Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d881b832-2d48-3ebb-b4aa-962a74130b9b.roa
File:                     d881b832-2d48-3ebb-b4aa-962a74130b9b.roa (raw, json)
Hash identifier:          TiS8hW6nwTw0/SJ654Hhj+SG+Ug1swcGiDBWFAlACQ4=
Subject key identifier:   1F:62:C4:D1:B5:A2:62:E7:D9:10:CA:86:79:34:3E:87:5F:C3:FE:67
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843571A48318847CDE3FB3AFA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d881b832-2d48-3ebb-b4aa-962a74130b9b.roa
Signing time:             Mon 25 Sep 2023 13:00:24 +0000
ROA not before:           Mon 25 Sep 2023 13:00:24 +0000
ROA not after:            Sun 24 Dec 2023 14:00:24 +0000
asID:                     212669
IP address blocks:        166.0.222.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:57:1a:48:31:88:47:cd:e3:fb:3a:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 25 13:00:24 2023 GMT
            Not After : Dec 24 14:00:24 2023 GMT
        Subject: CN=2d2fa11b-d61d-4179-948a-30d786a8abff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9f:41:54:b9:a4:bf:1b:30:24:e6:49:e5:6a:
                    98:e2:14:e2:ec:dd:9c:0a:50:3e:c3:85:2a:a2:6e:
                    03:8a:a9:78:17:2e:5d:ab:dd:5a:d3:bd:20:e1:ce:
                    81:43:97:b5:02:c8:1d:17:59:de:42:f5:d2:bf:9b:
                    12:c6:80:52:4a:e1:ec:08:fe:8d:c5:77:ed:4b:78:
                    e1:a9:15:af:94:07:45:78:da:37:fb:9b:3c:99:60:
                    50:ce:93:50:60:f4:87:b2:4f:00:88:37:58:23:eb:
                    8c:d3:9b:02:13:bf:e7:ec:d3:84:56:dc:c1:0a:33:
                    5b:29:1f:bd:05:8e:38:fe:11:bc:dd:37:69:99:8b:
                    1b:c9:00:0d:ec:5c:dc:47:e0:6c:25:10:70:14:75:
                    fd:c3:69:dc:86:16:7b:5e:7a:dc:b3:da:ae:08:b6:
                    70:47:c1:c1:66:e0:14:ea:3a:30:e5:8a:23:89:e6:
                    1d:81:5b:98:b5:e1:7a:89:45:37:91:25:3e:c6:f4:
                    95:f9:fb:a4:91:f5:b9:d3:3a:64:31:83:d2:e6:53:
                    08:04:19:66:22:b5:e9:0a:3c:31:fd:ac:aa:1d:d8:
                    24:96:88:6d:7d:b3:33:1a:bd:65:64:9d:d7:bf:ee:
                    d8:40:23:44:f7:60:bd:36:61:40:c5:45:54:8d:f5:
                    e8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:62:C4:D1:B5:A2:62:E7:D9:10:CA:86:79:34:3E:87:5F:C3:FE:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d881b832-2d48-3ebb-b4aa-962a74130b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:89:5d:64:40:35:6d:69:77:3f:b0:8c:8a:87:02:4f:66:c1:
         58:c5:14:29:53:5d:23:52:81:66:2a:9d:e2:a3:23:aa:a2:cb:
         82:6c:66:00:ff:e1:2a:9b:65:81:24:2b:58:0f:b5:78:c8:55:
         67:10:81:a6:d1:a3:b0:f5:6d:2d:ba:63:e7:9a:78:68:1e:2f:
         f1:60:83:9e:44:d5:19:69:d1:a5:dc:49:34:04:67:08:f3:41:
         69:c8:0a:60:69:6a:c3:9b:6c:d3:4b:2c:70:3d:99:c0:7f:a9:
         8e:1b:db:34:18:4a:a7:95:ab:04:c2:af:31:7e:d1:36:ec:b5:
         7e:16:66:99:e4:6e:18:3f:e0:e6:55:4f:e2:55:78:50:9f:b1:
         c6:39:44:3d:43:c1:70:c6:a0:4c:3a:16:d9:ed:b7:0d:74:7c:
         e2:d4:90:e3:82:4e:a5:20:df:a0:84:3d:33:6e:0a:82:90:37:
         0b:ad:d0:26:b8:9a:45:06:3b:10:2e:cc:e6:36:6a:37:2a:d5:
         08:16:22:f1:1d:51:fc:56:92:98:83:53:db:59:e3:4c:75:de:
         7a:3e:1d:d8:c2:9d:d2:db:67:b8:b2:24:ef:b2:5a:10:7a:43:
         f2:68:58:47:37:2e:db:8f:55:47:5c:91:d3:19:42:c7:b7:99:
         ee:91:ec:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:18:21 2025 by rpki-client