Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5bc08f56-b8aa-32f9-924d-170b76277e0f.roa
File:                     5bc08f56-b8aa-32f9-924d-170b76277e0f.roa (raw, json)
Hash identifier:          E35okuF2MUYh+d5L2C5WRO3MgW4+EmQG1zVbPEcvwBw=
Subject key identifier:   72:0B:3F:D5:E5:E5:ED:F3:9A:9E:8D:BC:5B:76:2A:C0:3A:3D:A3:ED
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843924A18B3528484E1BBF76480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5bc08f56-b8aa-32f9-924d-170b76277e0f.roa
Signing time:             Mon 16 Oct 2023 17:49:31 +0000
ROA not before:           Mon 16 Oct 2023 17:49:31 +0000
ROA not after:            Sun 14 Jan 2024 18:49:31 +0000
asID:                     834
IP address blocks:        108.165.72.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:92:4a:18:b3:52:84:84:e1:bb:f7:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 16 17:49:31 2023 GMT
            Not After : Jan 14 18:49:31 2024 GMT
        Subject: CN=aa17a77c-c527-4b72-b809-e251c1bbb9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e2:56:be:e0:6c:65:ec:ec:4a:45:b8:6f:31:
                    fb:e4:97:9b:b6:50:79:ed:94:67:90:9e:4a:8e:43:
                    90:3c:3d:46:41:81:41:16:1e:50:36:54:03:da:3d:
                    b8:54:e7:f9:58:12:f9:1f:3b:f5:62:e7:1a:2b:a4:
                    1d:b4:4b:ae:8c:76:a1:e4:da:7b:3d:47:59:7d:50:
                    93:5d:c8:35:39:47:69:67:7f:7e:31:57:05:f5:41:
                    75:6b:84:46:03:7d:4e:a6:d3:b1:b6:d2:b7:a4:f8:
                    39:b5:96:4a:9f:9b:a7:c3:d4:d0:76:31:24:27:62:
                    23:00:7e:32:aa:6e:1d:18:bd:ea:4a:88:5e:56:2c:
                    c3:97:ea:d8:c5:f5:55:a5:1a:14:50:e7:36:9b:20:
                    d6:f6:ff:68:43:f5:92:90:26:60:66:5b:ea:2a:e9:
                    63:ae:20:4a:21:92:f8:b3:77:58:c6:1c:fd:b3:4c:
                    73:8d:6d:93:9c:79:26:d0:b5:4f:7b:d3:37:f9:b0:
                    06:89:ca:4a:aa:60:07:9b:ec:b8:16:a2:8c:ac:2e:
                    a5:67:15:d1:ac:3e:86:4e:a3:bb:7a:5e:96:0a:25:
                    f7:74:02:c8:4b:1f:bb:81:ad:94:d4:29:10:c3:82:
                    28:a4:30:3d:7e:79:f9:38:91:6f:0d:18:68:92:1f:
                    15:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0B:3F:D5:E5:E5:ED:F3:9A:9E:8D:BC:5B:76:2A:C0:3A:3D:A3:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5bc08f56-b8aa-32f9-924d-170b76277e0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:6d:fe:62:92:63:3f:19:1d:5c:1c:50:80:a6:f2:1c:8b:98:
         96:df:a7:2d:b7:0f:1f:4b:29:7b:74:50:94:7d:1c:28:49:28:
         36:3e:10:e3:a0:b7:4b:8c:4c:f3:7e:76:6c:bf:93:b6:4b:37:
         af:79:62:67:24:31:5c:7d:c0:3c:19:dd:80:20:ff:30:81:3e:
         34:ff:23:38:ec:f8:1f:37:ea:41:42:f1:7d:d8:4f:61:c2:08:
         fb:41:26:3e:22:ce:48:47:ea:d8:64:d0:28:f6:22:ab:0d:23:
         56:af:12:72:42:2a:e7:aa:45:47:84:92:94:d1:b1:af:5c:ab:
         68:a8:5c:a5:46:e0:6d:32:6a:1e:58:3e:1c:17:67:ef:58:ad:
         aa:48:6d:7f:41:5a:91:17:28:1b:86:af:6e:98:65:98:f7:69:
         96:45:5c:48:af:8b:e6:ac:4e:09:b6:ef:2e:93:52:dc:aa:c7:
         86:c1:25:09:66:d1:a7:2f:70:46:00:89:a3:9e:92:28:03:83:
         2c:c4:52:d2:97:0a:69:68:ee:21:3c:fb:f6:09:17:e7:8a:41:
         5c:e1:25:92:9d:bf:01:ed:bf:2d:58:3b:bf:d0:7a:55:77:e3:
         bc:07:cf:51:e5:b2:af:57:1c:1d:fe:87:aa:87:98:85:fe:9c:
         45:bd:1b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----