Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ee692c81-98cc-3f58-b359-d23268c1f00d.roa
File:                     ee692c81-98cc-3f58-b359-d23268c1f00d.roa (raw, json)
Hash identifier:          9RUA9ER8fh6pKxXliiVqzJ77aqvbz12VGdfZcEkIHg0=
Subject key identifier:   F4:D8:83:01:6D:4A:11:AF:D9:AE:00:BC:E3:79:29:F0:6C:45:87:C9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858422A07C73EDCA49E6B3A810500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ee692c81-98cc-3f58-b359-d23268c1f00d.roa
Signing time:             Fri 09 Jun 2023 16:44:53 +0000
ROA not before:           Fri 09 Jun 2023 16:44:53 +0000
ROA not after:            Thu 07 Sep 2023 16:44:53 +0000
asID:                     11798
IP address blocks:        166.1.216.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:2a:07:c7:3e:dc:a4:9e:6b:3a:81:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  9 16:44:53 2023 GMT
            Not After : Sep  7 16:44:53 2023 GMT
        Subject: CN=20b2b031-470f-49b8-84cd-2091d292af63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:02:b0:f1:d0:e2:58:5a:cc:c8:0a:ff:ab:86:
                    4d:3d:1f:c2:14:30:5f:71:a4:66:88:22:8e:12:f7:
                    75:a5:74:2c:2a:b2:c3:10:c3:e3:2d:a9:83:e9:49:
                    9e:78:c2:6e:01:97:66:c5:29:46:41:1e:4d:47:da:
                    ce:7f:08:75:b2:ad:25:67:94:f4:c6:88:a8:3a:95:
                    03:c2:8c:03:6e:b0:67:1a:6d:ec:ef:e3:b1:3f:ac:
                    70:f0:3a:a6:a3:94:b2:52:57:15:f9:91:e1:3d:2a:
                    9c:f2:74:62:89:f2:95:0a:6a:be:f0:e1:ad:8d:26:
                    56:fe:67:ae:51:3d:11:b9:08:51:8a:1b:63:a4:69:
                    06:3b:5e:4e:dd:ec:d4:da:00:42:1c:c6:ad:9a:ec:
                    77:67:d6:c4:8a:bf:bb:fc:9c:f4:44:df:bf:2d:65:
                    c7:50:76:a6:b1:9b:3d:d2:92:21:00:03:af:b2:fb:
                    c5:32:6b:ce:5d:3f:c8:f2:ba:24:92:9a:d5:2a:bd:
                    86:5c:20:59:48:8d:06:da:72:d8:00:b1:13:26:4a:
                    5a:22:93:aa:ad:61:1d:dd:0c:c1:ef:f1:f4:66:b5:
                    3d:d1:5c:92:b5:7b:64:df:15:fd:42:e1:c9:51:2a:
                    fc:f0:25:27:24:c0:6d:bd:35:69:a1:e8:6f:f5:25:
                    03:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D8:83:01:6D:4A:11:AF:D9:AE:00:BC:E3:79:29:F0:6C:45:87:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ee692c81-98cc-3f58-b359-d23268c1f00d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:40:9d:6d:3f:e6:c3:ac:bd:a1:21:09:ea:e2:af:72:69:b1:
         d9:97:d5:35:2b:d5:60:ad:51:8e:06:05:8f:f4:33:39:47:be:
         05:50:85:84:ca:66:d4:69:e1:e6:06:84:2c:c5:05:a1:70:c1:
         72:14:78:ce:a1:94:9b:6a:5b:90:47:f8:5d:2d:83:3c:67:d5:
         b9:0e:f7:20:a6:b0:f4:bc:f8:43:d6:23:81:72:ea:3c:b6:c7:
         c9:d7:45:76:71:19:cf:a7:9a:93:f6:cd:8e:4d:44:bc:0f:b6:
         4e:19:e9:92:fb:96:f5:70:d5:c3:39:b8:e0:18:04:f4:37:97:
         a0:97:fa:0b:d5:79:5a:d2:44:c7:ae:90:0f:86:2a:9f:c9:7e:
         a5:89:9c:e4:9d:16:47:d0:be:1c:79:cd:fa:c3:68:d1:7d:76:
         47:45:6d:7c:ea:91:63:a0:5c:26:42:67:2e:db:73:0b:77:3c:
         f5:59:aa:63:75:99:a0:e4:a3:e4:fa:af:99:f1:c2:ad:88:6b:
         de:6b:c6:6a:e1:65:25:35:b0:2b:45:b6:77:8c:cb:bb:fa:a5:
         a9:7c:28:6e:c7:06:66:fc:07:68:0d:0d:aa:2a:33:c3:f0:15:
         6f:5f:fc:de:b5:08:89:0a:c5:c3:ba:bf:16:1e:2f:22:66:e3:
         97:05:72:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:11:30 2025 by rpki-client