Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6fba121-b94c-3c02-86f6-80d04b08e4ef.roa
File:                     b6fba121-b94c-3c02-86f6-80d04b08e4ef.roa (raw, json)
Hash identifier:          I6KWbPpp5EZBBdWtSs+rcE79cBFQ0J2tgAB8hFrkUrY=
Subject key identifier:   78:D8:D3:50:1E:EA:8B:56:E7:A5:7E:80:E8:8A:2B:11:4C:44:EB:3C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858471D9F4C5B39EAE3787B2E6300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6fba121-b94c-3c02-86f6-80d04b08e4ef.roa
Signing time:             Thu 05 Sep 2024 17:59:21 +0000
ROA not before:           Thu 05 Sep 2024 17:59:21 +0000
ROA not after:            Wed 04 Dec 2024 18:59:21 +0000
asID:                     398343
IP address blocks:        166.1.43.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1d:9f:4c:5b:39:ea:e3:78:7b:2e:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  5 17:59:21 2024 GMT
            Not After : Dec  4 18:59:21 2024 GMT
        Subject: CN=eb87962a-b54e-4940-a1e6-2fc99de05de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:ff:fc:81:53:f6:73:ae:43:35:b5:7a:5c:
                    cb:72:16:3d:45:51:fb:9c:23:66:7f:5e:e1:fa:54:
                    46:eb:98:31:aa:9c:92:28:2a:d9:d0:f5:ae:e9:5d:
                    51:cd:73:fd:17:8a:90:87:b4:7e:5f:ac:ff:00:05:
                    96:04:17:6b:a9:79:52:d7:9b:58:9e:2f:fd:3e:5b:
                    d8:68:35:48:a1:ed:d3:7e:1b:0f:df:f1:97:76:8d:
                    92:9a:c4:a1:aa:d5:a4:72:1f:1d:73:e0:7d:04:93:
                    56:1f:d7:bd:d9:95:bd:dc:4a:0c:68:83:ce:60:5b:
                    76:ec:b0:3c:3d:43:67:0d:56:35:80:7a:52:06:f3:
                    e4:b0:08:60:e7:b3:89:1b:ab:c3:ad:fa:86:5f:78:
                    c9:f0:c1:1f:8e:3f:13:57:36:93:b8:8c:90:4e:f1:
                    90:d9:c6:0d:c4:3f:cd:83:97:04:e1:3d:3d:9b:4b:
                    63:07:7e:26:2e:94:e3:2c:47:9e:b3:ab:4b:a5:07:
                    f1:19:d8:3a:9f:09:5d:78:3a:08:87:33:82:bc:f7:
                    01:55:42:3c:99:1f:f8:64:e6:ea:64:6a:2c:6f:2d:
                    7a:94:28:a0:3b:db:57:48:1b:c7:36:09:c3:78:10:
                    8b:45:27:99:d7:6e:8a:d4:f9:06:ac:33:ee:0e:af:
                    d5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D8:D3:50:1E:EA:8B:56:E7:A5:7E:80:E8:8A:2B:11:4C:44:EB:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6fba121-b94c-3c02-86f6-80d04b08e4ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:d3:f2:9f:ec:f0:c8:4c:29:af:da:cf:6e:3d:01:32:0a:48:
         4b:ed:cc:ab:da:41:54:39:7a:41:a2:38:9b:01:a8:ce:5a:50:
         dc:62:3c:df:ac:48:f0:16:c9:15:86:ed:1d:05:48:b9:15:5e:
         9c:c8:9a:c7:f9:f4:08:a8:45:05:ad:34:41:e9:b4:d8:1d:c3:
         f6:5d:d8:40:86:60:a9:bd:71:9f:8d:50:bf:8d:af:ff:30:44:
         e4:41:fb:e8:df:f5:51:8d:67:ab:6d:52:2b:4f:86:17:17:05:
         3a:f0:ec:35:c9:38:40:0c:f5:60:03:19:e1:d7:26:38:95:b5:
         d2:a0:de:f3:e1:96:e6:43:0d:fe:b5:ce:69:0f:94:47:9a:7f:
         1a:bb:36:df:b9:e9:c0:c6:fb:8c:50:d2:62:ca:7b:93:00:02:
         39:b7:ce:13:ba:47:34:51:09:33:b8:bb:ee:fb:3f:b4:db:30:
         81:50:ae:c6:d8:be:f0:8f:3d:b8:55:e4:fb:a5:ce:44:4f:79:
         a5:dd:75:d8:f4:54:51:b2:ac:7d:e2:ba:79:ba:e2:88:4f:76:
         ef:5e:8c:5f:ec:e5:fe:f6:fc:cf:6b:77:00:a3:ae:fa:79:b0:
         05:7a:90:cc:e3:b3:c7:12:d0:c9:9d:cf:0f:5f:c5:92:8d:d0:
         94:d0:d4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 23 07:37:10 2025 by rpki-client