Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7e235e6-4ad3-3aaf-b3f1-aaeec59422b3.roa
File:                     a7e235e6-4ad3-3aaf-b3f1-aaeec59422b3.roa (raw, json)
Hash identifier:          rTVN0DEJBE7NHK0x5upsDy9qBtivtFQMl5RXkaO7ZVk=
Subject key identifier:   0D:D4:77:AA:71:6C:5E:6D:6A:87:9C:32:48:DD:E2:51:1D:52:7A:75
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858483F802EC6B39D109FCE5B31C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7e235e6-4ad3-3aaf-b3f1-aaeec59422b3.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     62240
IP address blocks:        166.1.113.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:2e:c6:b3:9d:10:9f:ce:5b:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=bc94bca8-f766-4202-be89-2593ef822615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:11:9d:da:c6:0d:de:9c:23:ff:38:d5:cc:8a:
                    19:da:44:76:4c:62:52:97:7e:bb:ad:0d:ee:12:ab:
                    89:bf:4a:82:f2:0f:4a:a7:8b:b8:34:58:73:2d:dd:
                    a5:37:fa:ca:fd:0b:df:04:49:1d:8f:af:85:f9:77:
                    93:f6:8b:cb:e1:38:0b:d7:00:ee:cd:87:55:ef:f8:
                    0f:5f:b1:7e:fb:05:bc:f6:26:0c:6b:d7:30:06:40:
                    f0:dc:3c:98:39:9c:1e:fa:96:0d:c4:7a:97:43:c7:
                    f3:13:92:e5:ca:95:31:32:e5:19:b5:2a:05:ad:fb:
                    28:2b:48:88:18:ab:e6:1a:32:1f:cf:14:fa:59:a1:
                    d1:cd:c5:5f:c3:d6:9f:41:41:5c:9c:10:55:ad:80:
                    18:06:59:9e:4e:e6:17:1e:81:39:72:56:52:37:5d:
                    6a:a8:97:bd:4b:e9:d0:c8:98:40:86:09:0e:ff:2d:
                    45:03:97:d7:9d:92:76:a6:51:16:9f:a3:aa:3b:1f:
                    46:fc:35:54:49:8c:a6:81:4b:8b:91:88:5a:91:39:
                    cb:3d:62:84:be:20:e3:b0:15:0b:d8:44:48:f3:2e:
                    64:5d:68:ad:52:10:9a:dd:cc:df:e5:34:6f:7c:d0:
                    06:2d:81:39:50:2d:a9:b6:f7:c4:94:3e:b3:b1:6f:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D4:77:AA:71:6C:5E:6D:6A:87:9C:32:48:DD:E2:51:1D:52:7A:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7e235e6-4ad3-3aaf-b3f1-aaeec59422b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:48:70:cb:b5:37:1d:3e:8d:ba:23:a3:0b:0d:0c:7f:66:57:
         e5:0b:33:33:ed:94:98:8c:ab:49:b7:b2:1f:c8:20:6e:eb:e6:
         92:92:05:28:71:37:96:b4:6b:be:cf:65:fc:f8:f4:d0:88:e8:
         78:60:bc:57:3b:ce:e4:df:8c:16:be:d7:a5:db:1d:73:9f:c6:
         e7:17:bb:a1:bc:b1:62:91:01:7a:04:1a:9c:d8:2e:95:2b:04:
         66:df:da:ca:f2:69:a9:4a:71:15:98:a2:6c:73:27:7b:6e:dd:
         82:b1:d4:ee:2c:9d:a8:2b:f5:f8:13:89:ea:fd:ef:44:8a:62:
         c5:bc:06:02:60:a9:19:30:13:06:d5:cd:d9:e2:0d:99:d9:3a:
         1a:8a:5d:58:2d:e8:2f:8b:62:4d:a8:b0:5c:a4:ab:9c:71:73:
         a9:59:32:ae:de:fe:04:07:ff:c5:6b:29:ac:4d:8e:f0:c2:15:
         aa:7a:8e:3a:d8:32:ec:4f:00:fb:8e:e6:fb:5d:00:6a:bb:4e:
         8e:a5:e1:8c:1a:21:25:ca:52:4f:74:2b:9c:aa:ba:f8:66:c2:
         d4:20:a9:95:20:06:6a:98:1c:c9:a5:4b:2a:8f:35:f0:6e:27:
         99:29:91:6b:4a:8b:62:9b:bb:9a:2b:37:48:8f:50:8d:24:32:
         c8:93:04:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----