Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/114f0319-f749-3784-83e1-cc32070d752a.roa
File:                     114f0319-f749-3784-83e1-cc32070d752a.roa (raw, json)
Hash identifier:          /N2ecXu6vb23jsKxFhdPk+9TRn0M0ScSNqcXIAo9nr0=
Subject key identifier:   6E:CA:55:75:6E:76:8B:0F:0A:9F:6B:E7:29:64:14:1C:D1:EF:F6:B4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446E4D0CEC8F81824A25E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/114f0319-f749-3784-83e1-cc32070d752a.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Tue 08 Aug 2023 01:51:51 +0000
asID:                     834
IP address blocks:        166.0.98.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:e4:d0:ce:c8:f8:18:24:a2:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug  8 01:51:51 2023 GMT
        Subject: CN=eb1f730d-d133-4d71-99f1-40df5c7a0f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bb:fc:be:08:66:2a:86:60:3a:91:6b:ed:cb:
                    25:d7:05:bc:7e:86:e3:88:7d:17:08:b6:d8:ea:26:
                    ad:fc:c8:93:30:a5:10:1c:8d:a1:62:7f:53:bd:a7:
                    e1:69:3a:14:c7:47:4c:49:6c:54:53:91:15:9e:be:
                    ad:3e:da:46:9f:b6:ef:ee:4a:dd:36:07:ed:32:50:
                    94:73:3e:56:e7:69:68:23:ed:d9:e3:36:04:28:c6:
                    8d:29:57:79:7e:75:f9:69:e8:ff:81:bd:62:be:4d:
                    51:d0:81:62:b5:25:a1:19:83:4a:bf:17:3c:bf:9e:
                    b6:27:b5:be:dc:de:98:f4:03:70:a8:36:73:8e:91:
                    3e:6c:13:97:3d:a5:2a:6a:0b:1f:43:7c:2f:30:ec:
                    d4:5f:2b:06:e0:b4:fe:e8:e9:a1:0e:5c:a7:9d:f8:
                    ee:d6:3a:51:b8:e9:6a:b5:56:11:13:d8:09:71:20:
                    38:9a:7c:3b:b4:44:9b:61:fb:d9:c8:d3:b8:c6:0f:
                    5f:81:6d:59:c5:f3:21:41:e7:f6:67:ee:7b:16:ec:
                    7e:5a:54:82:39:df:6a:ae:5b:51:85:ea:f3:d0:be:
                    41:cc:50:3a:6d:18:33:07:43:07:d7:ef:2e:34:82:
                    76:f3:be:36:98:ee:2e:5c:5a:c1:32:fa:ff:bb:6d:
                    9d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CA:55:75:6E:76:8B:0F:0A:9F:6B:E7:29:64:14:1C:D1:EF:F6:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/114f0319-f749-3784-83e1-cc32070d752a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:47:34:25:f7:1e:ee:0a:9f:24:21:4e:7c:c9:83:4a:3d:88:
         8b:4f:4f:b7:ea:65:25:aa:77:c0:da:1f:93:86:2d:53:ff:5f:
         e9:90:bc:ee:ec:64:ff:81:09:21:37:78:f6:b4:ee:d7:72:8b:
         70:08:a7:8d:1e:ab:b9:f8:43:15:e0:d6:2f:f3:84:eb:f1:cb:
         9c:b7:06:e4:8c:df:ac:71:6a:53:88:fa:0d:5a:93:cd:18:1d:
         59:e4:90:2f:fd:1f:d4:9e:e2:74:a5:ad:4c:93:07:72:f1:10:
         52:3e:8c:e2:38:4f:81:6c:85:5f:33:71:36:25:55:da:09:c6:
         b9:99:1f:a7:ad:1e:ca:bc:32:dc:ea:e2:45:1c:48:e5:23:01:
         b6:13:c2:ff:41:42:a0:e3:f9:f8:d3:56:e9:d5:02:cd:3a:57:
         f6:59:05:c1:d8:70:a7:af:6b:08:79:f9:03:55:9d:bc:34:78:
         f7:67:c7:6d:a0:40:75:ac:ff:87:c7:92:5f:e5:92:76:a0:85:
         87:7f:f6:0b:13:9c:42:27:15:c9:79:db:7a:1a:73:d0:c6:1e:
         00:8a:e8:fc:e9:f9:0c:1b:45:07:93:53:9c:27:39:c8:28:fb:
         15:68:75:30:ff:fe:f1:7b:2c:68:a3:48:f9:25:93:78:b5:3e:
         c6:65:4b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:43:24 2025 by rpki-client