Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2fe86b72-05fb-3e1b-8c1e-73132714ff6d.roa
File:                     2fe86b72-05fb-3e1b-8c1e-73132714ff6d.roa (raw, json)
Hash identifier:          3lpY6ijAYWr2uCxWyKP2I8XU8fMCGnVFNkAylOxZ+f4=
Subject key identifier:   37:3E:12:59:37:12:73:3B:77:19:F1:67:0F:DA:89:0D:09:BB:AA:DA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285846E26AC729B54F78CAE46C8900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2fe86b72-05fb-3e1b-8c1e-73132714ff6d.roa
Signing time:             Thu 15 Aug 2024 13:00:40 +0000
ROA not before:           Thu 15 Aug 2024 13:00:40 +0000
ROA not after:            Wed 13 Nov 2024 14:00:40 +0000
asID:                     263476
IP address blocks:        108.165.164.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e2:6a:c7:29:b5:4f:78:ca:e4:6c:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 15 13:00:40 2024 GMT
            Not After : Nov 13 14:00:40 2024 GMT
        Subject: CN=46c361e9-9d55-41cb-a8a7-f7e1382ec3d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:29:ce:3f:60:99:6b:c5:57:57:32:85:47:a8:
                    a5:f5:2a:ea:85:33:2f:5f:87:9b:99:01:52:16:cb:
                    84:3e:49:df:51:e1:50:d8:a6:0c:48:b2:26:7e:13:
                    15:e6:d8:0a:54:0f:77:be:46:d2:8f:ef:35:ed:15:
                    99:cd:16:18:7e:b2:d5:bf:a7:29:43:98:c4:11:dc:
                    d5:8d:e0:4b:ef:c4:b2:f7:42:da:fa:6a:cb:0a:b5:
                    14:c3:2c:11:b0:a0:04:3c:69:1a:1c:33:9a:86:94:
                    40:6c:cf:73:2f:7a:c1:2d:30:03:29:62:91:5c:f6:
                    62:49:d2:25:ef:4b:43:7f:54:88:14:82:76:ba:fb:
                    e1:41:97:98:4c:ca:0b:2f:62:61:2f:e8:61:ee:49:
                    88:b6:be:04:34:67:e1:92:d0:4c:c0:7a:cd:ca:ae:
                    61:88:0f:4b:a1:db:8c:67:78:23:26:23:23:3d:38:
                    a9:6a:19:3b:3b:83:dd:8b:3c:0a:5c:f0:58:4e:f7:
                    e5:31:02:e8:e0:f1:70:8d:c1:8d:ef:10:74:a8:59:
                    93:83:2c:61:24:13:9e:a4:74:67:4b:ff:cd:75:f8:
                    96:cc:d3:e4:ab:d2:3d:0a:8e:f7:56:c8:b8:f3:0f:
                    61:b5:3a:73:7d:0d:8e:aa:11:f6:50:46:69:ad:cd:
                    72:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3E:12:59:37:12:73:3B:77:19:F1:67:0F:DA:89:0D:09:BB:AA:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2fe86b72-05fb-3e1b-8c1e-73132714ff6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:fb:49:ce:e0:3f:a8:8f:fd:77:95:3e:40:7b:7b:24:d1:f4:
         ff:ad:e6:2c:da:ea:94:7c:72:07:7d:bd:1e:b3:25:ca:bd:9c:
         b6:00:b3:b9:55:21:33:73:83:fd:58:45:1a:4e:59:d6:58:15:
         48:57:c7:11:85:b3:71:4a:82:0b:60:d6:29:0d:84:cd:1b:21:
         73:77:5d:d9:9c:fc:70:65:f0:2a:0f:26:70:45:30:4a:6b:32:
         47:c3:81:14:6f:f8:28:c6:3d:73:67:26:ca:aa:08:f3:9c:74:
         ec:d1:5e:98:95:dd:e2:44:e3:c5:0e:bf:ef:2c:b9:e9:26:d4:
         51:c4:6d:d7:96:6d:d7:f0:ff:fc:84:99:b4:c3:38:3e:1a:c4:
         be:c3:77:e1:d1:58:76:d0:4d:fb:25:c9:73:a4:e4:eb:05:c0:
         4f:ab:ef:40:8f:9b:a0:18:f4:c1:ef:6e:44:c7:48:b0:92:49:
         a9:f5:f4:65:b7:29:71:e6:ea:11:35:e6:83:c7:85:cb:a1:83:
         7e:d5:9c:0e:30:59:6b:4f:ad:1d:11:26:54:5e:52:08:f0:52:
         84:36:8a:27:d5:92:ae:c0:7c:dd:61:96:51:1d:70:a4:a6:46:
         9b:d2:1d:4a:2a:1f:02:8b:48:34:12:df:a8:f8:a7:d7:a9:c9:
         45:37:a9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:36:01 2025 by rpki-client