Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1cf8b611-ff72-3182-b7c3-567a8ecf6786.roa
File:                     1cf8b611-ff72-3182-b7c3-567a8ecf6786.roa (raw, json)
Hash identifier:          JFOo2ZOp9Ldrm9Mfm4hpg6b7iPD5M6ifzgDwGPGVQVw=
Subject key identifier:   B1:A9:04:45:E1:95:AE:57:56:DF:C8:AE:04:98:98:F9:70:E5:06:91
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848A1933C725575173DA1352720
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1cf8b611-ff72-3182-b7c3-567a8ecf6786.roa
Signing time:             Wed 22 Jan 2025 17:08:42 +0000
ROA not before:           Wed 22 Jan 2025 17:08:42 +0000
ROA not after:            Tue 22 Apr 2025 16:08:42 +0000
asID:                     834
IP address blocks:        166.0.180.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:93:3c:72:55:75:17:3d:a1:35:27:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 22 17:08:42 2025 GMT
            Not After : Apr 22 16:08:42 2025 GMT
        Subject: CN=313fdac1-e9ee-4acd-b887-bf38186ff57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:50:3e:de:cc:66:1a:61:e4:1c:84:35:dc:4b:
                    71:16:6d:4e:98:58:9a:0c:0d:0f:73:d7:e8:fa:92:
                    40:c8:fa:19:91:e3:ca:9f:62:33:7d:64:1b:dc:03:
                    74:f7:ab:7e:6a:11:b7:14:bd:b7:7b:3c:5f:78:00:
                    33:8b:f5:46:90:7a:1e:c3:14:fe:f5:88:21:41:93:
                    f7:1f:49:95:92:80:6c:65:51:22:53:92:be:84:ed:
                    3c:4b:ea:6d:c8:98:86:00:1e:6a:4c:9d:d0:4c:7c:
                    38:83:f3:0b:25:8a:d8:c5:f4:49:14:c9:37:aa:60:
                    35:ef:da:6d:8b:a9:0c:b7:4a:03:49:cf:51:58:9b:
                    9a:de:c9:40:49:16:b9:fe:91:92:2c:b5:b0:32:4e:
                    82:38:5d:82:e3:5e:f1:67:61:5c:ed:23:01:ec:38:
                    87:10:00:94:4d:90:39:ce:e8:4e:8e:b1:56:40:48:
                    5e:0d:b0:69:b6:71:18:b6:e1:61:3f:bd:ed:8f:b1:
                    79:7e:11:16:50:3d:1f:01:15:df:80:8a:44:84:f5:
                    b9:b2:5c:e3:c2:97:b0:ed:f2:09:e3:ff:db:6a:6a:
                    c8:2f:54:ed:5c:43:fe:22:ca:a7:9e:5e:63:dc:f1:
                    d8:b9:74:a3:0a:d2:d7:8b:12:91:f5:9c:a0:b3:5d:
                    eb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A9:04:45:E1:95:AE:57:56:DF:C8:AE:04:98:98:F9:70:E5:06:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1cf8b611-ff72-3182-b7c3-567a8ecf6786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:c4:0c:74:0d:02:d4:b5:b1:7d:ab:10:1c:00:22:80:fb:4e:
         dd:85:60:9c:bc:da:6b:e8:7a:49:75:90:cb:d1:06:9c:0d:98:
         35:f6:81:02:74:da:e3:1e:8c:79:fc:e0:50:17:c5:93:22:a1:
         c2:ff:9c:dc:c7:cc:59:c5:a0:6b:4c:e5:da:bd:7d:9c:51:c8:
         bd:d1:64:7b:eb:ef:fd:63:9c:e4:b2:fb:ab:43:87:6d:bb:ab:
         41:51:85:e3:7f:d9:86:92:de:eb:bd:c7:52:6f:7f:a7:a4:0c:
         1e:3d:51:04:18:64:cd:cc:e4:b3:66:71:ee:a4:0e:3e:34:fd:
         14:62:c9:47:8e:42:75:ff:ba:6c:fd:bd:08:6c:71:e4:73:86:
         b4:80:9b:18:39:46:c3:c1:93:2d:d1:10:fd:e8:00:3a:1d:d8:
         98:0f:58:c7:d9:a4:ce:9e:38:6c:13:ad:33:37:e2:a1:d6:9b:
         5c:89:12:f3:52:8f:32:8d:d8:57:58:ad:cc:dd:55:26:fe:a4:
         c6:09:a7:85:d1:d7:9c:e3:45:a1:4b:80:ab:4c:16:0e:8a:8b:
         4e:68:b0:47:69:7e:2d:e6:9c:a2:0c:15:f3:9e:50:73:a6:99:
         da:ea:a0:42:62:c4:e3:3e:d1:51:aa:69:64:1f:eb:ae:59:4a:
         38:6b:b7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----