Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/27002b8b-69e4-398b-901f-7231ae453f5e.roa
File:                     27002b8b-69e4-398b-901f-7231ae453f5e.roa (raw, json)
Hash identifier:          yn9bllNoRVCgEKo86thdrOQPkJriok0PjVTxql9HmvQ=
Subject key identifier:   09:2B:CD:F9:BF:E7:97:93:9E:04:5C:2D:56:50:3D:EA:4C:7C:81:73
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858479C1122470F0FAC8797507FC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/27002b8b-69e4-398b-901f-7231ae453f5e.roa
Signing time:             Mon 21 Oct 2024 01:00:31 +0000
ROA not before:           Mon 21 Oct 2024 01:00:31 +0000
ROA not after:            Sun 19 Jan 2025 02:00:31 +0000
asID:                     834
IP address blocks:        166.0.78.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9c:11:22:47:0f:0f:ac:87:97:50:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 21 01:00:31 2024 GMT
            Not After : Jan 19 02:00:31 2025 GMT
        Subject: CN=5eb9fef9-3483-43b0-94ea-fd64667d24cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6e:eb:c1:65:3b:3c:fa:91:58:f4:83:64:b8:
                    81:d0:b5:99:5c:ab:12:cc:85:8a:36:8b:7f:18:66:
                    4d:e0:99:63:4c:6e:ac:e9:2f:14:28:fd:d7:d1:c4:
                    19:12:a2:c8:6f:d4:f9:d5:95:26:c2:c8:df:de:5e:
                    15:6b:8c:c3:59:e2:0b:41:e5:ee:b6:47:b5:31:8b:
                    4b:79:99:27:ea:be:62:f2:75:88:3c:3f:42:77:7b:
                    64:2c:d0:f0:78:99:60:74:11:e4:72:e1:dd:60:5d:
                    d0:46:a3:4f:e2:1b:fc:87:63:a2:d9:3a:ef:23:67:
                    6d:f8:82:57:02:2e:51:20:61:c6:c7:9b:37:19:60:
                    07:a2:5c:18:72:c8:17:06:77:98:87:e0:09:7a:82:
                    61:e4:e6:55:77:27:76:70:93:17:a2:cb:03:dc:1b:
                    27:70:18:96:14:47:da:a4:18:59:6b:a1:1c:bc:c5:
                    5d:c2:0b:d6:d8:3d:90:42:31:9d:d8:d3:7b:eb:00:
                    ee:79:1d:a3:6c:d0:c8:e2:9f:2a:91:36:15:dd:e6:
                    14:7a:36:9a:f3:b6:43:fc:a7:5f:6d:56:05:4c:d1:
                    82:38:ae:25:f6:54:ee:4c:cf:79:39:42:4a:e2:cf:
                    8f:c2:23:d4:4c:4f:68:9d:7a:4c:7a:c1:e4:ea:dd:
                    03:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2B:CD:F9:BF:E7:97:93:9E:04:5C:2D:56:50:3D:EA:4C:7C:81:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/27002b8b-69e4-398b-901f-7231ae453f5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ff:82:24:bb:03:3e:45:a6:a3:99:e7:59:1a:1b:71:ca:ca:
         99:85:d8:b1:d4:9b:1b:6d:c1:17:55:90:43:5f:f3:06:a3:d9:
         ad:6c:f2:9d:9b:a8:f7:d3:df:3b:f9:75:8f:a0:08:25:68:5d:
         dd:79:58:6a:c5:0a:a5:00:da:3c:af:3b:2f:21:ee:76:34:d9:
         75:b1:6f:e6:02:d1:ec:29:cc:8a:20:56:20:31:b3:4b:6f:03:
         7a:9a:88:5e:fe:4c:5c:13:6c:8c:9c:0d:be:41:09:9d:3c:29:
         8a:e7:8b:b4:12:31:49:8e:12:09:63:f2:4c:ec:c9:8f:5f:d4:
         4f:2d:12:67:2c:99:e0:82:41:6d:ff:68:ed:64:34:74:d7:56:
         b1:3c:62:f7:14:f8:20:45:9e:c5:1d:33:6e:94:99:bd:16:f5:
         2f:89:b4:f9:25:b3:2c:f1:9b:91:53:8d:91:e6:bb:a2:ec:47:
         b4:16:db:4b:4e:64:86:86:a1:c7:87:1f:cf:33:b3:a2:dd:9a:
         98:cc:d7:63:4e:80:0a:b4:6b:c4:5f:93:36:fd:d5:13:81:ee:
         68:1f:69:43:00:15:26:1c:e4:92:30:1c:06:36:9a:55:40:5f:
         db:77:2c:09:35:dc:df:88:77:70:2d:f5:e8:8e:7b:e9:42:2b:
         7e:33:61:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:16:47 2025 by rpki-client