Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c4ac8c0-7241-31e1-9588-bbe82456b818.roa
File:                     8c4ac8c0-7241-31e1-9588-bbe82456b818.roa (raw, json)
Hash identifier:          zoqgQcnffbpdcM9oxY/D0TwlXbIIWEJrlJ3E0M+mvLU=
Subject key identifier:   8E:89:A2:A8:A1:0F:50:09:86:C2:00:1E:31:CF:44:80:66:5E:81:F1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E711282A967E17F00CF13E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c4ac8c0-7241-31e1-9588-bbe82456b818.roa
Signing time:             Tue 16 May 2023 17:04:37 +0000
ROA not before:           Tue 16 May 2023 17:04:37 +0000
ROA not after:            Mon 14 Aug 2023 17:04:37 +0000
asID:                     60721
IP address blocks:        166.1.165.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e7:11:28:2a:96:7e:17:f0:0c:f1:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 16 17:04:37 2023 GMT
            Not After : Aug 14 17:04:37 2023 GMT
        Subject: CN=725568d2-3684-4286-9ba4-237a5b00738b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e6:00:58:ce:67:50:b8:95:78:f6:e9:85:55:
                    28:29:fe:f6:fa:44:16:ee:ee:4a:cf:40:56:85:6d:
                    5e:12:92:02:93:e0:c6:67:f2:97:0e:fa:18:5f:d5:
                    32:6d:50:6d:89:ae:a3:de:95:e2:5f:6b:2e:15:92:
                    c1:1c:ef:d0:fe:03:c2:d5:47:01:c9:b1:cc:ca:97:
                    93:93:86:c6:d4:52:5d:a2:c6:a3:72:d3:1a:1c:f1:
                    90:fa:6c:88:b8:99:c7:92:67:0e:80:62:bf:a0:fd:
                    bc:57:19:83:9a:31:b2:28:57:e0:13:d1:b1:bf:e7:
                    b5:83:51:07:ad:5a:16:d6:53:6b:78:4a:b1:e8:2c:
                    5c:7c:ba:07:c4:40:19:08:17:0a:8d:ed:e5:ed:cb:
                    b7:3d:4a:31:9d:19:ca:c3:ee:e2:b0:75:ac:02:4c:
                    c2:c3:53:f5:8f:16:1d:69:eb:fa:44:42:c2:8f:22:
                    26:ef:0e:1c:ec:96:87:0a:50:39:36:0d:fe:0f:ac:
                    fe:24:52:90:11:e5:23:a6:01:90:f2:b2:53:99:bb:
                    42:0b:c4:08:f1:20:92:8e:63:45:a8:7a:e4:04:b4:
                    ca:a8:b0:f1:a8:1d:b8:0d:99:a5:7a:0a:6e:ea:54:
                    92:e6:44:d5:c9:b1:ed:10:89:53:e9:37:fb:50:02:
                    0b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:89:A2:A8:A1:0F:50:09:86:C2:00:1E:31:CF:44:80:66:5E:81:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c4ac8c0-7241-31e1-9588-bbe82456b818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f8:6e:d1:6a:3b:38:9b:09:9e:02:56:b3:50:7e:94:e2:01:
         b2:51:47:dd:cb:0a:cc:00:aa:77:a7:e7:46:55:58:5e:c6:9b:
         d3:f9:ac:21:de:29:1c:7a:56:8b:cc:58:bb:bb:5c:3f:67:1a:
         48:30:d4:91:87:1c:9c:d0:33:ed:95:a1:0d:2f:7d:70:80:cc:
         cd:17:e3:5f:89:e5:97:89:c9:79:d1:16:bc:58:dd:ca:78:d9:
         84:14:88:ad:f0:12:26:37:2e:9a:95:f8:82:ea:5c:a3:06:df:
         b5:87:61:0d:a6:85:ff:41:18:b0:f0:e3:a2:e0:71:49:39:8d:
         99:7f:99:f3:be:5f:ed:2f:05:ae:d9:5f:17:4a:f3:31:67:1b:
         f4:9b:88:ed:19:1d:af:58:19:db:d1:c0:f6:b3:dd:35:dc:15:
         93:46:9a:51:31:25:ed:62:67:21:b6:e0:1b:b5:4d:10:36:8c:
         f4:5c:f2:c8:df:de:2d:d0:64:dd:9e:b2:d6:ec:44:87:29:06:
         d1:1d:7a:17:ff:de:dc:58:51:2e:4d:72:bf:a0:41:6a:0c:06:
         d2:d4:fb:bb:c2:f2:6b:78:23:fc:ae:03:94:25:fe:6a:c2:7b:
         bb:5e:72:e2:04:b6:40:d0:e0:a4:1a:2a:ba:34:fe:6e:2e:43:
         04:e5:4b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----