Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6b2a8e8-aa7f-3286-b493-17d1b37706da.roa
File:                     b6b2a8e8-aa7f-3286-b493-17d1b37706da.roa (raw, json)
Hash identifier:          vJdgFuB0bREWf8codddvoLEtt/a1lwA0X7wDDAw7N9w=
Subject key identifier:   44:58:1C:4C:82:5F:11:38:48:E2:F8:34:39:68:9B:FD:72:F9:10:9F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446E4EA4803EE49BFF5FD00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6b2a8e8-aa7f-3286-b493-17d1b37706da.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Tue 08 Aug 2023 02:22:49 +0000
asID:                     834
IP address blocks:        166.0.184.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:e4:ea:48:03:ee:49:bf:f5:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug  8 02:22:49 2023 GMT
        Subject: CN=67b4dc4e-d4a9-4cb2-8fd9-819c60052cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9d:67:18:5b:ab:6e:88:58:52:f9:30:3f:9a:
                    97:89:64:7c:b4:b9:66:ec:5d:33:db:4e:75:ae:d5:
                    bd:a7:26:1f:68:15:f4:ae:ac:f1:a5:70:f4:5a:d2:
                    b4:46:be:0c:e3:32:ed:37:b6:7e:8f:4c:aa:c6:3d:
                    02:b1:91:7a:8b:f9:dd:eb:0d:16:e8:80:83:5a:b1:
                    1a:4c:f2:f8:66:b1:ed:8c:6a:75:06:be:f9:4e:98:
                    f0:6f:f0:2f:a5:b3:19:38:dd:df:a9:16:1c:39:95:
                    c4:d1:3f:20:e0:62:39:ba:39:fc:e9:af:f5:a0:bf:
                    8b:75:97:8f:ab:9e:bc:df:49:a9:75:46:20:e9:54:
                    80:80:6c:a4:2d:0e:89:6b:66:91:b5:23:51:e6:fa:
                    e6:12:11:01:01:b2:85:49:16:72:a5:23:67:3b:98:
                    cd:9d:70:d0:2a:ac:6a:b4:e6:d1:ce:8b:eb:17:07:
                    dc:e4:e8:9a:47:7e:2b:22:c0:e0:75:96:43:0b:77:
                    a0:d0:de:d0:a6:2e:fb:e3:95:2d:b5:ad:23:2c:32:
                    88:cd:57:8e:58:20:09:b5:8e:d1:e7:3d:fb:84:e6:
                    10:9b:8e:ca:aa:22:9d:23:a7:7e:49:7c:4e:30:96:
                    85:99:99:80:96:ef:61:aa:be:0d:3c:8f:aa:fa:ad:
                    63:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:58:1C:4C:82:5F:11:38:48:E2:F8:34:39:68:9B:FD:72:F9:10:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6b2a8e8-aa7f-3286-b493-17d1b37706da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:00:eb:91:f8:a3:5a:5f:2e:96:c3:dd:b0:fc:90:ae:32:c7:
         81:95:74:05:db:1e:bf:0b:ac:be:79:96:f4:0a:3f:75:35:8d:
         c0:a3:31:49:9e:24:80:df:fb:51:f4:e7:7a:ec:04:f8:4f:3b:
         56:8e:ae:67:69:52:08:71:6e:1e:b2:a9:49:9b:0b:60:b4:08:
         d9:9a:17:6d:9e:53:f2:72:ee:b4:6b:36:d0:36:af:f6:26:85:
         02:cf:96:35:a6:5a:89:cc:78:ba:51:a1:ce:d2:f4:73:ad:93:
         41:04:d5:51:e1:ee:86:c9:4a:7c:26:f9:5c:b7:36:1b:29:b1:
         61:1c:08:22:42:e9:d0:19:00:ef:fc:a6:93:56:14:f5:5b:4f:
         5d:c2:66:b4:34:a9:40:c2:ca:ec:3e:3d:d8:6b:58:c6:ff:09:
         16:ea:9c:4a:fd:57:28:14:84:cd:bb:e3:0b:00:7a:ac:42:ff:
         c1:08:08:08:01:61:ba:8f:fd:3b:f0:1c:f7:cb:62:d4:57:e7:
         fc:fd:16:e5:85:c8:b0:8a:67:e8:1a:54:cb:0f:7e:fb:2a:44:
         3a:f1:73:db:dc:cf:cd:a6:63:9e:49:dd:d2:2a:70:2d:9a:5a:
         a6:42:41:96:7b:b4:a8:c4:88:67:fb:b2:d8:ac:3a:e5:c9:06:
         18:87:71:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 20 11:58:29 2025 by rpki-client