Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ffe310d2-6ab6-3d8a-b9ef-6b92d5a85014.roa
File:                     ffe310d2-6ab6-3d8a-b9ef-6b92d5a85014.roa (raw, json)
Hash identifier:          WPw5ggB0/5qE9s7CUCwN3OTGVhqf4gRhppJwMCnUFfQ=
Subject key identifier:   9C:0E:45:4C:3B:34:9B:C5:EF:19:48:BB:64:20:29:91:7B:FC:06:16
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285846D8CB7D8C45D1F9F0F4D85510
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ffe310d2-6ab6-3d8a-b9ef-6b92d5a85014.roa
Signing time:             Mon 12 Aug 2024 02:17:37 +0000
ROA not before:           Mon 12 Aug 2024 02:17:37 +0000
ROA not after:            Sun 10 Nov 2024 03:17:37 +0000
asID:                     834
IP address blocks:        66.78.44.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d8:cb:7d:8c:45:d1:f9:f0:f4:d8:55:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 12 02:17:37 2024 GMT
            Not After : Nov 10 03:17:37 2024 GMT
        Subject: CN=5f8801eb-4746-4ad7-9f63-61308e535d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:10:dc:40:75:cb:3e:3c:18:04:d5:08:db:d3:
                    3d:89:eb:4b:d1:e5:36:f5:0f:10:a4:21:6d:9f:f6:
                    18:1e:28:a7:28:3d:52:6b:1f:8d:06:7f:b6:6d:67:
                    91:af:9d:00:af:c7:ec:6d:24:fe:57:b0:6e:8d:30:
                    f8:5e:b5:b4:04:93:d7:83:10:4f:77:b5:d6:df:98:
                    83:90:d6:e6:22:fd:1e:a8:d0:93:92:98:03:5d:39:
                    2e:19:52:21:ba:7c:69:4f:3b:da:d5:bc:09:a7:c0:
                    a0:04:54:97:67:21:31:ab:db:dc:77:b2:82:d6:98:
                    84:95:e4:46:22:93:f6:67:ec:6e:f3:dc:13:7a:66:
                    e2:ee:cf:9b:e2:ef:fe:a4:27:2a:72:b5:41:62:1b:
                    7a:be:de:33:7f:11:47:af:b6:b8:16:e6:21:c5:09:
                    90:f9:5f:7e:5b:92:28:63:0b:11:a4:a0:b2:4c:91:
                    dd:5f:80:44:57:c1:73:88:44:5b:d4:42:94:cc:a0:
                    18:42:90:81:c5:0d:70:07:35:24:c3:a3:b7:11:3c:
                    d6:d7:00:b9:1b:c8:21:13:9f:da:49:58:dc:1b:f4:
                    f4:9c:6d:50:6e:26:0b:b4:e2:7b:05:31:f5:03:25:
                    6a:4d:9a:7e:5f:93:c6:5b:10:d8:26:73:d7:8b:ae:
                    88:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0E:45:4C:3B:34:9B:C5:EF:19:48:BB:64:20:29:91:7B:FC:06:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ffe310d2-6ab6-3d8a-b9ef-6b92d5a85014.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.78.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:21:a3:00:15:13:e8:ba:1c:b9:a4:40:00:3d:ad:fe:2f:a1:
         05:6a:14:a0:15:3f:ef:64:41:8a:47:88:ad:f3:6a:c2:38:12:
         89:75:97:5a:aa:cd:b3:2b:49:15:d5:85:42:85:43:21:34:87:
         5c:c4:5b:11:7c:27:f4:9f:f6:0f:b2:90:e9:4a:4c:a4:90:85:
         8b:57:d2:db:92:46:c3:2a:e0:e6:b9:e9:e7:ba:fb:1a:10:02:
         6b:3f:be:58:d1:c3:bd:c7:6a:fa:30:12:fe:0c:43:43:b1:44:
         3f:d3:f0:47:cf:30:e2:af:62:ef:28:25:9e:0e:6a:17:4c:d7:
         d3:ac:4a:bf:7d:dc:41:7e:c5:31:60:4c:06:39:3e:5f:14:3a:
         38:b9:46:ac:6d:bb:67:ee:52:a3:f7:34:b4:07:22:2c:dc:f1:
         6c:eb:b9:55:11:35:01:d6:a5:85:73:bd:c1:57:af:29:8c:73:
         f6:c1:57:d1:ef:a7:d2:8f:4b:b2:fc:3f:eb:89:37:e3:a6:86:
         34:26:a1:cd:54:82:32:b3:73:54:62:b5:d4:5b:e8:23:e8:6c:
         aa:41:4e:74:e1:20:62:df:7f:1f:aa:19:83:f7:7b:64:98:ca:
         ce:87:e8:ac:0b:95:91:ce:be:9d:0a:8e:b9:f8:6f:84:11:d2:
         6b:2a:d4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:24:14 2025 by rpki-client