Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/2d6d478a-a4bc-38d2-ae90-4c3b62c41f1d.roa
File:                     2d6d478a-a4bc-38d2-ae90-4c3b62c41f1d.roa (raw, json)
Hash identifier:          BidDyjyDgN98UJFq2IqSHAVCwi8JXy0xYXftt7bEY70=
Subject key identifier:   C1:C4:96:9C:39:B8:46:AB:BF:D7:E1:56:CD:8F:B2:82:5B:B3:20:98
Certificate issuer:       /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial:       010D0C9F43285843FBF8D22C1D3EFE038F93DB00
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/2d6d478a-a4bc-38d2-ae90-4c3b62c41f1d.roa
Signing time:             Thu 23 Nov 2023 14:21:26 +0000
ROA not before:           Thu 23 Nov 2023 14:21:26 +0000
ROA not after:            Wed 21 Feb 2024 14:21:26 +0000
asID:                     3209
IP address blocks:        47.66.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:fb:f8:d2:2c:1d:3e:fe:03:8f:93:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
        Validity
            Not Before: Nov 23 14:21:26 2023 GMT
            Not After : Feb 21 14:21:26 2024 GMT
        Subject: CN=d9c12107-62c1-4543-b8aa-37f98930785e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0e:4e:88:36:a3:4f:a4:45:25:9e:98:83:72:
                    28:c7:82:46:05:9a:eb:6d:c1:75:18:b9:c5:0e:09:
                    a4:47:d2:8b:a1:7b:a5:bc:c3:3f:94:91:b1:0b:84:
                    7e:94:7a:c2:6e:38:0a:2d:eb:5f:6d:ad:52:6c:93:
                    84:73:01:12:a2:7d:90:09:d3:ba:09:3d:58:a9:5b:
                    05:de:2f:3d:83:3e:2f:8d:ca:f8:ed:d4:71:46:8a:
                    f9:db:7f:48:fc:cf:c0:69:01:f0:a8:83:eb:3e:e5:
                    f0:da:82:ed:65:3e:7a:9c:64:77:bb:31:b8:ad:91:
                    3d:76:77:d6:29:32:43:e9:c2:79:d8:2d:4c:d4:0e:
                    e2:eb:42:a3:4d:93:22:c4:c9:3b:68:16:5b:eb:cd:
                    00:20:e1:01:9e:e4:7a:59:02:3b:0d:52:c3:12:00:
                    e4:6a:88:b5:5b:f0:cc:5e:61:17:c4:e6:5c:38:6c:
                    d5:70:0d:e6:18:6b:22:8e:d9:d7:39:cf:aa:90:61:
                    95:3e:ba:05:73:14:0a:6b:ca:5b:8e:45:88:3e:ae:
                    18:3d:4a:eb:c1:6c:6c:ea:c2:e0:d9:b2:d4:62:f4:
                    99:9c:a9:8c:ab:81:af:85:8f:33:e9:56:f0:28:f8:
                    01:1d:23:16:40:ef:6c:4c:25:15:58:59:8a:ad:6e:
                    53:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C4:96:9C:39:B8:46:AB:BF:D7:E1:56:CD:8F:B2:82:5B:B3:20:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/2d6d478a-a4bc-38d2-ae90-4c3b62c41f1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl

            X509v3 Authority Key Identifier:
                keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.66.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:04:14:dc:83:8d:a5:a9:31:81:09:81:bb:d4:6e:2f:83:10:
         ff:26:9b:89:2d:a0:aa:a1:30:f8:7c:80:1a:36:8c:f9:43:7c:
         3b:72:f5:97:4b:c7:08:4e:2f:d1:97:a1:51:8a:09:0a:09:c7:
         00:c7:c9:96:ca:fb:13:01:41:9e:fc:ae:28:7f:1d:a3:85:03:
         b5:df:1e:1b:33:d9:c1:18:8e:e6:12:1b:fc:5b:46:71:4c:37:
         1a:f9:d4:00:fe:af:08:17:3c:fd:d1:52:17:f0:ce:8f:1b:1f:
         52:a5:9a:56:7a:3b:3c:e2:5f:e4:51:eb:48:22:79:7a:08:ca:
         10:44:26:62:9c:44:7a:b0:ff:1e:4d:bf:66:a7:af:93:4c:2a:
         ca:a5:21:29:20:6e:b2:05:ad:c4:df:3c:d1:a8:cf:7d:f6:16:
         41:ee:2f:cb:27:6d:8e:f1:92:79:54:11:d8:bf:ca:2b:fa:c5:
         c5:97:d5:47:07:1d:8c:33:87:23:bb:b2:81:67:71:33:24:4c:
         c3:b4:3f:83:8d:41:5a:d2:49:43:7c:ab:54:a2:ed:ee:02:86:
         59:79:26:5d:2e:02:fe:4d:73:e3:99:b3:d5:7f:48:bb:e6:fc:
         32:7a:9c:b2:77:7b:4e:f8:4e:b2:36:55:6a:84:5c:6f:ef:63:
         dd:db:da:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----