Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f30af969-9e31-3271-b54e-bf4f8e08a72c.roa
File:                     f30af969-9e31-3271-b54e-bf4f8e08a72c.roa (raw, json)
Hash identifier:          rEWTPdGDWIhsYRCFdiTSx9mH+FahjKrFWs062iIYue0=
Subject key identifier:   C0:EC:71:C9:9D:65:F6:1A:97:C0:60:B3:44:F5:F8:E6:EA:93:C1:FC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E44705B2892C8998E1E038E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f30af969-9e31-3271-b54e-bf4f8e08a72c.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Fri 11 Aug 2023 16:57:19 +0000
asID:                     208485
IP address blocks:        166.1.145.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:05:b2:89:2c:89:98:e1:e0:38:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug 11 16:57:19 2023 GMT
        Subject: CN=eb050db3-1441-4688-8d24-b83ba58ad33b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:96:d2:dd:22:a5:e5:9f:83:d0:24:85:8c:d3:
                    96:46:df:de:5a:4c:1e:2e:7b:ee:fc:b8:1e:d9:34:
                    95:5f:02:70:4a:e7:09:9c:9c:6b:7b:35:34:b5:ad:
                    03:f6:54:97:10:39:9f:48:a8:4f:a7:99:3d:2d:b0:
                    d9:46:5e:82:5b:75:a0:1b:3e:6c:59:66:15:34:55:
                    15:d4:35:f3:49:8e:f1:6a:b8:40:e9:c4:8e:bd:a1:
                    b9:8e:7a:dc:e6:13:90:39:f0:19:a2:ec:7e:62:7b:
                    a2:3d:57:4e:40:d3:8b:4f:e9:d5:f7:07:f9:38:42:
                    e6:0f:d0:e7:5e:36:a5:4c:77:c7:d3:8e:79:e0:34:
                    19:6a:cd:19:78:fd:fa:4c:db:98:17:a3:03:83:98:
                    97:67:67:c6:c7:68:25:d0:b9:17:fb:36:a6:53:ca:
                    fe:c0:31:2b:00:9f:cf:7f:ef:19:83:20:da:e9:6d:
                    54:4b:16:79:08:aa:5d:d7:47:2f:b7:e1:c7:7a:f0:
                    cf:03:e0:7c:1c:23:cd:8f:da:6f:74:4b:38:0b:c6:
                    5a:e2:a2:b4:d3:68:ac:1a:15:78:1c:2f:d6:37:1c:
                    f3:15:6e:30:64:7c:9c:15:08:7c:55:ac:61:d4:88:
                    80:5b:04:b1:b2:da:69:06:68:83:b6:02:b2:75:7a:
                    2f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EC:71:C9:9D:65:F6:1A:97:C0:60:B3:44:F5:F8:E6:EA:93:C1:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f30af969-9e31-3271-b54e-bf4f8e08a72c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:11:44:0b:c1:68:06:32:2b:0d:52:3a:fa:f5:e5:c4:e8:2e:
         1f:f2:a1:51:68:c5:49:45:63:53:65:7c:bc:c8:a3:a4:c6:b1:
         94:5a:fa:e2:6d:fb:79:c0:13:d3:8a:67:20:74:87:d8:a4:5f:
         54:5e:8e:b1:d2:b8:d6:26:7c:61:f2:b9:56:e4:b2:b6:c7:e6:
         02:89:ee:8c:c0:7d:11:81:f1:19:81:0b:79:fb:58:0c:bb:c0:
         8f:f8:0f:9d:91:05:9d:0b:13:b2:30:7b:2c:31:a9:2c:e0:a4:
         b9:57:cb:43:7e:9f:2b:6e:fe:18:26:20:06:25:e6:8f:ce:95:
         4c:da:d4:0c:2e:29:de:06:fd:ed:ca:49:a0:a8:ae:c5:81:a7:
         a8:f2:e8:f3:18:52:91:0e:b2:70:a0:1f:37:fe:85:6b:4f:d0:
         1d:f5:ff:50:ba:f2:5a:20:b0:1d:ce:48:a1:c3:c5:58:f4:56:
         ef:0f:a4:1c:5c:87:4b:ab:51:86:97:42:be:52:ae:ed:79:a8:
         23:9f:5b:ca:dd:46:46:a1:0c:b1:32:42:c9:6b:5f:d9:4d:5f:
         88:4a:0d:03:51:cb:0b:10:18:00:13:a3:e3:ef:42:fc:ed:66:
         6d:00:3b:bb:d6:08:2e:1f:a0:81:b0:8f:e3:b1:f8:77:63:1f:
         3b:45:83:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----