Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f1fa2a29-542e-312d-a8ed-3c6ba4312c97.roa
File:                     f1fa2a29-542e-312d-a8ed-3c6ba4312c97.roa (raw, json)
Hash identifier:          B0/QSPpN5nmHxv2UDinFECyk//13qdoReeGmZx+2/Dw=
Subject key identifier:   AC:3B:9D:A1:2B:50:E1:71:11:A0:08:EA:17:39:72:07:DD:5F:0A:2C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285846312425B583D323D125C19380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f1fa2a29-542e-312d-a8ed-3c6ba4312c97.roa
Signing time:             Thu 13 Jun 2024 01:00:25 +0000
ROA not before:           Thu 13 Jun 2024 01:00:25 +0000
ROA not after:            Wed 11 Sep 2024 01:00:25 +0000
asID:                     20473
IP address blocks:        166.0.239.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:31:24:25:b5:83:d3:23:d1:25:c1:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 13 01:00:25 2024 GMT
            Not After : Sep 11 01:00:25 2024 GMT
        Subject: CN=2e1a9585-65e0-46f6-bde1-1cf2650236c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:49:4d:02:47:a6:92:b8:46:ef:7a:e6:46:cc:
                    f2:29:ae:00:d4:c4:84:96:02:ff:af:87:7d:06:1e:
                    ac:c4:33:cc:a0:61:c4:e3:7a:28:66:0a:19:d0:ba:
                    c4:8f:02:7e:66:28:08:f9:d6:3f:bc:8f:a9:2e:30:
                    1e:69:69:ce:73:1c:15:01:01:bc:aa:75:40:0a:f8:
                    35:08:ef:80:0c:4b:a2:f4:1a:e5:32:fd:42:ec:03:
                    35:36:36:00:2e:d7:9b:7a:e7:3f:f6:59:05:df:47:
                    41:6c:23:18:2d:42:a9:4c:91:e5:6f:88:84:75:02:
                    b7:65:5f:56:b6:2e:4f:a9:20:d3:68:cd:98:d3:61:
                    eb:19:c4:8d:3b:a9:99:9e:9a:ba:c6:f8:d2:51:7c:
                    2d:a1:7f:72:50:c5:b0:6a:ac:39:7f:8d:8c:a5:12:
                    0a:9c:56:96:f0:f4:13:03:67:c1:a5:b8:56:f7:38:
                    c9:14:ca:a6:07:3a:59:45:0f:73:e9:7f:6a:57:a6:
                    5a:16:4d:b5:9e:d3:30:cb:12:bb:82:ed:d5:33:2e:
                    ab:b7:ce:4a:49:08:4e:02:56:b3:6e:75:3a:d0:2b:
                    cb:ee:b6:c7:55:b2:8e:dd:fa:fc:c9:d2:9e:83:3d:
                    21:8d:8e:af:e4:2c:ba:15:7c:4d:4a:35:87:81:31:
                    b0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3B:9D:A1:2B:50:E1:71:11:A0:08:EA:17:39:72:07:DD:5F:0A:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f1fa2a29-542e-312d-a8ed-3c6ba4312c97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:35:3a:7f:05:73:a2:6e:91:23:bd:1e:2e:75:bd:6e:17:1f:
         35:f4:34:16:a2:4b:f0:48:e6:a3:1b:1d:e4:df:ae:7a:7e:70:
         14:45:ee:2e:fd:3c:79:06:1d:c5:c5:43:a0:3b:9d:80:46:86:
         63:63:47:e9:b8:ba:47:b0:09:c1:a5:ed:7c:41:e1:c1:32:be:
         e1:7f:67:3e:57:0c:5b:1c:49:ea:10:55:eb:bf:55:32:0d:f0:
         52:3f:ca:1a:2e:4f:02:70:ec:b2:a0:fc:45:96:e1:6e:db:00:
         0b:c1:37:b2:6b:e9:ae:69:09:31:0a:ce:86:6c:73:ae:5e:61:
         50:80:cc:fa:8d:bc:66:80:fc:9d:49:0b:68:e4:fa:78:7d:ff:
         d1:48:33:cb:d5:5e:48:79:3c:a3:f7:b3:fc:11:aa:3f:b4:cc:
         7d:71:1e:62:0d:df:5e:0f:54:57:c4:a2:15:16:b1:ee:c4:13:
         4d:6c:c0:1b:83:82:7d:db:ce:af:31:b7:4c:8c:ba:80:8d:6d:
         fa:e1:4c:0c:3f:86:e4:27:da:25:1c:2e:8c:67:40:f9:fc:a8:
         6a:9c:2c:7a:3b:eb:9c:ac:0b:c2:f4:59:8d:48:30:a0:5f:ee:
         c4:07:7d:2a:4f:64:d8:6b:65:a5:c5:11:be:69:0d:3b:e8:1f:
         36:73:43:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----