Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/696140cb-40e6-3c2e-aa12-2b00d2abf01d.roa
File:                     696140cb-40e6-3c2e-aa12-2b00d2abf01d.roa (raw, json)
Hash identifier:          0oeEdRQoscjFYifEFDe0sHo9g87CxqdYVgTDXnL5GwQ=
Subject key identifier:   07:A3:8A:66:72:86:23:4F:E7:6C:AD:EE:7D:CE:89:91:DD:8C:DD:3D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842FB70DC6F6F3004F57FB61B04
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/696140cb-40e6-3c2e-aa12-2b00d2abf01d.roa
Signing time:             Wed 23 Aug 2023 17:00:34 +0000
ROA not before:           Wed 23 Aug 2023 17:00:34 +0000
ROA not after:            Tue 21 Nov 2023 18:00:34 +0000
asID:                     11798
IP address blocks:        166.1.27.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:fb:70:dc:6f:6f:30:04:f5:7f:b6:1b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 23 17:00:34 2023 GMT
            Not After : Nov 21 18:00:34 2023 GMT
        Subject: CN=6d7f912f-55c5-43cd-9419-0618bce611e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ba:97:56:0a:34:a7:83:44:b7:c1:7e:8f:87:
                    8f:06:94:ae:23:fc:11:82:66:3e:bf:aa:36:e0:bc:
                    4c:a5:16:ab:75:8c:64:01:87:e9:8d:d9:f6:1f:c2:
                    f3:c6:98:bf:49:8a:4c:88:1d:c5:ef:28:66:e3:63:
                    45:b4:e5:74:9b:14:55:fe:60:1f:a6:27:c5:8f:2d:
                    cf:8f:dc:8f:f5:cd:e3:4d:2d:1b:be:6b:22:89:37:
                    64:38:00:1c:aa:bd:c9:25:f5:0e:8f:b7:63:93:42:
                    3d:ff:d0:8d:10:bb:ae:e8:5f:ea:17:ed:45:05:83:
                    8d:27:a9:c3:e5:e1:50:7a:20:39:a0:3d:64:44:61:
                    25:08:93:1c:53:3c:12:c4:01:69:9e:83:14:d8:2c:
                    98:23:e7:3e:60:81:88:29:7f:31:cf:4d:28:5d:72:
                    27:2c:aa:6d:7b:86:50:0f:0f:8b:77:0c:70:d2:6b:
                    a8:1c:ef:2e:e5:44:da:1a:b7:94:c4:3e:31:27:d5:
                    70:ed:70:e3:f3:4b:38:f7:d2:8a:7f:82:c5:b0:18:
                    26:b7:be:24:f3:84:38:19:2b:f4:4b:e3:e2:0b:45:
                    fd:3f:4c:1c:22:02:d9:f1:d4:7e:1b:59:56:e6:c1:
                    1f:d3:56:0d:56:c2:a4:20:32:27:6c:48:4e:79:2e:
                    f2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A3:8A:66:72:86:23:4F:E7:6C:AD:EE:7D:CE:89:91:DD:8C:DD:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/696140cb-40e6-3c2e-aa12-2b00d2abf01d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c9:09:1f:29:27:cd:f1:92:68:34:47:55:c0:ce:ec:ca:be:
         30:97:f5:64:4f:c7:bf:8a:bc:44:b6:c6:99:66:a9:8d:1e:89:
         0f:2b:c1:f3:f5:5c:f4:50:a4:57:1a:ad:e3:ab:70:82:2a:75:
         6f:09:ff:04:ab:f9:bd:59:6c:fc:f7:7c:b3:40:16:e0:94:9c:
         61:36:07:cd:87:62:11:b3:c6:0f:ef:28:13:86:c5:7e:95:0c:
         92:a7:07:cb:f4:db:fd:f4:8e:44:55:bc:23:63:b8:dc:78:a3:
         3c:3c:e0:2b:70:26:cf:51:d6:4a:20:46:be:99:4f:e2:08:1f:
         9b:59:a5:5e:d4:0d:d7:d2:2e:d3:70:bf:03:23:fa:74:9f:94:
         55:c1:3c:41:11:ac:d2:2c:76:68:6c:88:7c:94:5f:58:d2:98:
         ba:20:a8:51:a6:42:85:d9:50:8f:f3:37:b6:c8:7b:50:3b:1b:
         e4:54:3f:0c:44:48:e9:89:86:46:15:ef:c1:c9:64:49:41:06:
         c0:1f:55:79:88:ea:3e:ef:10:11:2e:72:4e:24:ef:86:5b:f5:
         3c:2f:38:bd:0a:60:8d:16:d1:fd:1a:22:40:de:5f:6e:b0:0b:
         ee:98:78:4a:7b:f0:21:34:ff:e0:5b:3a:6b:86:20:cf:93:e7:
         b1:42:d8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 23 21:22:33 2025 by rpki-client