Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f0eecca1-3f0b-3c6a-b651-c64db0ecced5.roa
File:                     f0eecca1-3f0b-3c6a-b651-c64db0ecced5.roa (raw, json)
Hash identifier:          qpnC4oM+gLe4+Dxy9kYKm17HKxfniDQguZq5WgEWEwI=
Subject key identifier:   4B:18:C5:05:5D:99:60:A4:30:E0:AA:38:94:6A:3A:67:64:4D:79:EE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842BDEA872D58246187A017C380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f0eecca1-3f0b-3c6a-b651-c64db0ecced5.roa
Signing time:             Tue 01 Aug 2023 16:05:35 +0000
ROA not before:           Tue 01 Aug 2023 16:05:35 +0000
ROA not after:            Mon 30 Oct 2023 16:05:35 +0000
asID:                     11798
IP address blocks:        166.1.164.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:bd:ea:87:2d:58:24:61:87:a0:17:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  1 16:05:35 2023 GMT
            Not After : Oct 30 16:05:35 2023 GMT
        Subject: CN=f340cd61-5b79-4623-ac17-b0570fc808d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:67:f0:1d:82:57:09:f7:fe:53:b4:34:bc:
                    59:2e:cb:9b:1c:fe:a9:7b:8f:18:3c:e6:62:99:0a:
                    c7:71:57:a8:06:95:63:a6:e2:e1:53:e6:31:12:d7:
                    64:65:ae:91:3c:e3:7f:d1:f4:f0:2b:79:66:fd:0b:
                    5f:e0:1d:1f:61:54:16:ca:14:46:a0:24:d0:40:b3:
                    a2:4c:39:5a:a7:c5:65:4c:a9:28:e0:fc:d3:f3:7b:
                    58:d5:25:3d:5f:05:af:45:cc:c1:56:fc:7d:07:db:
                    21:da:de:5c:dd:b4:1b:23:a0:7e:23:50:9a:9a:41:
                    69:26:61:de:66:70:1c:83:ba:16:36:08:b6:d1:9e:
                    42:c7:56:19:61:d2:d8:5b:3a:a7:7d:65:d5:03:e4:
                    27:b3:10:be:4f:4e:7f:19:da:1c:71:9d:3c:46:42:
                    2b:fe:e7:4b:ed:01:a6:b5:52:30:e5:0e:c1:d9:bf:
                    68:4c:cc:01:de:85:24:cd:6b:43:25:00:e1:48:fb:
                    f7:d7:84:e4:cc:f6:36:ef:72:cc:06:d8:de:48:f7:
                    96:5c:d4:69:b2:68:f2:cc:9f:e6:c1:64:41:db:ed:
                    01:7e:92:02:53:9f:25:f1:fc:b2:de:77:f3:8f:c4:
                    90:61:08:1f:bc:52:07:19:3f:fb:5e:0a:4d:27:3d:
                    e6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:18:C5:05:5D:99:60:A4:30:E0:AA:38:94:6A:3A:67:64:4D:79:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f0eecca1-3f0b-3c6a-b651-c64db0ecced5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:3e:0c:a0:67:1a:93:01:ee:67:a1:72:d5:17:8b:80:8b:7f:
         3f:3d:58:75:d9:b5:7c:b9:29:a7:99:49:fb:94:6a:08:c9:16:
         92:7c:0c:c7:69:7b:2d:11:6d:4f:c1:00:2b:93:ba:fb:89:3b:
         65:53:be:ed:19:3c:43:e3:1e:7f:ce:a1:92:b7:76:b0:41:4b:
         b3:41:8a:34:0d:9c:1d:a9:ed:83:23:a6:a7:63:2c:df:e6:25:
         83:35:0c:64:ab:01:8f:d4:5e:65:26:23:89:09:a6:63:1b:59:
         a8:d3:b7:63:1f:cd:9f:95:9e:4c:f4:24:ef:ed:ee:c1:46:c6:
         cb:68:29:ce:93:56:b8:12:3a:62:05:56:93:7f:91:96:c3:48:
         d3:21:9a:88:53:2d:31:77:1a:fa:ce:bb:bb:35:1b:49:e8:dd:
         97:c0:7a:24:a4:65:04:fa:b3:2a:24:d2:d9:82:53:65:1f:0a:
         a7:bf:b1:0f:13:df:60:99:c7:b6:42:1b:88:34:d6:b0:02:21:
         a1:fc:ac:49:2c:a6:96:9a:df:a0:6c:04:7a:97:5a:c6:a9:63:
         e3:af:e7:92:c9:72:31:ca:ba:16:30:b7:4f:5f:ab:42:3c:3e:
         08:f8:71:00:ce:a5:e4:a3:55:54:e1:86:08:cd:76:fe:f7:3b:
         05:41:53:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:06:18 2025 by rpki-client