Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d047a6ff-9842-37ab-942d-14fb73bcc583.roa
File:                     d047a6ff-9842-37ab-942d-14fb73bcc583.roa (raw, json)
Hash identifier:          XC4AJgqQdkQ44kIpjf3qCM4A5TB8jxjepc2RZ6Ghohw=
Subject key identifier:   16:43:46:76:9C:F0:44:FD:FA:81:83:FD:D6:2E:68:8F:F2:EA:49:AC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842CA1EA73977EAAA768E625180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d047a6ff-9842-37ab-942d-14fb73bcc583.roa
Signing time:             Sun 06 Aug 2023 01:00:17 +0000
ROA not before:           Sun 06 Aug 2023 01:00:17 +0000
ROA not after:            Sat 04 Nov 2023 01:00:17 +0000
asID:                     11798
IP address blocks:        166.1.184.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ca:1e:a7:39:77:ea:aa:76:8e:62:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  6 01:00:17 2023 GMT
            Not After : Nov  4 01:00:17 2023 GMT
        Subject: CN=ad300da7-4dd4-4a76-91f1-de94b22e6ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4e:d0:0b:40:34:0b:e4:c1:13:c1:41:aa:db:
                    0d:92:bf:5a:ab:72:40:99:f7:fb:c6:9e:60:a0:83:
                    c5:b3:2a:fc:60:b5:00:55:85:c5:c2:d0:5b:1f:62:
                    0e:35:7c:c9:ff:8f:2e:86:d2:c3:6f:bb:98:ba:96:
                    7e:52:d4:e6:ee:b1:b9:94:ba:8b:a4:8b:d8:b2:57:
                    ce:05:79:07:e5:26:47:97:5a:4d:a3:3e:f2:bb:a7:
                    d9:2e:f9:84:ce:e1:3c:35:1e:e2:b1:95:df:17:9f:
                    42:8f:6c:26:cc:dc:1a:74:fd:dc:89:4b:0f:3a:84:
                    4d:ba:19:5d:c3:74:b0:a4:c1:06:71:c7:0f:32:89:
                    db:87:1f:eb:e1:74:1d:dc:27:5e:25:e7:c3:4a:1f:
                    21:de:45:e7:47:98:58:7d:28:8e:ae:62:6a:8e:99:
                    b0:ad:d6:98:69:f6:e7:ad:84:e6:79:66:d3:e3:b5:
                    a0:35:e4:41:60:97:02:39:11:09:77:fc:46:7a:9d:
                    6e:52:9d:01:eb:c0:c8:0f:5b:3a:94:62:6e:13:73:
                    80:9a:13:1a:1e:ba:0f:0e:73:dd:41:0d:c3:4e:14:
                    29:5f:cc:0c:8b:54:ec:ed:dd:32:1e:d2:55:30:04:
                    c1:aa:78:00:bf:97:e3:b6:84:97:6b:8c:c1:54:d7:
                    22:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:43:46:76:9C:F0:44:FD:FA:81:83:FD:D6:2E:68:8F:F2:EA:49:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d047a6ff-9842-37ab-942d-14fb73bcc583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:f3:6b:20:f4:ef:95:a6:8b:fa:e1:f7:90:cb:69:50:f3:96:
         d6:26:ba:e2:f8:ba:53:4d:3f:38:5b:41:af:a0:fa:71:2f:f5:
         44:6d:c8:88:73:cc:7a:2c:8c:aa:e6:18:a9:a0:22:0d:ad:f5:
         ab:5d:1a:c1:dd:fe:71:64:87:9a:8b:02:98:15:1b:61:d5:77:
         49:f9:a2:1c:b8:4e:42:d9:f8:95:62:f8:42:04:90:1c:47:57:
         d3:45:5c:13:eb:c9:53:b2:8e:25:26:88:8b:92:fb:92:93:5f:
         c1:7d:ee:e1:53:16:0e:ea:51:39:f6:01:46:f5:44:14:dd:d4:
         53:5d:52:e5:fb:9e:45:e3:e3:e2:44:7e:ac:29:80:f0:4d:15:
         74:c7:2d:7e:52:1d:4e:7b:ae:0b:f1:14:80:8b:64:b3:59:13:
         78:76:7c:27:f3:c8:a2:40:ce:f9:da:fe:43:88:e2:3f:ec:14:
         c8:88:57:84:de:3e:cd:b6:a6:45:66:4b:ef:7a:2d:e3:2e:01:
         d6:e5:e6:0b:8d:e4:b1:67:c8:c9:65:c3:ad:39:e0:4e:b4:3a:
         a2:41:70:fd:6c:c3:8f:28:d5:84:59:91:29:d5:aa:27:4f:51:
         45:f9:f1:fa:5a:40:47:6f:13:d6:f3:95:60:13:49:45:9d:3e:
         a8:31:40:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:27:47 2025 by rpki-client