Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f5800e15-41bd-3df2-a57b-ad6146c1166d.roa
File:                     f5800e15-41bd-3df2-a57b-ad6146c1166d.roa (raw, json)
Hash identifier:          2gJYKI0cJfJtqHU0iyWDck+SBv/7y1UqAuWEWYsPpro=
Subject key identifier:   D6:E5:10:FE:A3:0F:19:44:FF:93:BA:F5:1F:C1:DD:7B:61:77:8E:9A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583E51FB53A764E9C93AF774C640
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f5800e15-41bd-3df2-a57b-ad6146c1166d.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Mon 23 Sep 2024 04:00:00 +0000
asID:                     7029
IP address blocks:        108.165.199.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:51:fb:53:a7:64:e9:c9:3a:f7:74:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Sep 23 04:00:00 2024 GMT
        Subject: CN=c5b28b90-e829-40ce-bee1-7ddb18d7996a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5c:b1:72:98:af:db:57:b5:57:a8:b3:79:59:
                    e5:dc:bc:4f:3e:8c:12:73:bc:d4:4a:08:76:0c:ed:
                    29:a4:d9:f2:38:f9:d3:bd:65:8d:f4:53:8b:06:cf:
                    70:fa:8d:fd:81:39:a8:2c:f4:4b:2e:ef:9f:49:39:
                    32:ce:89:21:18:77:13:13:cc:3f:16:72:0d:ff:27:
                    be:c6:70:74:68:da:d5:31:ab:45:35:45:8d:0e:09:
                    c7:7b:8c:85:5d:1d:cd:1a:c4:b1:ce:09:4d:7c:8c:
                    5f:73:99:81:d8:31:7d:85:2c:4c:8c:2d:63:5c:1b:
                    d5:a1:d3:0f:8d:d2:24:61:dc:44:25:d6:b5:8a:aa:
                    54:3e:7e:37:47:c6:f4:d6:90:2e:86:d5:88:0a:86:
                    2d:4d:e2:f6:28:db:91:f3:55:24:ee:dd:69:dd:42:
                    ec:94:d7:cd:e0:ef:70:a3:8c:3f:d4:c2:e5:57:16:
                    ca:06:ea:73:f7:97:c5:5e:5c:85:6f:35:ed:37:30:
                    87:5f:58:35:7e:75:e9:11:75:44:ff:21:e2:b7:e2:
                    62:51:8d:1e:ae:c6:89:8f:48:7e:46:a8:42:3f:cd:
                    7a:29:c3:20:b4:a1:eb:a9:5f:89:09:c0:49:24:3e:
                    7c:0a:12:ce:f2:3b:b8:20:ee:e0:16:2b:f8:17:b6:
                    e1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E5:10:FE:A3:0F:19:44:FF:93:BA:F5:1F:C1:DD:7B:61:77:8E:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f5800e15-41bd-3df2-a57b-ad6146c1166d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:5c:02:f5:a3:ce:fc:90:9e:0a:05:45:13:74:17:14:14:27:
         99:eb:90:37:07:c8:4b:cb:f1:a0:c6:e5:2d:4f:5e:91:52:28:
         90:41:ee:3d:05:55:a6:72:52:67:7c:68:05:b7:d7:8d:2b:99:
         b5:15:d4:d4:6d:50:d7:ea:25:18:d9:77:51:ff:44:2c:a5:20:
         95:77:43:13:e2:ae:10:e3:5e:82:84:86:f8:77:e5:d8:1f:24:
         bb:f7:0e:a0:1f:7e:55:8d:e7:24:4c:1a:d1:ec:56:3b:4f:54:
         d6:d9:5d:6d:da:74:75:02:f4:13:ce:a7:bb:ed:cd:7a:ea:e8:
         9c:81:53:c2:a1:54:70:52:d0:cf:63:67:01:6f:67:1a:2d:a4:
         4e:30:be:7e:61:35:86:c2:98:0c:c3:70:54:72:0d:2f:58:3b:
         03:5f:95:35:b7:f2:02:e3:0b:dd:76:7f:05:a4:89:b9:a6:45:
         49:c8:c6:55:cf:7d:19:38:7b:47:e0:b3:29:98:50:e0:ba:58:
         a1:ce:e7:d9:65:13:e1:8b:d6:56:2f:10:bc:b2:50:37:1e:7d:
         94:23:b7:88:9b:35:a1:2e:64:9e:b8:df:de:ef:95:b2:4d:9f:
         eb:96:59:1f:45:32:0f:de:d1:7c:cd:82:45:72:f5:fb:6a:86:
         53:bb:55:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:04:29 2025 by rpki-client