Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec125bde-37ff-3850-a72d-fc3e4a19bed2.roa
File:                     ec125bde-37ff-3850-a72d-fc3e4a19bed2.roa (raw, json)
Hash identifier:          bb5GOuAkZk751d60k52+B7xEKl9qBvNiumB++PfjByo=
Subject key identifier:   7F:1D:86:C8:79:70:BF:A8:D6:CA:48:60:13:ED:01:F1:4F:DF:A2:9A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583E9F5D175F93CAD65542E86970
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec125bde-37ff-3850-a72d-fc3e4a19bed2.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Mon 21 Oct 2024 04:00:00 +0000
asID:                     399587
IP address blocks:        166.1.96.0/21 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:9f:5d:17:5f:93:ca:d6:55:42:e8:69:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Oct 21 04:00:00 2024 GMT
        Subject: CN=e23523d7-1446-44f0-9cbd-51330f557394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:36:78:16:ca:cd:de:0e:be:d1:38:1a:70:90:
                    fa:1b:e6:49:e6:26:6c:b6:4b:d6:48:e0:da:6d:44:
                    81:1a:bf:56:92:1d:10:1d:e8:51:e1:46:a5:6d:f1:
                    a9:3b:db:ef:9d:e1:13:60:10:91:b5:bb:15:da:1c:
                    42:36:e3:c8:f9:6a:20:6f:f5:5c:ad:c2:14:96:5d:
                    98:da:fa:e0:a4:f5:86:28:cf:72:4e:59:11:19:01:
                    c7:16:d8:ba:68:d2:30:c9:ec:28:7c:ff:52:6b:16:
                    c9:2f:64:5e:c9:67:89:60:6a:e9:60:1f:5d:c1:4c:
                    9b:14:c2:a9:89:63:2b:16:52:28:a8:6a:4d:54:46:
                    90:84:92:5f:30:cc:78:b2:75:d8:6f:5e:fa:e9:e4:
                    f7:10:b1:32:9e:0d:a8:16:02:92:02:3f:9e:c3:c0:
                    af:94:91:4f:41:44:d8:65:48:b1:4a:c5:7b:30:fc:
                    b6:de:29:40:70:3e:62:2a:98:68:04:17:4a:de:bd:
                    05:e3:9d:fa:55:ac:33:79:59:6f:d6:eb:ca:c1:59:
                    a9:c3:6e:63:b2:06:00:94:31:31:c2:b3:00:a8:ed:
                    61:ae:9f:f7:22:73:23:97:85:b0:4c:08:2b:1a:70:
                    8b:ea:16:14:db:80:3a:3e:74:7d:aa:1d:c4:86:dd:
                    b9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1D:86:C8:79:70:BF:A8:D6:CA:48:60:13:ED:01:F1:4F:DF:A2:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec125bde-37ff-3850-a72d-fc3e4a19bed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:dc:fe:e8:13:bb:5b:25:48:2d:2d:69:ba:04:a3:50:c9:76:
         39:ca:69:10:07:bc:9b:2d:17:23:11:d8:19:14:f4:56:40:88:
         a3:e1:aa:77:58:01:6f:92:89:47:63:da:61:e6:70:79:16:3a:
         fc:13:0b:98:06:26:e4:5e:f4:b7:05:33:39:bc:7e:b7:b6:85:
         a2:4e:d7:1c:f2:91:b0:27:7c:ac:b2:b3:ab:fa:6f:ea:22:b0:
         1b:fb:49:a2:e4:09:86:c5:2c:96:6a:f7:7b:a4:f0:cf:45:15:
         e9:70:a7:94:1f:11:9b:ff:ec:63:2b:e3:19:57:54:3a:18:a8:
         29:66:8a:8f:23:a6:4c:4a:25:14:18:42:e3:5f:11:93:44:a6:
         8d:26:d5:70:14:b3:57:cd:12:db:9b:6e:aa:29:70:ca:32:96:
         d9:ba:c6:6f:65:e1:c5:66:ee:41:54:50:91:86:e7:5e:88:88:
         77:5e:a0:b1:f8:9e:94:03:17:89:7b:23:dc:ab:ff:c7:7f:6c:
         22:64:0f:fd:f9:33:e4:89:14:c8:53:d5:b8:28:c4:4a:1f:dd:
         29:09:e7:e0:31:90:a8:5d:4d:34:02:2b:d5:64:8c:6d:85:38:
         87:24:d3:70:80:df:0d:d1:1f:5c:3b:a1:8c:f3:8f:4b:4f:94:
         06:d1:d8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:22:57 2025 by rpki-client