Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7394f529-24da-3f4d-98e5-529a7852f7c2.roa
File:                     7394f529-24da-3f4d-98e5-529a7852f7c2.roa (raw, json)
Hash identifier:          27wQPPGlb/y4Y4tKz6IOR14nVVS+8buI6GWQo/9dN74=
Subject key identifier:   35:23:AA:2D:26:87:56:52:7E:29:A9:4D:B9:93:D3:AB:8D:83:A5:93
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848A1933D04BDA189F37D35EB00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7394f529-24da-3f4d-98e5-529a7852f7c2.roa
Signing time:             Wed 22 Jan 2025 17:08:42 +0000
ROA not before:           Wed 22 Jan 2025 17:08:42 +0000
ROA not after:            Tue 22 Apr 2025 16:08:42 +0000
asID:                     213563
IP address blocks:        166.0.189.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:93:3d:04:bd:a1:89:f3:7d:35:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 22 17:08:42 2025 GMT
            Not After : Apr 22 16:08:42 2025 GMT
        Subject: CN=f3045162-574b-4049-b7c9-6ce85821508e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d2:2b:03:e0:ae:fa:21:c2:2d:8b:dc:f5:9e:
                    9e:60:93:d2:e8:81:b7:4a:d9:e9:d5:8b:a5:b0:92:
                    e7:9c:c4:10:e0:d6:3f:53:ca:0b:5f:96:fa:74:b6:
                    2a:2d:6f:70:2f:e6:37:3a:fc:75:87:7c:eb:4f:40:
                    b5:89:5f:80:2e:dc:3c:3f:2a:e3:81:32:d0:24:a1:
                    e2:7a:6c:8a:56:b3:36:9f:37:dc:d9:10:e3:5f:3a:
                    34:f2:05:22:08:49:a6:71:64:a5:3d:e7:74:b7:94:
                    ce:3e:34:1c:99:85:16:b3:11:cf:b8:6e:68:a2:4b:
                    73:8e:6c:27:3b:0b:24:93:37:a6:f0:7c:49:4a:b7:
                    f8:5e:67:f1:e6:e7:0d:b0:b8:cc:91:35:48:ee:ec:
                    2b:47:de:49:96:6c:a2:1d:64:da:0f:92:62:62:f8:
                    75:be:f5:4f:96:a8:c3:78:00:69:42:94:07:93:6a:
                    ef:bf:61:5e:24:8b:df:f3:66:f7:8b:ba:47:90:ae:
                    93:f4:f7:ec:fb:9a:cb:03:72:d7:87:7b:dd:d3:32:
                    6b:56:19:f1:19:67:e5:5d:b6:24:d0:86:85:a1:1f:
                    46:17:c5:ae:0c:e6:96:77:23:fd:40:59:62:f0:77:
                    3a:36:5e:6b:b3:52:24:19:c3:1b:00:64:c0:dc:ac:
                    b5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:23:AA:2D:26:87:56:52:7E:29:A9:4D:B9:93:D3:AB:8D:83:A5:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7394f529-24da-3f4d-98e5-529a7852f7c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:97:72:98:c3:6a:19:4c:c1:9d:18:53:01:83:95:6a:9e:91:
         68:fe:6b:38:6a:f6:c2:94:a6:a2:84:e1:fb:93:56:b4:22:55:
         ca:b8:49:10:6e:bf:e7:5e:e8:38:e4:91:e9:51:6d:fd:97:a0:
         cb:db:35:90:e3:22:cf:de:34:58:56:24:63:b9:e6:d1:b0:ba:
         6b:2c:86:89:9f:30:80:31:0e:75:5a:4c:bc:c5:5c:7f:b4:da:
         c2:ba:f9:77:67:a0:50:81:ae:6b:f2:e2:51:18:f1:ed:de:69:
         80:b8:06:02:13:4d:67:8f:80:68:20:ce:95:e3:62:93:21:8e:
         07:7b:c6:2c:36:db:da:4b:b1:1a:45:89:1d:dd:04:44:a8:06:
         68:ca:b1:6e:54:25:9a:d3:68:ba:73:80:32:6d:9e:09:28:8a:
         ad:1b:35:84:d7:4a:29:9c:a9:b5:1c:78:f1:d7:a1:e7:3c:1b:
         30:c8:d9:6c:fe:9e:15:26:f9:1a:f2:17:f1:60:62:4d:d7:15:
         ae:50:62:4c:66:dd:f6:a6:fe:cd:78:1c:69:f5:6d:08:35:23:
         09:a1:e3:1b:22:94:ac:8e:42:0f:75:cc:a1:03:ea:e1:7f:e0:
         52:d7:63:0f:9b:20:af:59:bb:b3:bc:cb:dd:0d:e7:09:fc:23:
         bb:e7:f5:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihkz0EvaGJ83016wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDEyMjE3MDg0MloXDTI1MDQyMjE2MDg0MlowLzEtMCsGA1UEAxMk
ZjMwNDUxNjItNTc0Yi00MDQ5LWI3YzktNmNlODU4MjE1MDhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9IrA+Cu+iHCLYvc9Z6eYJPS6IG3Stnp1Yul
sJLnnMQQ4NY/U8oLX5b6dLYqLW9wL+Y3Ovx1h3zrT0C1iV+ALtw8PyrjgTLQJKHi
emyKVrM2nzfc2RDjXzo08gUiCEmmcWSlPed0t5TOPjQcmYUWsxHPuG5ooktzjmwn
Owskkzem8HxJSrf4Xmfx5ucNsLjMkTVI7uwrR95JlmyiHWTaD5JiYvh1vvVPlqjD
eABpQpQHk2rvv2FeJIvf82b3i7pHkK6T9Pfs+5rLA3LXh3vd0zJrVhnxGWflXbYk
0IaFoR9GF8WuDOaWdyP9QFli8Hc6Nl5rs1IkGcMbAGTA3Ky1zwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDUjqi0mh1ZSfimpTbmT06uNg6WTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzM5NGY1MjktMjRkYS0z
ZjRkLTk4ZTUtNTI5YTc4NTJmN2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgC9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIuXcpjDahlMwZ0YUwGDlWqekWj+azhq9sKUpqKE4fuTVrQiVcq4SRBu
v+de6DjkkelRbf2XoMvbNZDjIs/eNFhWJGO55tGwumsshomfMIAxDnVaTLzFXH+0
2sK6+XdnoFCBrmvy4lEY8e3eaYC4BgITTWePgGggzpXjYpMhjgd7xiw229pLsRpF
iR3dBESoBmjKsW5UJZrTaLpzgDJtngkoiq0bNYTXSimcqbUcePHXoec8GzDI2Wz+
nhUm+RryF/FgYk3XFa5QYkxm3fam/s14HGn1bQg1Iwmh4xsilKyOQg91zKED6uF/
4FLXYw+bIK9Zu7O8y90N5wn8I7vn9VY=
-----END CERTIFICATE-----