58:f8:49:4e:20:b6:78:01:88:df:0b:ca:fb:5e:
         e7:a6:86:ea:ab:80:db:2b:07:ed:9f:19:fd:52:66:d9:a7:06:
         86:cc:e4:0a:00:b1:b6:36:ec:b6:ca:4b:30:19:ab:1a:f9:54:
         ff:77:80:de:9a:b0:13:2e:d1:eb:b5:32:df:2c:bd:6a:1b:57:
         cf:36:88:78:22:0e:e1:08:fb:59:8c:f5:40:5f:11:5c:5e:f7:
         4b:ef:01:27:c6:97:e9:96:00:f2:3d:ee:3e:63:c1:db:63:c2:
         a6:18:0f:fb:e9:b1:eb:e6:7d:f5:1c:26:b4:b4:72:47:1b:30:
         75:a4:69:2c:c3:a4:b1:3f:07:c5:89:4e:ae:7b:e9:d5:15:01:
         e3:35:24:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWELv+elzxQkPgexmUIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDgxOTE0MjcwMFoXDTIzMTExNzE1MjcwMFowLzEtMCsGA1UEAxMk
ZjA4ZGEzNzQtYTExYS00MzE5LWFjNmUtNTI3MGY1MThmZTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7i4A39v0VU629oBc09YOocUc+etxGX8TYqql
mj1oaERezWRRTE/yexhEOt0LQEECdVymgUOaI1iFoPAyRj7vFKGjJmJ6IGT2wKAp
27laQjMl2AdIfGlr5k6rb8I1772i3W/EZTamaEnBv2MKDT6vPVYNgHxJj+JPH8ur
ryf7I2mS0C+AcDNXJ+MPJ5VUisVJbIdn3prgcLekN0Cked+gJrFyOqTW13FvcxS0
pMFn/xuOwIh3IZB1YFxsqpA1uIYM1e3dp9tEAMGCz146azTKI37157anyQ90RCLB
gPGsHbohwBAqLwehlmVPhexVnKR8KjslVmdnfOwrd4lY9M/9lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGdS+ck3Zj1Rp8o1HhazrNWFbURJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZWJiZGMwNDktZGFlOS0z
YTJiLWE4OTQtYWJjNWM4MGUzN2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKUlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIr8O9Qtt3rH3EfxzLPBTetAwjP+iy6RvUt7R/Y+CFIjlhX0fNNLMA2s
YbW4YWT4J/Tqr8padaKwAjtOyrjQQ2kSnAWMjLrtrNt8AC0cfgi1HkdSQLg+u7Ah
PoYviTByT516U5K7H4KNVEJsL2akwuVY+ElOILZ4AYjfC8r7XuemhuqrgNsrB+2f
Gf1SZtmnBobM5AoAsbY27LbKSzAZqxr5VP93gN6asBMu0eu1Mt8svWobV882iHgi
DuEI+1mM9UBfEVxe90vvASfGl+mWAPI97j5jwdtjwqYYD/vpsevmffUcJrS0ckcb
MHWkaSzDpLE/B8WJTq576dUVAeM1JAc=
-----END CERTIFICATE-----