Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dcbdeafd-638a-3ffe-bb6b-98e89164dc4f.roa
File:                     dcbdeafd-638a-3ffe-bb6b-98e89164dc4f.roa (raw, json)
Hash identifier:          RDEwTnUTi/A2/R0r87itrqmNEG3uJYE0wJ2gFMq21cA=
Subject key identifier:   E3:D1:A1:8B:B0:B7:EE:24:04:FB:87:5E:87:C3:7F:8B:35:83:94:4E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584349D250009AC90B9D707BD400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dcbdeafd-638a-3ffe-bb6b-98e89164dc4f.roa
Signing time:             Wed 20 Sep 2023 18:49:58 +0000
ROA not before:           Wed 20 Sep 2023 18:49:58 +0000
ROA not after:            Tue 19 Dec 2023 19:49:58 +0000
asID:                     11798
IP address blocks:        166.0.112.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:49:d2:50:00:9a:c9:0b:9d:70:7b:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 20 18:49:58 2023 GMT
            Not After : Dec 19 19:49:58 2023 GMT
        Subject: CN=2f99f9ad-01a7-4e15-8460-354df75784b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:b1:04:b9:4e:f3:aa:09:2e:00:16:6a:d1:
                    e8:f9:51:7b:83:39:be:9e:60:ff:d2:10:c1:68:c9:
                    d8:2c:e0:8d:55:25:e1:a0:80:b7:86:4f:40:46:83:
                    a1:3c:7e:a5:20:e8:6b:7c:a1:25:b9:96:64:cc:30:
                    30:65:10:b1:33:10:0e:c4:60:22:0d:81:a8:84:17:
                    61:d3:8f:83:f5:60:c7:cc:f8:08:a9:d1:f4:f2:f2:
                    67:d4:01:66:5f:18:a1:78:3b:a4:8e:da:41:0d:1c:
                    f6:45:17:8f:3d:6d:53:63:c4:8f:f9:6f:21:41:97:
                    fc:92:4c:5c:df:de:76:1a:0f:d7:6a:2f:1a:e0:72:
                    d4:80:c3:6c:f1:a6:9e:e4:86:3e:b9:22:13:e4:58:
                    3f:e4:5e:cd:7a:be:b6:4c:05:17:d9:52:b6:01:c0:
                    e9:3b:9b:1f:7a:72:d6:cc:22:79:58:80:50:02:c7:
                    6c:fb:43:a9:eb:ae:74:7b:82:e3:1c:40:24:92:d8:
                    5c:a2:1e:d9:93:c9:9e:62:64:5d:cf:01:b9:e4:77:
                    3a:46:c9:3c:6d:7b:4d:a6:ca:18:97:e1:68:72:31:
                    43:b7:a8:d0:6c:95:6a:9c:93:fd:23:ce:a2:ff:c8:
                    51:d5:76:d7:a0:ad:1c:a9:2f:01:6d:f6:8a:b7:49:
                    1b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D1:A1:8B:B0:B7:EE:24:04:FB:87:5E:87:C3:7F:8B:35:83:94:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dcbdeafd-638a-3ffe-bb6b-98e89164dc4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:11:72:69:97:69:7f:79:cc:1e:0c:1c:db:85:72:e0:52:e5:
         d2:30:8a:cd:cc:c3:ec:4f:e1:6f:41:30:ff:d7:5b:17:f1:64:
         36:d8:f2:cd:80:a5:9e:57:b5:8d:9f:ed:85:4a:2c:1d:8a:79:
         d3:1d:90:d8:99:c7:90:5e:b5:a7:99:bf:39:aa:3e:60:48:8f:
         9e:dd:04:e7:fc:1c:c4:7d:86:4a:9e:a1:9f:cf:c3:7c:75:93:
         0c:9c:f1:30:b4:2c:32:71:a5:00:f8:7a:65:0b:5d:0d:09:7c:
         3b:e9:de:f1:34:ae:5a:31:ce:f0:8f:18:c7:9d:7a:92:81:03:
         f6:8e:f8:59:81:d3:a7:e3:f7:ca:b8:10:6a:ce:77:28:20:45:
         96:f0:83:20:c9:17:d1:6a:89:70:24:c9:81:c6:e4:06:f2:ba:
         1b:c0:4f:8a:ff:3c:94:66:ac:24:ea:c1:b5:6f:17:00:ef:9a:
         5e:f6:5f:6c:de:ad:f9:0d:14:e8:c9:4c:34:4b:f9:a6:9a:8e:
         bc:ee:4d:5b:87:52:85:88:0a:87:68:a9:06:88:a3:7e:69:70:
         3e:42:f3:10:04:b8:3c:51:0d:cd:89:0a:fe:ec:0b:be:08:e6:
         8f:fe:64:bd:61:b6:b5:b2:63:ff:f9:c0:df:6c:31:1f:81:0a:
         15:99:1a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:20:34 2025 by rpki-client