Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec86b35e-80d7-35fa-8325-8ed5b36d75f6.roa
File:                     ec86b35e-80d7-35fa-8325-8ed5b36d75f6.roa (raw, json)
Hash identifier:          DLIyzbWg+gQVTduVdmJneBaXVQf6tRUZefbiS3zAzgs=
Subject key identifier:   A0:8E:03:51:E8:CC:63:51:FC:FA:A7:AB:73:55:78:F6:46:95:AB:F8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858433E9A04A7C5204F7343BD0780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec86b35e-80d7-35fa-8325-8ed5b36d75f6.roa
Signing time:             Sat 16 Sep 2023 18:22:39 +0000
ROA not before:           Sat 16 Sep 2023 18:22:39 +0000
ROA not after:            Fri 15 Dec 2023 19:22:39 +0000
asID:                     46573
IP address blocks:        166.1.68.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:3e:9a:04:a7:c5:20:4f:73:43:bd:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 16 18:22:39 2023 GMT
            Not After : Dec 15 19:22:39 2023 GMT
        Subject: CN=22268b9e-8d40-4e04-b06f-971d415bacf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:64:a1:62:87:85:11:7c:99:21:fe:43:5a:57:
                    09:9f:49:44:29:c9:99:ff:29:1b:f2:36:98:d3:e2:
                    b9:0c:c0:54:27:be:40:a9:b8:88:38:f4:99:00:c5:
                    02:54:c7:b3:ba:6a:9f:e5:97:eb:83:69:ac:62:de:
                    bd:35:7b:76:6e:79:37:d4:6b:2b:e3:5b:03:51:20:
                    79:d0:70:28:15:c6:77:a7:1f:77:74:70:dd:aa:df:
                    e0:8f:d7:55:2d:17:d2:95:ea:73:9d:c2:4f:75:a4:
                    3d:f0:d7:8e:19:ff:23:ba:e4:ae:0f:49:1d:79:b3:
                    5d:4d:34:3f:df:7c:dc:c3:5e:2f:f6:58:f7:f2:76:
                    83:45:a0:27:eb:eb:aa:b2:97:98:e5:a3:10:19:10:
                    36:66:af:e1:df:df:76:ac:0f:e2:68:cf:07:20:1c:
                    57:25:1d:a1:87:67:59:5a:9f:b7:fe:49:1f:e0:36:
                    30:4d:1e:3b:95:57:84:b5:19:a6:aa:ef:13:9c:5d:
                    62:f1:74:df:78:c4:a3:80:c7:7f:91:51:3a:8e:d9:
                    0c:fe:dd:a6:6e:25:9d:52:b5:32:e8:37:02:c0:7e:
                    e9:24:01:23:ad:85:02:10:f7:2d:fa:42:f6:ce:3c:
                    77:52:16:0e:08:d3:af:7d:53:85:60:83:87:75:5d:
                    f2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8E:03:51:E8:CC:63:51:FC:FA:A7:AB:73:55:78:F6:46:95:AB:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec86b35e-80d7-35fa-8325-8ed5b36d75f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:6b:bd:d2:46:14:58:93:46:02:f5:76:d4:af:0f:d8:34:e6:
         fd:78:da:66:16:b3:c4:6e:64:55:2c:aa:f5:b7:d9:6c:3d:91:
         99:8b:83:e1:f1:a0:13:dc:1e:44:42:21:58:cb:db:2d:e2:2c:
         fb:06:ad:dd:c3:2e:d3:0b:9c:c8:e2:da:bb:b1:af:a6:f3:68:
         18:e3:d4:97:35:e1:05:83:11:a3:cc:c5:30:a6:e3:cb:13:e6:
         1f:4a:67:64:6f:d4:fd:fb:0c:8d:4e:ef:30:85:82:a7:6a:21:
         a3:c8:e8:bf:1a:0a:78:5c:5c:72:66:51:d2:e9:ec:42:d1:3d:
         65:e3:29:a4:c0:1e:14:fd:f1:a0:ef:97:17:39:7f:54:f8:34:
         5c:f3:16:46:29:70:1e:1d:dd:e5:47:ae:56:98:d0:38:eb:47:
         da:a6:bd:14:2d:20:01:19:7e:b9:3c:5c:59:e2:5a:5e:ca:8f:
         7a:f1:0c:f1:e5:36:81:a4:69:94:a0:15:01:e2:39:d1:b1:a5:
         e2:ff:69:e9:ec:93:7c:1a:cc:d2:d0:93:26:0e:7a:d7:07:9f:
         3e:a2:d9:5c:c5:27:ae:e6:a1:e3:57:a1:d5:dd:62:2b:d3:c1:
         80:3c:20:6a:98:35:8f:13:01:fb:c6:8f:f5:46:95:1d:cb:27:
         fa:6c:88:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----