Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2ebff3f-6114-3928-beb6-403add31a89e.roa
File:                     f2ebff3f-6114-3928-beb6-403add31a89e.roa (raw, json)
Hash identifier:          spe811dSQhTEVNQjvXlTkNOuEmDT3oCKns+RNX77cDY=
Subject key identifier:   FF:64:8F:9D:BC:31:13:95:1B:67:98:BA:30:C4:57:FE:DA:86:AF:77
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843EC93A25BC8AB11991D37D880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2ebff3f-6114-3928-beb6-403add31a89e.roa
Signing time:             Sat 18 Nov 2023 02:00:18 +0000
ROA not before:           Sat 18 Nov 2023 02:00:18 +0000
ROA not after:            Fri 16 Feb 2024 02:00:18 +0000
asID:                     7018
IP address blocks:        50.114.241.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ec:93:a2:5b:c8:ab:11:99:1d:37:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 18 02:00:18 2023 GMT
            Not After : Feb 16 02:00:18 2024 GMT
        Subject: CN=2d361ab1-9f29-4e26-a7b4-9eb49d347f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b1:40:f1:a1:5f:17:f5:02:b9:40:61:42:5a:
                    86:06:27:24:9d:1b:f5:4b:f0:f6:36:1a:d7:5a:49:
                    74:2d:1a:c3:a7:56:5a:b1:7b:93:67:57:20:5e:11:
                    5d:53:06:49:08:85:c7:9d:6d:28:ef:7e:0d:83:fe:
                    05:d1:72:c2:11:aa:22:2c:51:ee:a5:1d:a6:71:12:
                    d9:0c:d7:b0:47:15:31:4c:45:25:3f:3a:e8:46:81:
                    1d:7f:fd:cf:22:a1:6a:5a:a1:dc:35:cf:97:6b:63:
                    fd:87:df:48:54:0b:6b:be:dc:7a:50:c9:13:dc:0a:
                    65:db:cb:f4:9d:c2:b8:1b:e1:5b:65:d7:e2:4a:14:
                    68:d2:6c:3c:ef:0a:35:0c:dc:3a:57:2c:33:32:f3:
                    ac:30:32:48:4f:6e:b8:4f:56:89:58:c5:49:6b:46:
                    e1:37:c5:d4:62:eb:8f:03:47:63:43:07:5a:90:31:
                    d9:de:73:0f:6f:fa:2a:d8:45:32:82:e4:c0:67:40:
                    65:6b:57:81:f6:0f:4b:84:03:80:9f:c0:99:e0:85:
                    28:bc:c9:04:0f:15:11:4b:9e:6c:89:ff:2b:9b:61:
                    1e:25:57:0f:e6:f3:b0:31:b6:d2:30:3b:de:a1:e3:
                    25:17:e8:54:7c:d6:7a:7d:8e:1d:e1:b2:29:0d:95:
                    95:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:64:8F:9D:BC:31:13:95:1B:67:98:BA:30:C4:57:FE:DA:86:AF:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2ebff3f-6114-3928-beb6-403add31a89e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:fb:d0:c8:6c:c5:d1:47:2b:3b:f7:11:82:a5:13:1f:5e:95:
         df:97:4d:01:2c:56:81:14:6a:e6:d4:3e:a5:03:80:44:62:44:
         ad:82:37:f7:61:ca:d3:fd:27:36:51:04:72:d8:0c:d2:f7:bc:
         94:b4:d9:2d:e8:3d:fc:8a:54:a6:cc:5c:74:3d:e5:eb:01:a6:
         32:64:3f:be:2d:36:25:5c:8d:f3:af:e2:9e:91:1d:68:e0:39:
         ed:42:48:95:e6:66:f3:c6:d4:1c:59:bc:05:6d:ae:06:30:56:
         99:67:df:4c:10:76:79:40:1c:6b:a3:bb:b6:e6:6b:b8:cd:bb:
         14:c6:46:a1:3e:c8:30:a9:b1:f1:8d:4c:e9:65:0d:bd:eb:69:
         28:65:e5:eb:92:fd:64:71:c4:b1:ee:7c:ed:d6:67:05:7c:e3:
         ed:12:fa:04:da:dc:71:5d:e2:36:37:66:34:33:b2:92:41:8c:
         8e:3c:04:0d:29:4d:c9:40:d3:56:90:61:ce:05:b6:37:db:73:
         7a:d0:23:04:74:39:b5:a1:89:cb:1e:32:af:7a:83:98:f0:24:
         96:7e:16:07:0d:06:48:a8:cd:01:ed:64:6e:e6:07:17:85:d2:
         5f:c1:e3:fc:de:83:87:12:42:f3:ea:ba:e0:97:10:de:7a:a0:
         d4:df:a8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----