Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fa086eea-02fb-3c9f-ac8b-7190db7766eb.roa
File:                     fa086eea-02fb-3c9f-ac8b-7190db7766eb.roa (raw, json)
Hash identifier:          YnfHlbX6n1ABzFlfE5aO6Gne84souBY5IxcPujlk/Hw=
Subject key identifier:   40:80:DF:81:4D:47:73:70:41:46:8C:B9:E6:AF:AF:39:EE:7C:14:A4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584264E3C8195287400624FF5700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fa086eea-02fb-3c9f-ac8b-7190db7766eb.roa
Signing time:             Fri 30 Jun 2023 18:45:03 +0000
ROA not before:           Fri 30 Jun 2023 18:45:03 +0000
ROA not after:            Thu 28 Sep 2023 18:45:03 +0000
asID:                     140155
IP address blocks:        108.165.151.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:64:e3:c8:19:52:87:40:06:24:ff:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 30 18:45:03 2023 GMT
            Not After : Sep 28 18:45:03 2023 GMT
        Subject: CN=41d4bfc6-cf91-4a74-a5cb-679c812806a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:07:e0:46:02:e2:fd:3a:d3:00:e8:d8:07:
                    fc:2e:6c:12:64:95:3e:f0:e8:8c:bf:45:96:b6:a9:
                    96:55:cb:21:f5:53:9a:7c:6f:c5:3c:30:e1:43:92:
                    52:ce:38:b8:a6:ef:1e:be:63:58:8a:d0:1a:20:b5:
                    b1:25:89:44:50:bd:d7:a9:89:34:57:e4:c6:3c:b1:
                    86:15:13:5a:30:6b:fc:37:00:8f:c5:c6:84:68:73:
                    21:d2:87:38:3a:65:9f:02:0e:00:88:70:fd:b0:85:
                    6c:de:2c:9d:e9:fa:ff:3a:48:18:05:7b:b8:55:4a:
                    f9:df:ae:9d:3e:bf:ca:2a:b2:dc:ad:5a:26:b4:7d:
                    55:a8:be:9f:ee:b7:96:df:02:4c:0e:e9:25:fd:62:
                    5c:78:cd:18:47:12:e9:aa:f3:c2:7f:e2:e8:cd:ca:
                    68:c5:46:fb:9e:c8:cc:71:64:7c:74:2f:1b:d5:ec:
                    86:15:08:6b:9f:f0:4b:44:a1:58:10:d7:ef:6a:d2:
                    d5:ac:f3:8b:3b:73:8b:48:c0:a8:07:d4:62:96:94:
                    ee:80:76:00:d8:39:d2:6c:00:50:13:45:74:05:36:
                    0b:d5:76:b1:06:66:01:0d:7f:72:04:9d:9b:8d:af:
                    7b:b1:df:24:ee:af:0d:98:3e:fc:14:5a:f2:18:d5:
                    69:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:80:DF:81:4D:47:73:70:41:46:8C:B9:E6:AF:AF:39:EE:7C:14:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fa086eea-02fb-3c9f-ac8b-7190db7766eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:94:80:0a:00:53:0c:d3:b1:a3:7b:f7:7f:b4:40:aa:03:35:
         36:2f:1a:00:20:48:4a:90:65:7e:a1:10:09:2a:b4:41:17:6b:
         29:bf:9d:80:ee:a8:02:8a:0d:fd:52:3e:bb:a6:bd:c4:06:75:
         da:f5:f3:e6:2b:d6:9c:f7:b1:d0:a8:63:29:5a:42:08:ee:21:
         d3:80:15:34:8f:c0:52:74:e4:28:9c:83:42:f6:a1:9b:08:70:
         da:73:d3:b1:96:93:fd:19:b9:04:07:f0:7e:83:41:c8:53:4b:
         84:34:b1:42:e9:7d:e9:64:4f:1e:73:34:03:71:3c:52:14:4b:
         54:90:76:e0:e3:58:fe:4b:cd:e1:7e:21:85:a7:42:f4:14:bb:
         20:84:ac:53:c1:30:b2:f3:58:df:8c:1e:57:51:7d:9e:f5:38:
         70:13:48:89:ef:26:dd:8e:39:5b:ac:2c:7d:1d:7b:b0:a4:81:
         6f:50:f2:61:76:fa:ba:cb:ab:17:9c:37:41:cd:1e:8a:3b:c3:
         ed:fc:dd:20:36:3d:93:6b:96:33:65:74:ce:4a:98:1b:8a:7e:
         c4:ab:3a:55:c0:ff:ad:32:80:27:d8:bd:e3:35:ea:da:82:eb:
         c4:e7:2f:7e:39:e0:3c:72:b6:72:05:a3:d7:6d:85:f8:20:16:
         62:74:0c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:03:41 2025 by rpki-client