Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c5e01917-210e-376e-b5a3-81193a0888fe.roa
File:                     c5e01917-210e-376e-b5a3-81193a0888fe.roa (raw, json)
Hash identifier:          HVecNfJKX/IUfza+7SrK9VZpVyTdoUt5ezjepKzpPvw=
Subject key identifier:   AF:B9:F0:64:11:7B:71:A1:9B:56:F4:A3:C6:33:BB:38:BB:87:25:19
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858427BED92F1D6095E71B22E3A00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c5e01917-210e-376e-b5a3-81193a0888fe.roa
Signing time:             Sun 09 Jul 2023 00:48:22 +0000
ROA not before:           Sun 09 Jul 2023 00:48:22 +0000
ROA not after:            Sat 07 Oct 2023 00:48:22 +0000
asID:                     132335
IP address blocks:        108.165.94.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:7b:ed:92:f1:d6:09:5e:71:b2:2e:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  9 00:48:22 2023 GMT
            Not After : Oct  7 00:48:22 2023 GMT
        Subject: CN=16515411-9ff6-45bf-a740-e64e1627fdd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f3:61:bb:32:9e:58:ca:ff:35:9f:6f:ac:e3:
                    3d:a6:da:25:ff:58:ee:f5:ec:d7:cc:74:12:28:ce:
                    5e:13:a6:99:28:34:2f:70:32:b8:a2:d4:75:36:73:
                    e7:17:3a:c8:44:6b:7a:16:be:e7:23:39:47:10:a6:
                    a4:a3:73:f5:b9:91:fc:04:35:c3:19:8d:c6:f8:bb:
                    52:84:85:91:1b:54:a4:6c:7b:76:7e:03:f4:b5:86:
                    20:62:ae:b8:30:9b:7d:53:a8:8c:26:1c:b8:53:1f:
                    bc:af:07:e1:b8:dd:aa:af:9e:5e:37:52:2e:2a:98:
                    15:ab:9a:3b:07:39:96:f1:85:3e:33:23:51:a7:d5:
                    99:d5:db:15:81:dd:d6:33:97:27:b7:93:1e:b6:1e:
                    c7:37:cc:dd:64:10:54:02:2f:f9:1d:a0:01:8d:f4:
                    3d:93:61:8f:82:26:a5:d0:77:c4:6a:87:9d:80:8d:
                    d0:2d:03:6a:ac:05:c2:bc:de:b9:90:8b:13:65:54:
                    e0:6c:5e:e5:df:17:17:8d:c2:ab:c3:b0:db:24:92:
                    91:c2:cf:bc:39:4c:bd:b9:e8:9e:e4:3c:0a:20:84:
                    bb:05:bf:37:8b:c4:1e:e4:c0:92:25:b5:2c:80:d8:
                    1a:e3:58:f8:5c:b6:64:f5:cf:ea:6b:7a:18:2f:2d:
                    c8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B9:F0:64:11:7B:71:A1:9B:56:F4:A3:C6:33:BB:38:BB:87:25:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c5e01917-210e-376e-b5a3-81193a0888fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:4d:ee:14:0b:6f:87:71:f9:53:f3:58:d9:0d:c6:e3:36:4b:
         35:6a:d6:be:68:79:56:14:ad:de:fd:a8:9f:31:5e:e6:48:24:
         f1:c3:2e:57:4f:27:5a:68:7e:0b:24:37:ac:1e:64:8d:b5:71:
         3e:99:a1:b3:98:6a:4c:d6:7d:be:b5:dd:2c:92:cc:e0:93:22:
         25:8a:65:37:12:3f:91:94:e6:ff:26:b0:ca:a7:bf:ab:66:24:
         76:3c:3d:cb:6e:cc:1a:a8:af:75:98:b1:3d:29:2d:49:d2:69:
         00:ed:d0:15:de:73:a9:1f:ec:de:fa:69:2b:d8:82:f0:e8:50:
         4a:b0:a3:31:aa:8f:e3:91:7b:be:4a:0a:43:8f:93:04:2c:c8:
         d1:cc:73:dc:c8:82:52:4d:a0:dd:e7:25:ef:cb:86:7f:96:2b:
         f4:8e:19:90:d6:63:a3:a4:66:c6:cb:11:00:4d:7a:de:08:d4:
         b1:b0:2f:b5:fb:2d:9e:a2:d5:1c:2e:cc:01:34:1f:78:62:02:
         12:7a:2d:3c:6c:e7:41:57:fe:48:80:8a:97:18:fc:bc:f2:e4:
         4d:53:41:55:a3:ae:e4:20:0d:99:b4:d2:7f:50:d3:7c:21:5b:
         be:e9:1b:79:41:eb:95:4b:6a:40:70:15:8a:f7:01:34:ef:6c:
         42:36:1b:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJ77ZLx1glecbIuOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDcwOTAwNDgyMloXDTIzMTAwNzAwNDgyMlowLzEtMCsGA1UEAxMk
MTY1MTU0MTEtOWZmNi00NWJmLWE3NDAtZTY0ZTE2MjdmZGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/NhuzKeWMr/NZ9vrOM9ptol/1ju9ezXzHQS
KM5eE6aZKDQvcDK4otR1NnPnFzrIRGt6Fr7nIzlHEKako3P1uZH8BDXDGY3G+LtS
hIWRG1SkbHt2fgP0tYYgYq64MJt9U6iMJhy4Ux+8rwfhuN2qr55eN1IuKpgVq5o7
BzmW8YU+MyNRp9WZ1dsVgd3WM5cnt5Meth7HN8zdZBBUAi/5HaABjfQ9k2GPgial
0HfEaoedgI3QLQNqrAXCvN65kIsTZVTgbF7l3xcXjcKrw7DbJJKRws+8OUy9ueie
5DwKIIS7Bb83i8Qe5MCSJbUsgNga41j4XLZk9c/qa3oYLy3IpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK+58GQRe3Ghm1b0o8Yzuzi7hyUZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYzVlMDE5MTctMjEwZS0z
NzZlLWI1YTMtODExOTNhMDg4OGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGRN7hQLb4dx+VPzWNkNxuM2SzVq1r5oeVYUrd79qJ8xXuZIJPHDLldP
J1pofgskN6weZI21cT6ZobOYakzWfb613SySzOCTIiWKZTcSP5GU5v8msMqnv6tm
JHY8PctuzBqor3WYsT0pLUnSaQDt0BXec6kf7N76aSvYgvDoUEqwozGqj+ORe75K
CkOPkwQsyNHMc9zIglJNoN3nJe/Lhn+WK/SOGZDWY6OkZsbLEQBNet4I1LGwL7X7
LZ6i1RwuzAE0H3hiAhJ6LTxs50FX/kiAipcY/Lzy5E1TQVWjruQgDZm00n9Q03wh
W77pG3lB65VLakBwFYr3ATTvbEI2G5E=
-----END CERTIFICATE-----
Generated at Fri Mar 28 03:31:11 2025 by rpki-client