Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f174a2ed-f632-3ea9-8e66-4fb435cc8586.roa
File:                     f174a2ed-f632-3ea9-8e66-4fb435cc8586.roa (raw, json)
Hash identifier:          aNs5sSpQFTKsAdHRxPIwx99JT2qML1hvrX3vTS435Cc=
Subject key identifier:   F4:17:9F:E3:6F:34:45:77:8A:EB:FC:23:B9:A6:2F:61:23:13:15:45
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446E9219A9075662CD3B540
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f174a2ed-f632-3ea9-8e66-4fb435cc8586.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Fri 11 Aug 2023 01:51:34 +0000
asID:                     834
IP address blocks:        108.165.124.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:e9:21:9a:90:75:66:2c:d3:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug 11 01:51:34 2023 GMT
        Subject: CN=34511f9c-2ccf-4cef-b151-9184ad9d1605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:29:e7:f7:1a:c1:4f:d9:36:22:9f:8e:00:
                    46:c3:0d:30:9c:37:63:af:64:f7:a1:45:29:70:b4:
                    fc:0b:00:fc:53:b0:b3:43:b3:08:80:d6:8f:a8:48:
                    fd:38:dd:10:96:69:1e:f6:40:29:06:b4:b9:b1:87:
                    ae:64:47:da:e1:5d:4a:2f:3d:50:4a:c1:d2:05:b0:
                    70:a9:76:da:30:5b:35:59:a3:4f:bb:0d:0e:f6:ae:
                    01:bf:a5:62:64:bf:d7:80:bb:a7:fc:51:b0:00:35:
                    a5:c6:35:88:07:a3:80:0b:4a:3b:a2:4d:35:ee:b6:
                    a2:bd:50:04:26:d4:22:ea:fb:17:e2:d1:1b:e9:37:
                    89:6e:36:48:43:c9:2c:a8:66:9e:73:51:0a:65:27:
                    6a:e4:f3:7f:6e:67:2e:8f:1d:19:7d:8f:b7:16:be:
                    21:42:7e:04:b6:c8:43:77:b3:2d:ad:33:e5:0c:a4:
                    55:89:19:49:68:7e:82:ec:86:ab:90:c5:8a:64:a8:
                    aa:dc:03:39:4c:00:85:10:6c:89:03:b9:83:81:f6:
                    a3:3a:e6:28:bb:8e:32:d8:60:83:ad:bc:e4:93:6e:
                    fc:60:55:79:69:ea:9e:d8:88:82:c0:a2:36:2a:96:
                    ee:0b:05:48:7a:1e:fa:53:8f:89:10:96:d6:22:e0:
                    a3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:17:9F:E3:6F:34:45:77:8A:EB:FC:23:B9:A6:2F:61:23:13:15:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f174a2ed-f632-3ea9-8e66-4fb435cc8586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:4d:be:e7:b6:ea:dc:ac:6e:e0:67:ff:9f:8f:a0:d8:53:bb:
         11:4e:fa:5c:0e:1d:96:02:46:02:1e:da:b3:99:c8:ee:ac:00:
         9a:f1:35:8e:c9:fc:c8:80:e3:7d:82:15:09:d2:bf:ef:fd:68:
         da:53:c0:21:f7:95:48:51:f7:2c:b6:03:cd:97:a8:ee:80:8c:
         f2:65:9b:56:98:cf:4f:57:d8:48:00:ad:48:1e:ee:0b:82:50:
         ef:3a:b4:cd:8f:47:58:57:a4:df:ee:f2:eb:34:c7:ad:17:22:
         85:6a:5e:88:7a:1b:05:da:51:d9:68:c5:67:96:4a:bb:af:46:
         44:9d:47:5b:b6:35:0a:6a:c9:84:a8:62:64:0b:19:05:f5:f0:
         48:99:57:fb:ec:67:d9:36:05:42:27:e9:67:ed:91:51:13:24:
         cb:7c:75:46:02:d1:ee:04:37:a4:a3:7c:01:e7:13:84:36:a3:
         67:c4:b1:63:21:72:99:41:f7:9f:29:80:33:10:88:ca:44:98:
         75:02:42:eb:15:89:b4:b0:a7:20:e8:ea:23:d4:a0:3f:56:ad:
         d8:b0:90:03:a0:4d:e0:b4:75:03:c1:86:44:3f:f3:8f:ec:cd:
         c9:30:b3:fc:7c:64:07:e2:e4:6d:06:a2:0c:0c:b2:ef:da:5f:
         c6:d5:98:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:03:40 2025 by rpki-client