Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fcf55c26-cec6-35c1-bb3f-cc75f53f9a2f.roa
File:                     fcf55c26-cec6-35c1-bb3f-cc75f53f9a2f.roa (raw, json)
Hash identifier:          rlX0SUh+VYmz/PjDJYoK8lY2kOIvC9wplqWt/XUZVD0=
Subject key identifier:   24:0E:6F:D0:3C:B4:80:A5:0B:DD:0D:7C:BC:59:57:EC:0D:44:26:85
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842432FBE1AB5B975E8BAD91F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fcf55c26-cec6-35c1-bb3f-cc75f53f9a2f.roa
Signing time:             Sun 18 Jun 2023 17:00:37 +0000
ROA not before:           Sun 18 Jun 2023 17:00:37 +0000
ROA not after:            Sat 16 Sep 2023 17:00:37 +0000
asID:                     11798
IP address blocks:        50.114.182.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:43:2f:be:1a:b5:b9:75:e8:ba:d9:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 18 17:00:37 2023 GMT
            Not After : Sep 16 17:00:37 2023 GMT
        Subject: CN=72541d26-8e53-4550-89eb-96ca6f211771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:09:8f:ab:12:73:ea:7a:e4:aa:6a:3c:6d:6f:
                    db:6b:ca:bb:18:a6:04:88:23:1f:e4:20:a1:8e:4a:
                    f5:e5:da:48:dc:cd:a7:ce:2f:8b:f2:b5:69:ec:f5:
                    19:46:e0:7f:8a:78:42:24:6f:ed:2b:50:13:c0:7e:
                    60:61:7f:24:aa:71:32:a9:9f:de:f8:fd:1d:4c:79:
                    cb:a8:49:18:ef:d7:fa:8b:bc:27:bd:98:80:a9:83:
                    83:49:c9:61:48:32:34:3f:42:ef:a4:5f:87:fc:8d:
                    8b:1e:89:0d:23:15:74:05:ed:8b:41:87:7f:df:99:
                    79:f7:fa:85:19:58:ed:88:f9:69:8e:ca:d0:40:33:
                    02:56:0e:2c:87:41:c2:29:11:0b:0d:22:7f:1c:1e:
                    f2:c9:3a:8a:71:35:42:ce:e0:5b:29:56:d0:4a:c3:
                    a8:dc:da:8a:cc:e9:13:ed:25:60:c7:6c:e5:90:fe:
                    c0:14:21:43:c2:a7:8c:84:17:b6:d5:ec:0d:fa:60:
                    e2:fa:6d:6a:cb:48:59:80:65:78:3b:d7:64:fb:87:
                    d8:9f:84:7d:35:be:c6:ff:e5:67:08:57:2b:4c:ba:
                    ed:6c:70:aa:0f:6d:ca:c5:42:c3:65:1b:60:bd:78:
                    9f:3a:0f:54:f6:d2:68:28:d4:aa:52:d2:8d:e2:80:
                    46:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0E:6F:D0:3C:B4:80:A5:0B:DD:0D:7C:BC:59:57:EC:0D:44:26:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fcf55c26-cec6-35c1-bb3f-cc75f53f9a2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:5d:63:fc:3d:ce:17:3e:fe:3c:04:70:64:7d:42:b6:29:db:
         5a:ad:c0:77:5d:1b:8e:76:1d:5b:3a:8f:d7:d5:87:9a:1e:23:
         a8:4c:cb:fc:92:da:bb:17:db:77:b7:9d:81:45:28:8f:4b:df:
         a9:24:07:c6:51:d8:9b:30:79:d8:bc:88:05:06:20:0a:c2:b1:
         e1:84:7b:2e:e3:7b:32:7c:0c:86:d6:3b:3a:57:20:50:9a:e0:
         4a:18:8c:2d:2a:05:94:d3:ec:3e:b8:ea:c5:bd:45:73:17:2a:
         71:f5:db:70:8a:b1:42:b2:e7:bd:0f:5b:2c:6c:6d:6a:b1:e1:
         e7:94:8a:f9:27:1b:55:a7:9f:f7:de:98:69:ca:52:40:56:6e:
         b9:ef:62:0d:c0:19:a8:49:e9:8b:6f:ad:99:b7:f1:01:2b:a0:
         36:af:15:86:13:43:6e:42:99:3a:74:46:9a:10:e6:9a:59:a2:
         50:52:ee:73:1d:88:a6:6c:19:69:48:ab:fd:17:25:26:fc:54:
         b8:2c:0c:33:b3:bb:06:e2:0b:07:0a:46:e6:69:08:f4:8f:45:
         53:19:d2:c9:39:f0:2a:1c:86:ad:73:52:ed:99:6b:82:7b:fa:
         b4:de:17:70:23:6b:35:c5:0c:60:a7:b5:43:05:84:ba:f7:27:
         a2:9b:06:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----