Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe34fa9b-591d-3cdb-ba35-45f3c9fd750c.roa
File:                     fe34fa9b-591d-3cdb-ba35-45f3c9fd750c.roa (raw, json)
Hash identifier:          qEOBv+ZhBY9Y+53kwgmnY3GN83edI/4ZQBMe2bdG8rI=
Subject key identifier:   60:B5:6F:0D:16:BC:FB:6C:07:3B:1D:14:71:4A:4A:4A:1D:50:5C:8D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845D156FACC2E1D033CF2B35A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe34fa9b-591d-3cdb-ba35-45f3c9fd750c.roa
Signing time:             Thu 09 May 2024 17:25:16 +0000
ROA not before:           Thu 09 May 2024 17:25:16 +0000
ROA not after:            Wed 07 Aug 2024 17:25:16 +0000
asID:                     150698
IP address blocks:        166.0.136.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d1:56:fa:cc:2e:1d:03:3c:f2:b3:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  9 17:25:16 2024 GMT
            Not After : Aug  7 17:25:16 2024 GMT
        Subject: CN=81baa5c7-8edc-4c48-81f2-5b11242c2814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8c:41:ac:26:cc:30:63:96:72:c0:31:90:dc:
                    a0:2c:5d:cf:31:6b:12:a9:7a:77:99:7b:42:e7:48:
                    1a:16:b4:fb:79:1b:82:d7:8e:d8:0c:9e:79:1e:ff:
                    7a:0b:87:a4:f7:53:1b:60:1b:22:93:53:3c:af:e3:
                    33:94:4a:a6:d6:72:06:8a:06:f9:75:5a:e0:39:5b:
                    f1:f3:48:47:3d:1a:bb:81:7c:e9:f5:6e:a7:57:f9:
                    76:d9:d0:bb:08:1b:a5:bb:f6:0a:fb:55:8b:a0:a8:
                    d5:4c:7b:3f:b1:d5:a4:6e:50:1a:58:5e:44:d1:d9:
                    fb:ad:ba:24:3e:ea:88:1b:55:ae:eb:40:b4:b2:d1:
                    22:bf:f4:f1:3e:87:5d:dc:6f:09:52:62:d0:63:81:
                    92:4a:6e:d7:e9:29:42:d6:7c:0b:db:08:bd:63:cc:
                    69:4d:42:bc:03:08:45:a8:a6:40:a0:06:4f:59:43:
                    44:95:30:2d:2a:53:77:0f:ae:ae:fa:7b:eb:0f:a6:
                    f5:27:d4:11:e4:f9:27:ad:cb:b8:71:a8:3b:9d:7a:
                    63:55:80:94:b6:aa:3a:a5:e7:8e:1a:29:ea:2f:0c:
                    9a:28:15:38:be:b7:99:d1:e4:d8:61:48:ca:3f:d4:
                    81:e0:28:6a:f8:62:1e:af:51:74:00:fd:4f:b7:d3:
                    9e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B5:6F:0D:16:BC:FB:6C:07:3B:1D:14:71:4A:4A:4A:1D:50:5C:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe34fa9b-591d-3cdb-ba35-45f3c9fd750c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:98:7a:6c:17:42:db:b1:4f:97:ad:0d:f7:93:21:26:70:60:
         bb:d2:36:8b:1b:15:c3:47:68:0a:c0:2f:74:73:58:f6:df:a3:
         5d:11:95:45:64:be:d6:62:72:fe:b9:32:91:cf:be:37:b7:10:
         37:61:56:1c:10:82:d3:38:e5:b3:47:77:7c:24:76:18:24:89:
         b2:e2:3b:b0:34:8f:f9:9d:6d:49:dd:78:55:18:dc:fe:4d:da:
         6b:42:89:38:19:97:43:9e:4a:00:93:c1:7c:a3:ce:48:a0:d6:
         87:87:c0:f0:c2:67:28:68:aa:40:72:0d:da:87:51:26:02:23:
         f7:d5:62:4a:eb:d2:66:31:32:65:3f:13:4f:5f:96:b7:1d:4a:
         c4:f9:7f:bb:2d:4f:7a:d4:e7:36:02:9d:24:1f:d6:81:05:61:
         22:57:5f:3e:42:bb:10:b4:d7:65:d5:08:69:18:79:9f:fb:29:
         aa:72:9f:c1:62:ef:30:1b:82:9b:7e:10:0f:a5:4b:1b:c3:f5:
         85:de:6b:f1:77:c7:97:c2:3b:b6:8e:58:0f:02:fe:21:5a:b9:
         8e:46:43:8d:77:16:11:e5:bd:11:21:29:9d:e5:2f:23:a2:8b:
         38:56:29:ef:25:cc:f2:1f:09:dc:0b:ec:6d:ff:92:bf:82:8b:
         0c:1c:06:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:06:17 2025 by rpki-client