Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/67749434-2172-3008-9e65-4165d0a5d9ec.roa
File:                     67749434-2172-3008-9e65-4165d0a5d9ec.roa (raw, json)
Hash identifier:          iRpwiZCRFVuUrAkvcGFkqELfu9ls+3b3LgvfnHYQ/W8=
Subject key identifier:   26:18:12:63:CC:52:9C:17:DC:0B:DF:76:10:8E:0E:9B:0B:28:EF:F9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285846970A5DB29D32FFDDE0C17650
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/67749434-2172-3008-9e65-4165d0a5d9ec.roa
Signing time:             Fri 19 Jul 2024 13:00:35 +0000
ROA not before:           Fri 19 Jul 2024 13:00:35 +0000
ROA not after:            Thu 17 Oct 2024 13:00:35 +0000
asID:                     9009
IP address blocks:        166.0.93.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:97:0a:5d:b2:9d:32:ff:dd:e0:c1:76:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 19 13:00:35 2024 GMT
            Not After : Oct 17 13:00:35 2024 GMT
        Subject: CN=65956759-a940-409f-94aa-2838a5025ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c4:12:11:86:56:85:c2:6e:29:f5:e1:b0:88:
                    64:5e:d3:17:16:34:ba:4d:6a:6b:f5:f0:d3:2d:b5:
                    56:66:56:76:ce:1d:b5:0f:39:b8:10:e9:14:b9:cc:
                    5f:bd:f5:11:05:ca:f0:ce:85:50:8a:62:12:cc:d0:
                    0f:3e:8b:01:ff:a7:f2:0b:38:50:81:1e:53:a6:3e:
                    1a:0b:1d:d1:42:72:74:7c:7c:32:cf:de:37:13:fe:
                    fb:89:e2:44:d7:49:bc:dd:ad:ca:2c:30:b4:90:44:
                    bc:06:ac:ac:56:8b:69:f9:8a:b1:4c:ac:a4:14:df:
                    ba:aa:90:f8:31:9d:61:ac:e6:85:11:0f:7b:e9:ff:
                    3f:76:de:bb:3f:7d:27:6f:de:36:08:34:d9:20:80:
                    d9:25:86:16:40:13:30:9c:41:8c:b8:19:dc:f9:76:
                    59:f6:ea:88:27:9b:55:db:03:1d:bd:5f:47:f9:c8:
                    83:9e:3a:54:3e:3d:f6:92:08:10:9a:4f:a3:5a:a0:
                    e4:5b:e3:c4:ff:29:87:5b:87:b8:a2:fc:ec:9f:b6:
                    ae:27:d3:49:0e:a2:8c:6d:af:e5:e1:bb:a2:63:de:
                    e2:f5:1b:7f:30:21:25:f0:da:0f:87:66:e8:4f:18:
                    eb:aa:8d:a2:95:5b:5e:0f:ef:9d:85:b6:bb:30:19:
                    39:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:18:12:63:CC:52:9C:17:DC:0B:DF:76:10:8E:0E:9B:0B:28:EF:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/67749434-2172-3008-9e65-4165d0a5d9ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e8:5d:ff:03:8a:2b:b8:a3:6e:cc:8c:c8:30:ca:b4:aa:9c:
         6b:3e:4d:fa:0b:f1:0d:35:7e:ae:24:b2:3e:ef:5c:6d:53:97:
         eb:72:33:76:08:12:cf:19:9f:57:72:05:2d:a2:22:67:55:e8:
         06:a2:4b:5c:d7:e1:f8:28:26:9f:db:d4:bd:07:78:56:59:ac:
         7a:6d:da:85:91:3a:1f:47:43:5c:f5:9c:6e:ed:a2:b4:95:43:
         c8:82:4d:c7:30:8a:50:80:31:54:15:e2:f2:e5:56:68:8a:04:
         8e:e4:27:ba:de:a3:d4:a4:73:a9:10:c5:66:72:f0:7d:e4:7c:
         8e:54:94:f4:db:6a:a7:5c:c9:71:8a:5a:94:6f:41:10:90:21:
         22:d2:66:3b:89:b8:2d:1c:39:ce:96:c8:81:7d:99:20:68:07:
         3e:81:9b:23:a2:cc:de:d4:c5:b7:1e:ec:a4:fe:dd:bb:8f:11:
         0f:d2:8e:13:11:20:f7:3f:8a:7c:47:27:ac:01:c5:d1:65:ea:
         29:f7:20:94:bc:84:5e:be:f1:80:35:a3:6b:0d:a7:19:03:f7:
         0d:f9:79:a9:d0:32:e9:2c:94:77:56:d8:0d:b7:35:df:bb:86:
         e5:fe:68:aa:ae:1c:4c:2e:fc:b3:31:3e:c4:57:77:77:ed:12:
         ef:b6:9f:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaXCl2ynTL/3eDBdlAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDcxOTEzMDAzNVoXDTI0MTAxNzEzMDAzNVowLzEtMCsGA1UEAxMk
NjU5NTY3NTktYTk0MC00MDlmLTk0YWEtMjgzOGE1MDI1Y2UwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMQSEYZWhcJuKfXhsIhkXtMXFjS6TWpr9fDT
LbVWZlZ2zh21Dzm4EOkUucxfvfURBcrwzoVQimISzNAPPosB/6fyCzhQgR5Tpj4a
Cx3RQnJ0fHwyz943E/77ieJE10m83a3KLDC0kES8BqysVotp+YqxTKykFN+6qpD4
MZ1hrOaFEQ976f8/dt67P30nb942CDTZIIDZJYYWQBMwnEGMuBnc+XZZ9uqIJ5tV
2wMdvV9H+ciDnjpUPj32kggQmk+jWqDkW+PE/ymHW4e4ovzsn7auJ9NJDqKMba/l
4buiY97i9Rt/MCEl8NoPh2boTxjrqo2ilVteD++dhba7MBk5SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCYYEmPMUpwX3AvfdhCODpsLKO/5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjc3NDk0MzQtMjE3Mi0z
MDA4LTllNjUtNDE2NWQwYTVkOWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgBdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD7oXf8Diiu4o27MjMgwyrSqnGs+TfoL8Q01fq4ksj7vXG1Tl+tyM3YI
Es8Zn1dyBS2iImdV6AaiS1zX4fgoJp/b1L0HeFZZrHpt2oWROh9HQ1z1nG7torSV
Q8iCTccwilCAMVQV4vLlVmiKBI7kJ7reo9Skc6kQxWZy8H3kfI5UlPTbaqdcyXGK
WpRvQRCQISLSZjuJuC0cOc6WyIF9mSBoBz6BmyOizN7Uxbce7KT+3buPEQ/SjhMR
IPc/inxHJ6wBxdFl6in3IJS8hF6+8YA1o2sNpxkD9w35eanQMukslHdW2A23Nd+7
huX+aKquHEwu/LMxPsRXd3ftEu+2n1s=
-----END CERTIFICATE-----