Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/53917c78-9abf-340a-b0f9-6bb43d4208d9.roa
File:                     53917c78-9abf-340a-b0f9-6bb43d4208d9.roa (raw, json)
Hash identifier:          6OpPwkrGXjUigxOpewAcSww6a/amkNmtNJ4xDSpLXfU=
Subject key identifier:   AA:69:DC:C7:89:91:54:73:9B:97:89:FC:C7:C5:76:C0:9A:E6:F4:CA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842B7F93CD21721DEAF84C00E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/53917c78-9abf-340a-b0f9-6bb43d4208d9.roa
Signing time:             Sun 30 Jul 2023 13:00:20 +0000
ROA not before:           Sun 30 Jul 2023 13:00:20 +0000
ROA not after:            Sat 28 Oct 2023 13:00:20 +0000
asID:                     200482
IP address blocks:        108.165.90.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b7:f9:3c:d2:17:21:de:af:84:c0:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 30 13:00:20 2023 GMT
            Not After : Oct 28 13:00:20 2023 GMT
        Subject: CN=d4d4713d-3f49-42a7-8a58-7821358988de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1b:09:95:9c:8a:3a:9e:2c:cf:a5:95:24:63:
                    e2:e4:6e:5e:e3:c8:c8:b0:2a:e1:d1:e7:4c:79:a2:
                    c1:ac:6a:4a:50:1f:95:20:f5:76:5f:99:98:f0:da:
                    0a:5d:9b:8f:d0:ae:84:64:99:56:38:5e:9a:2a:3f:
                    3c:a2:f3:22:e1:17:9f:02:fd:07:44:54:5a:10:5c:
                    92:53:bd:fc:44:13:eb:cc:ad:12:db:d8:bd:b3:87:
                    68:ae:84:d8:36:8a:36:7d:e6:f7:8b:db:a0:0a:09:
                    ab:ed:6d:09:bf:e6:27:94:a6:dc:6f:e1:03:62:fd:
                    c9:d8:a4:26:ce:80:39:99:3f:51:b4:43:9c:b1:ef:
                    b5:0a:6d:62:d4:b4:1a:75:74:9b:3e:2c:bf:a5:cd:
                    58:12:07:d6:4f:df:e8:1e:f6:f5:c1:92:19:06:c4:
                    a0:1e:9e:2c:8b:f9:77:d4:be:d8:4a:a3:b4:59:ff:
                    f3:b6:a8:45:a6:02:b0:54:94:71:9e:90:78:1f:5a:
                    98:94:3b:7e:5d:64:2a:6f:fd:13:7b:0b:8f:4b:ed:
                    af:4e:eb:08:c2:91:5a:02:c5:ee:86:4d:ff:49:eb:
                    a1:6d:88:2b:4a:85:74:23:25:b7:7f:ad:ae:2e:4b:
                    c0:6e:98:5b:42:e5:57:10:79:97:d8:25:d6:f3:30:
                    91:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:69:DC:C7:89:91:54:73:9B:97:89:FC:C7:C5:76:C0:9A:E6:F4:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/53917c78-9abf-340a-b0f9-6bb43d4208d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:00:82:2c:b2:0e:9c:f3:e3:c7:e3:c7:d9:1f:34:b3:03:57:
         67:cc:4c:4e:db:44:63:b9:ed:69:bb:a2:80:37:4d:0e:43:d6:
         d5:f8:49:54:6f:96:65:94:fa:5f:d5:db:de:a3:10:0a:1c:53:
         22:50:cd:b1:29:07:0b:14:1c:0b:e1:25:bc:0c:65:e7:69:12:
         b2:93:08:72:7d:1d:73:92:a0:ca:72:51:1c:00:7c:49:05:cd:
         81:15:cd:54:13:64:d7:23:59:d9:1c:3a:76:7a:e0:2d:ad:88:
         d6:be:b5:b5:c0:7a:8f:ea:97:e8:6c:ff:e6:ba:fd:d8:f2:34:
         b4:7e:d8:0b:b0:d9:a0:78:50:c1:79:5c:7b:e0:12:df:08:2d:
         30:f4:ad:4d:95:2b:4f:ce:d4:3e:ae:ae:73:c5:64:04:81:60:
         d4:b6:3b:fa:dd:f9:e1:66:6d:e4:81:4a:93:7d:35:2f:de:39:
         c9:d6:07:cb:4f:07:0c:66:d1:8b:5a:04:05:8d:e0:a1:2f:e7:
         14:c6:46:e2:8f:61:2c:3c:00:71:d7:27:1d:e6:70:ac:f8:e6:
         05:4e:09:77:c1:ee:66:ad:2d:5a:22:3c:89:f8:77:b0:53:7d:
         57:1d:7e:e1:ad:58:17:63:2b:fa:10:b8:f2:f8:90:9c:e9:6f:
         47:ea:72:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 20 11:50:35 2025 by rpki-client