Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2206f2b-0acd-3b1f-b493-55417bce2c4e.roa
File:                     f2206f2b-0acd-3b1f-b493-55417bce2c4e.roa (raw, json)
Hash identifier:          uk0gYWY+3HEN3a9xbHZbvG1reDeYjM8uWnU35SaICZk=
Subject key identifier:   50:4D:51:8F:78:DB:C1:39:97:0E:4C:52:1D:80:9F:FD:65:0F:89:F6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858478A5A6E8A692FD0B4F4BBFD80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2206f2b-0acd-3b1f-b493-55417bce2c4e.roa
Signing time:             Mon 14 Oct 2024 16:43:43 +0000
ROA not before:           Mon 14 Oct 2024 16:43:43 +0000
ROA not after:            Sun 12 Jan 2025 17:43:43 +0000
asID:                     834
IP address blocks:        108.165.76.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8a:5a:6e:8a:69:2f:d0:b4:f4:bb:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 14 16:43:43 2024 GMT
            Not After : Jan 12 17:43:43 2025 GMT
        Subject: CN=a0d4fc30-6778-4991-8252-c85717f78e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0f:c4:51:4c:c8:0d:d5:63:33:7f:0c:ad:54:
                    8c:ac:24:61:94:48:d2:de:be:a4:75:01:4c:60:4f:
                    2a:cd:18:83:d5:8e:f2:cb:49:b7:75:c8:17:66:4f:
                    a9:9c:9a:eb:ef:6c:e5:0f:f5:10:ea:d4:4b:4c:d5:
                    ce:cc:0e:9d:31:87:0d:1f:38:00:50:51:cc:26:7d:
                    47:5d:72:82:e9:b3:8d:8f:af:8a:18:ea:79:b1:b9:
                    06:a7:86:92:f4:2e:95:0a:51:10:a1:3e:d1:4d:12:
                    ba:9a:75:a5:99:c6:80:6a:f4:93:9e:72:a2:02:56:
                    1f:36:08:66:eb:65:26:c7:2b:84:01:60:16:af:07:
                    b1:e3:0f:ff:3a:ab:68:fc:52:e6:f9:40:e9:1d:d9:
                    d0:b0:eb:e6:78:7d:e0:3e:29:92:e9:bd:75:9a:54:
                    29:79:22:16:31:47:e2:1e:4b:76:bd:a7:d3:a4:ff:
                    e6:99:fb:d5:03:ce:21:d3:2a:29:1d:ed:85:49:be:
                    a4:50:5e:0e:70:cf:4f:09:fb:88:43:65:34:27:11:
                    58:9d:a4:b1:67:39:da:03:78:84:3c:1d:a5:c3:af:
                    9e:fd:f7:3c:53:c1:34:ec:a3:05:80:08:9a:c7:64:
                    e5:23:04:29:cf:e6:09:0a:f4:65:d6:7e:1a:11:49:
                    6a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4D:51:8F:78:DB:C1:39:97:0E:4C:52:1D:80:9F:FD:65:0F:89:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2206f2b-0acd-3b1f-b493-55417bce2c4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:2b:6f:7b:44:dd:6f:03:95:ec:fe:ec:2c:94:da:d7:c8:3b:
         1d:37:30:39:7a:9f:6d:d9:ea:b8:2d:77:18:19:5d:4e:4b:7b:
         00:e1:e6:2d:d2:61:96:5a:aa:5d:21:64:b8:82:6c:4e:b0:4e:
         64:a2:ca:83:a1:17:4e:e0:6d:4c:9d:d4:b7:cf:5b:aa:e4:a1:
         ec:f5:d8:3e:f4:9a:e3:f0:8b:65:6a:9e:e4:ef:f6:0e:2f:bd:
         c4:8d:5a:1c:28:ad:76:b0:53:01:5f:c1:a6:7a:75:67:a0:8d:
         55:b7:3c:02:01:ac:ee:03:42:ff:29:9a:fe:ee:e5:cd:ae:fc:
         33:f9:ae:11:af:a8:7c:a0:a4:54:4a:9b:29:99:c6:ff:c6:8e:
         d2:93:f7:86:25:0b:bc:da:86:38:e1:a0:fe:10:e2:14:e1:0a:
         cc:38:96:8e:7e:c7:be:b8:c2:8f:6f:4d:6a:17:b3:51:af:9c:
         f0:02:fc:ac:f4:96:94:e3:49:1e:ec:91:71:f9:74:67:4c:9c:
         e4:c8:06:27:01:a3:90:fc:a2:64:91:d5:05:77:4e:12:8a:3a:
         09:b8:4e:95:47:f2:2a:aa:03:60:b6:42:80:24:7a:19:cb:0f:
         b9:f2:e9:be:7d:2a:99:0a:b8:8f:8d:bc:90:d7:dd:f2:a0:bd:
         69:45:83:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----