Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0913f61d-ef7e-3a8e-b391-f3c47f5b8a18.roa
File:                     0913f61d-ef7e-3a8e-b391-f3c47f5b8a18.roa (raw, json)
Hash identifier:          anf/0mLHKv3Rkad/y1+2bk8EIk85PlZVB8OWdYl0JDI=
Subject key identifier:   63:A6:90:85:35:F8:62:3D:FC:E3:B6:3E:D2:C7:1E:DF:12:63:95:D1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584341896EDC4DB7EFB1148BEC00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0913f61d-ef7e-3a8e-b391-f3c47f5b8a18.roa
Signing time:             Sun 17 Sep 2023 19:36:39 +0000
ROA not before:           Sun 17 Sep 2023 19:36:39 +0000
ROA not after:            Sat 16 Dec 2023 20:36:39 +0000
asID:                     834
IP address blocks:        108.165.73.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:41:89:6e:dc:4d:b7:ef:b1:14:8b:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 17 19:36:39 2023 GMT
            Not After : Dec 16 20:36:39 2023 GMT
        Subject: CN=6555860b-fc12-422c-bab5-f45d75812020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:90:95:ee:c0:3a:af:0a:f1:a6:6e:6a:8d:69:
                    15:15:8a:52:21:88:b5:bd:ff:ca:65:05:db:3c:2a:
                    e0:75:51:88:02:93:c0:5c:fd:6e:f5:12:eb:62:94:
                    c4:7e:2e:75:7f:2f:b3:ec:f2:bb:4f:cb:e9:26:4d:
                    3d:fc:96:98:a1:72:db:62:98:65:c5:3f:03:73:1e:
                    ba:88:a4:52:dc:67:99:ef:05:05:c6:34:31:60:aa:
                    e1:ca:21:53:bb:f7:e3:3d:69:76:f5:d7:4b:22:9f:
                    ea:88:16:3b:a4:e0:d4:d3:65:81:98:da:df:cf:d6:
                    2c:19:39:c8:c7:28:c5:95:07:90:1e:86:21:06:76:
                    db:6d:81:39:70:67:f0:e0:0b:f2:8d:0c:00:d2:1d:
                    f5:e3:c3:28:68:f8:9a:c8:71:ea:9d:5b:94:a9:3d:
                    4f:d4:5c:b6:86:b6:38:cb:c0:66:2d:0a:c2:7d:29:
                    a2:00:84:a6:72:02:75:9c:6d:00:e6:d3:e2:16:4b:
                    8f:bd:77:8b:cd:d1:7b:e2:4f:cb:2b:fe:cf:fe:b1:
                    fe:10:a4:a1:86:48:77:f0:44:93:7f:14:c9:7b:b5:
                    2d:2d:4f:ff:1d:ef:a5:b5:a5:99:5d:5d:6b:b5:9a:
                    01:ba:f5:bb:48:f2:66:72:83:e1:70:5d:9d:71:8f:
                    d4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A6:90:85:35:F8:62:3D:FC:E3:B6:3E:D2:C7:1E:DF:12:63:95:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0913f61d-ef7e-3a8e-b391-f3c47f5b8a18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:23:80:42:63:ab:ec:8f:98:04:12:49:5e:fc:62:4c:66:3d:
         18:b3:04:d0:55:72:51:76:76:e2:31:ae:81:b6:21:87:45:90:
         12:3d:78:4d:c5:ac:68:c4:0a:53:56:f2:df:1e:b6:24:a4:d5:
         1c:40:16:c5:3a:ed:01:5d:40:aa:22:94:da:4b:9c:00:ee:98:
         0f:5b:2e:5c:3e:cc:1d:36:a2:fb:10:d2:68:4b:31:a2:7f:6f:
         9c:aa:b1:67:86:da:15:c8:da:ec:ac:d4:89:d8:b9:d7:81:36:
         cf:44:76:f2:0c:53:0d:cd:60:f0:a8:62:bd:0b:d0:09:c1:10:
         58:aa:a4:13:f1:6d:c0:58:b7:d3:22:c0:e0:45:5c:54:b0:b6:
         6b:54:59:76:35:cc:4b:41:39:b7:cb:e9:93:bd:01:6f:76:f1:
         92:44:91:60:b9:ca:24:c2:d0:51:7f:e7:03:e5:04:90:fe:fd:
         e5:3e:db:5f:b4:22:e3:1e:da:73:39:a8:88:69:ac:e4:a2:50:
         cd:82:ab:f6:5b:39:71:26:a9:eb:2f:f8:b6:8f:3c:cd:f7:9f:
         e0:c2:38:ea:9a:57:70:24:d3:18:03:53:b0:44:8d:16:18:d0:
         b5:e8:bf:4c:bd:93:0d:03:93:49:0e:59:a4:c5:dd:da:41:ca:
         2c:1b:5f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:03 2025 by rpki-client