Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3c4e4c4a-7831-3fbb-8c39-b7229125f006.roa
File:                     3c4e4c4a-7831-3fbb-8c39-b7229125f006.roa (raw, json)
Hash identifier:          o9J38PLaVkJKj1REj7gFJujoTDC+jd5ya/82cjgiEOQ=
Subject key identifier:   C7:8E:61:58:DD:17:DC:5F:46:B8:B5:76:A2:4D:01:0B:EB:09:FD:60
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845EFCE3DCE06088F156F9C6D00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3c4e4c4a-7831-3fbb-8c39-b7229125f006.roa
Signing time:             Mon 20 May 2024 15:19:49 +0000
ROA not before:           Mon 20 May 2024 15:19:49 +0000
ROA not after:            Sun 18 Aug 2024 15:19:49 +0000
asID:                     834
IP address blocks:        66.78.59.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ef:ce:3d:ce:06:08:8f:15:6f:9c:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 20 15:19:49 2024 GMT
            Not After : Aug 18 15:19:49 2024 GMT
        Subject: CN=0ba54454-8b85-4141-a123-745c3dc8cbb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:43:f9:a5:df:1b:42:b5:d6:86:2e:c7:dc:21:
                    17:bb:58:45:a3:b0:1d:8c:00:16:3d:91:fe:b1:c3:
                    ff:cc:b9:8a:65:04:af:1e:f5:e5:10:14:81:8f:fb:
                    cc:f9:a9:48:45:18:f8:e4:75:dc:c1:9c:47:3f:2b:
                    50:6d:96:1d:49:75:4a:1e:a4:d9:ad:5f:f8:74:3c:
                    ff:d0:4b:25:0e:2d:e9:38:1b:1e:49:9a:71:04:44:
                    aa:27:7f:5f:33:45:74:e3:73:16:e4:e0:71:29:e6:
                    14:7f:ec:76:ed:34:41:ae:93:00:b2:74:8a:de:6b:
                    ef:9c:e7:58:72:e4:45:8c:99:62:19:87:e4:e2:5e:
                    44:4b:b1:ae:e2:6c:c8:b2:75:05:b2:cd:71:97:8f:
                    4c:11:fd:d4:5b:a5:96:40:99:93:82:c4:f9:36:4a:
                    d5:b7:69:6c:44:43:f5:97:d6:cb:7d:ff:37:af:8f:
                    33:8a:2d:77:23:e6:0d:f7:ff:f2:fb:b0:d6:8d:26:
                    16:f9:d1:ee:cd:93:a4:00:1b:e7:2e:d2:e2:7a:ac:
                    7b:e1:07:93:96:18:aa:d7:8c:45:72:75:72:ac:30:
                    ac:8a:1b:bc:83:c4:61:88:d3:74:29:e6:25:a8:f6:
                    eb:55:b7:2f:bb:71:0f:5d:c3:b0:84:1a:81:b3:74:
                    28:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8E:61:58:DD:17:DC:5F:46:B8:B5:76:A2:4D:01:0B:EB:09:FD:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3c4e4c4a-7831-3fbb-8c39-b7229125f006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.78.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:58:4a:00:1e:ab:89:f6:5d:50:56:cb:25:f8:67:38:aa:3a:
         7e:5b:54:e4:6c:b5:2b:f7:31:ac:9f:58:47:c3:72:90:28:3e:
         8c:14:fa:ec:27:0b:90:ac:20:15:c8:2e:d6:6b:e9:39:8b:fb:
         cc:66:c6:6e:73:d5:a2:36:35:ae:0c:f8:35:e8:63:3a:a5:78:
         65:fa:0a:d0:0e:8b:18:b0:27:ed:e2:ce:2c:32:66:14:de:cb:
         35:e9:49:d1:6b:42:1e:1e:f5:0e:a3:4a:01:5d:cd:bf:20:cd:
         42:34:52:63:e5:1f:ca:11:df:95:ca:92:79:d9:90:a8:61:4b:
         3b:fe:c8:76:ce:dd:61:f0:38:f5:fc:2d:4a:53:9f:ac:d9:bb:
         0d:33:1b:0d:9b:db:92:08:a8:e5:74:fe:5c:77:3e:cc:18:36:
         48:b0:72:e0:59:c0:1a:ee:d5:9d:5f:7d:51:20:87:95:66:a8:
         67:ec:31:ea:8d:9b:9c:f5:42:23:ae:bd:e8:a5:4f:0d:8c:83:
         28:b5:d3:aa:0e:af:0c:1b:51:0d:d0:c2:8d:9d:ca:cc:f8:0c:
         ad:d8:c7:89:f2:3c:2d:6d:24:72:2f:ba:17:97:be:97:82:76:
         a2:cc:e9:c8:9b:31:57:4b:eb:32:58:0b:d5:bb:13:e3:88:3c:
         ee:de:22:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:42 2025 by rpki-client