Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d016d54b-15de-38aa-972e-9e1973804eb8.roa
File:                     d016d54b-15de-38aa-972e-9e1973804eb8.roa (raw, json)
Hash identifier:          l4kPCnHCqFHh1+s+pLhqOM43ATKldAk9A8RUQLOCXbU=
Subject key identifier:   0A:7A:28:51:63:B6:AD:8B:FB:A1:66:D4:D4:29:65:EE:B7:FC:36:23
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842CD79910D2E173E2392873C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d016d54b-15de-38aa-972e-9e1973804eb8.roa
Signing time:             Mon 07 Aug 2023 05:50:55 +0000
ROA not before:           Mon 07 Aug 2023 05:50:55 +0000
ROA not after:            Sun 05 Nov 2023 05:50:55 +0000
asID:                     11798
IP address blocks:        166.1.166.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:cd:79:91:0d:2e:17:3e:23:92:87:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  7 05:50:55 2023 GMT
            Not After : Nov  5 05:50:55 2023 GMT
        Subject: CN=151495fe-faec-4448-a908-d359b2ebbedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:da:dc:a0:51:c8:6c:11:7f:32:ca:94:98:
                    e7:92:77:d2:01:9b:b8:ea:95:4c:95:15:b3:6d:ff:
                    cc:69:e8:87:90:25:e7:bd:68:07:ad:c8:ab:90:83:
                    df:3e:7b:9f:56:d4:48:f9:c6:dc:d2:fc:0c:c8:44:
                    c4:f1:82:e7:3f:71:85:9a:0d:f3:f8:83:33:ae:17:
                    8d:ec:15:e8:cf:77:95:2e:47:bb:ba:73:07:8b:93:
                    03:c8:a2:fa:8d:4b:f1:ab:0a:e4:eb:4a:6f:41:36:
                    1b:8f:d0:d2:99:b1:5c:e5:c4:8a:18:bb:2a:b5:40:
                    a9:d5:09:0b:b5:5a:c6:ec:ad:12:40:7d:de:61:ac:
                    5d:9d:64:58:93:b8:d2:2a:5d:85:2c:1d:3d:70:57:
                    53:fd:61:79:00:5c:fd:6c:bd:d5:9d:b9:d6:a0:62:
                    8e:e4:77:15:a2:c1:c3:17:7a:6e:22:3f:d2:5e:8c:
                    aa:c3:83:6b:69:69:12:a3:9b:e3:14:9b:99:03:45:
                    39:60:81:f6:d3:dc:da:4a:b5:c7:a5:ca:f2:24:61:
                    f7:82:db:d6:fb:c4:8a:2f:e6:34:d7:f8:f4:bd:20:
                    a8:02:32:e4:e2:a0:26:91:09:d5:00:16:62:a4:69:
                    87:1e:39:e3:9a:03:6d:83:de:cc:15:3d:84:a0:4c:
                    77:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7A:28:51:63:B6:AD:8B:FB:A1:66:D4:D4:29:65:EE:B7:FC:36:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d016d54b-15de-38aa-972e-9e1973804eb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c6:1e:80:34:4f:28:ef:a0:67:3f:84:af:72:5f:2d:af:ed:
         88:67:96:7b:2f:a0:d3:24:03:5d:b2:f1:5e:e3:3b:a0:fd:dd:
         f7:ed:c6:e7:c4:c3:04:5e:68:ab:68:5c:8c:a9:56:04:a8:dd:
         e7:8d:cc:71:1c:f5:94:ba:79:46:ff:ef:b5:2e:3e:25:2e:d3:
         93:e0:7b:ef:33:97:24:21:6b:3b:bf:02:03:70:f9:a8:85:ff:
         64:a2:7f:a0:a8:fa:e1:4b:73:f4:1b:1b:e9:0e:16:f8:0e:0a:
         70:76:7e:2a:70:e5:37:ee:2b:0f:12:8f:0a:37:80:88:6d:3e:
         c7:6b:1f:43:c7:1c:4f:2c:e8:bf:22:b4:9d:71:1d:4b:ad:76:
         99:a8:c5:65:a7:e8:30:ea:16:4a:54:4c:9c:66:38:7d:ff:23:
         73:86:ba:39:05:84:9c:eb:94:fc:3c:c5:18:1c:c1:fe:89:52:
         c0:7b:2c:2a:13:40:f9:9c:e8:7a:30:8e:d4:3f:6a:19:0f:9d:
         c0:8a:2b:16:fa:81:0b:51:c4:c1:e1:92:bf:64:ab:24:24:22:
         34:a8:e6:8c:e5:75:27:8f:88:14:2c:c3:19:18:f6:a9:2d:59:
         98:9e:8f:db:2c:f9:c0:c3:32:71:c4:15:cf:75:58:18:08:7c:
         2e:d2:e4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:35:35 2025 by rpki-client