Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f5b8cb05-5d6b-3fbf-8761-8ce3b5d6436b.roa
File:                     f5b8cb05-5d6b-3fbf-8761-8ce3b5d6436b.roa (raw, json)
Hash identifier:          1kLad19Mb+mK+h+CdXQNb9w6AqmepdNmtIOfDEXzuWE=
Subject key identifier:   7E:94:AB:20:9B:96:31:FB:81:7F:A7:79:43:B1:F6:87:10:E0:46:67
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842FE2821A6D7A364BE79BF7EC8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f5b8cb05-5d6b-3fbf-8761-8ce3b5d6436b.roa
Signing time:             Thu 24 Aug 2023 16:21:27 +0000
ROA not before:           Thu 24 Aug 2023 16:21:27 +0000
ROA not after:            Wed 22 Nov 2023 17:21:27 +0000
asID:                     11798
IP address blocks:        166.1.197.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:fe:28:21:a6:d7:a3:64:be:79:bf:7e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 24 16:21:27 2023 GMT
            Not After : Nov 22 17:21:27 2023 GMT
        Subject: CN=25dc7675-a719-40e4-bf67-d5791c009723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:df:e6:94:8a:5f:47:88:00:74:13:9b:cb:30:
                    58:d9:1b:2d:6b:17:32:2a:d5:c1:64:b7:e5:8c:62:
                    07:73:95:1e:2d:13:44:9f:74:8d:1b:33:1f:2e:ef:
                    aa:3d:c9:5c:b2:00:4f:47:16:2b:93:0b:1f:b1:6a:
                    ee:d8:ab:5b:da:92:c5:90:ad:20:3f:fc:52:b9:5c:
                    7f:2b:76:0b:3e:a4:1c:e2:ce:55:98:da:e2:2c:37:
                    f5:23:35:76:4e:84:fe:45:a5:93:1b:ca:f1:37:50:
                    e5:f2:97:4d:81:c6:13:35:f6:e5:a7:26:1f:e5:b3:
                    8b:07:51:dd:23:61:fd:c4:5d:3c:11:99:4c:15:7a:
                    52:48:f7:63:a1:e5:9e:f5:1d:ae:b6:00:6d:19:55:
                    14:fb:88:36:59:bd:94:cc:ad:03:75:76:47:62:4f:
                    c1:35:7c:97:3c:cb:c8:0f:81:4a:dc:7f:d4:d2:ae:
                    ca:ed:6a:f5:41:e9:d8:f8:88:9e:ec:d0:a4:8c:c4:
                    1c:28:71:fd:d3:8f:21:ec:14:af:25:a0:b5:40:a3:
                    cb:ae:36:b7:87:b0:38:22:dd:d2:8d:9d:99:f1:16:
                    f2:da:7b:7d:b1:bb:f5:86:49:cd:e9:09:fe:00:bf:
                    78:8c:08:82:c5:04:7c:11:26:ff:95:91:d8:d8:df:
                    10:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:94:AB:20:9B:96:31:FB:81:7F:A7:79:43:B1:F6:87:10:E0:46:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f5b8cb05-5d6b-3fbf-8761-8ce3b5d6436b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:c7:b8:29:d3:9a:a3:f9:41:4f:a4:1e:ad:77:55:87:3b:b8:
         dd:fc:02:f3:d2:f4:b3:08:0e:47:74:81:e4:f1:52:4e:74:79:
         f3:9e:4f:af:bd:ba:4a:e3:90:4a:6d:6b:ff:43:a6:ab:02:2b:
         9b:7c:bc:a8:14:28:19:44:89:bf:1e:63:21:07:d3:72:cd:31:
         61:3a:9d:a9:f6:2d:28:8f:44:a1:ff:11:4d:67:aa:22:f4:e2:
         0e:86:4e:53:52:28:a3:c3:25:99:56:8e:f7:5d:15:18:87:94:
         2d:05:bb:06:8c:39:97:37:7b:98:c4:2f:e9:70:51:3b:1e:46:
         6e:a2:80:0d:66:f7:f2:c9:89:bf:09:f3:25:e4:6c:91:35:dd:
         e2:50:35:d0:90:81:af:e3:53:89:8c:28:d5:a5:78:3a:ee:28:
         11:f1:89:14:99:5e:af:f0:29:88:2e:25:da:b7:c9:e7:06:e5:
         4d:42:9f:c4:4d:96:0c:12:ad:77:b9:47:8c:fe:73:1b:fb:13:
         b0:3f:d4:8a:71:c4:9f:7a:a8:20:ff:dd:f0:2f:8a:e7:28:ed:
         69:35:4d:62:f4:ad:05:7d:e2:8e:f2:db:19:a8:28:eb:f9:f0:
         24:88:fd:98:16:75:12:fd:12:c1:a9:8d:58:13:6d:61:37:17:
         94:85:c1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----