Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/17e3cdbc-8567-332d-b407-f71b5a937a78.roa
File:                     17e3cdbc-8567-332d-b407-f71b5a937a78.roa (raw, json)
Hash identifier:          TU6NAt5EaThOiRw6f8wzyoeiYfqhGzLAvUw0LgjODCk=
Subject key identifier:   5B:49:FA:76:E6:C8:94:CD:DB:CA:9B:08:83:B1:11:82:F1:58:4D:0D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F64146F616297DA3E3A4C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/17e3cdbc-8567-332d-b407-f71b5a937a78.roa
Signing time:             Fri 12 Apr 2024 17:24:46 +0000
ROA not before:           Fri 12 Apr 2024 17:24:46 +0000
ROA not after:            Thu 11 Jul 2024 17:24:46 +0000
asID:                     204957
IP address blocks:        166.88.0.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:41:46:f6:16:29:7d:a3:e3:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:46 2024 GMT
            Not After : Jul 11 17:24:46 2024 GMT
        Subject: CN=fbf6781d-c050-4648-9680-638c67964867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a5:a3:07:de:62:0e:d3:79:25:45:11:d8:a5:
                    63:fb:7f:39:b3:7e:8b:a9:21:3a:d3:02:be:bb:06:
                    b5:35:c9:97:8f:f9:45:7d:f3:4f:a8:f1:56:78:40:
                    d8:dd:fe:87:07:29:6e:bf:24:b1:73:72:0d:42:35:
                    af:06:9c:14:5c:f0:51:85:5f:c2:1c:e1:0a:ab:85:
                    7e:5b:5d:a4:1c:75:6a:05:91:91:f2:47:1e:31:70:
                    df:4a:e7:f0:8a:05:a4:45:bb:62:27:77:b2:41:2a:
                    39:27:d3:04:c0:14:ee:1b:e9:ec:b5:c8:1b:5f:5c:
                    ed:62:37:19:80:15:3d:42:11:ab:02:54:df:be:dd:
                    1c:8a:da:73:06:81:36:1e:a4:19:7e:48:8f:51:9f:
                    54:dc:c0:93:fe:d3:8c:d8:4f:bd:cc:ac:9f:51:89:
                    35:7b:66:0b:b1:25:2f:68:af:b4:6b:88:93:11:22:
                    5c:17:d5:20:b7:d3:28:61:55:68:b1:92:f8:36:9b:
                    4b:06:f0:8e:95:29:d4:48:df:52:30:5f:8f:10:5d:
                    b2:03:fb:05:81:f6:a2:b0:d9:29:b9:d7:83:af:5e:
                    78:c1:17:72:38:a9:c3:a9:b2:6a:e1:a1:f3:6f:fb:
                    35:2c:f8:02:c5:8c:b5:39:21:47:cc:de:b8:62:35:
                    0d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:49:FA:76:E6:C8:94:CD:DB:CA:9B:08:83:B1:11:82:F1:58:4D:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/17e3cdbc-8567-332d-b407-f71b5a937a78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b1:10:46:02:44:4a:65:3b:04:d5:15:5a:1c:f0:4d:10:30:
         8d:ab:d6:80:36:d9:9d:ce:f7:77:36:28:b5:2d:ee:3c:42:60:
         da:e0:4e:75:54:b1:ac:b8:35:dc:97:d2:82:73:14:ee:f8:cf:
         ed:b8:60:3d:e0:89:2f:75:2a:45:e1:6b:ce:71:d4:40:61:df:
         a9:30:f5:1f:3a:bf:52:17:79:ad:74:a1:17:b3:cf:79:e7:41:
         5c:54:14:f6:9b:11:bf:c1:f8:51:a2:76:ff:e5:e0:a4:a7:86:
         24:ae:b9:b1:03:5d:18:46:aa:b4:fa:2e:30:50:9f:e7:3f:9a:
         d4:f2:53:8c:e0:75:07:d1:8f:db:33:4f:39:51:3d:63:fa:63:
         20:11:5e:6e:eb:a9:92:d3:6f:be:5f:56:7c:82:04:7b:50:4f:
         b7:84:e9:89:42:54:6e:75:42:6e:bf:57:66:ad:7c:36:2b:6e:
         0f:8a:51:41:b4:b5:74:2f:63:a9:71:60:b9:e5:5c:89:59:f7:
         be:8b:73:f0:e0:aa:7e:7a:50:89:25:89:31:7b:f4:2d:83:10:
         23:25:cf:8b:6d:24:76:d4:36:14:6f:a9:46:e9:c0:f6:37:7e:
         eb:3e:c6:f8:02:93:48:fb:d2:89:49:d2:5b:22:8b:ef:f1:c3:
         b3:33:2c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:46:07 2025 by rpki-client