Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3017f5b6-83b2-364c-9f93-479259c8a430.roa
File:                     3017f5b6-83b2-364c-9f93-479259c8a430.roa (raw, json)
Hash identifier:          y6/DJzq5k5c2EjpdTtFfNhAbCz7cQxMyNlDG64HlU8E=
Subject key identifier:   9C:6C:2B:A7:17:01:D7:3D:7A:36:BC:B6:15:0C:5D:2F:D1:4E:38:18
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584055D8386F8D056317800D0B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3017f5b6-83b2-364c-9f93-479259c8a430.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Thu 27 Mar 2025 04:00:00 +0000
asID:                     206092
IP address blocks:        166.0.137.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:55:d8:38:6f:8d:05:63:17:80:0d:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Mar 27 04:00:00 2025 GMT
        Subject: CN=be6f1524-7457-411e-9402-3e7a5354a4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:89:d1:5b:3f:09:88:94:d0:31:fe:52:40:6b:
                    c1:c3:71:71:a9:55:25:35:60:75:62:2c:6d:68:f0:
                    ae:64:10:e6:9f:69:20:e9:bc:c1:8d:20:d6:a5:9c:
                    29:13:dc:d2:d7:1a:4c:17:66:85:4b:2f:43:bf:9e:
                    3f:cc:3a:60:47:06:94:eb:6d:09:3e:fd:13:cc:74:
                    67:11:c5:c3:ef:f7:d5:eb:c2:c9:a8:90:3e:3a:4b:
                    64:ff:e2:68:6e:4a:69:fc:72:6d:a7:95:ba:f7:70:
                    2c:ef:51:63:19:29:0e:23:07:3b:9a:fd:18:c7:21:
                    d8:d9:74:e5:5b:76:f1:00:ad:73:5f:11:a9:aa:f4:
                    6d:8a:a3:a6:be:ef:9c:59:af:96:df:cc:33:a4:6a:
                    91:7f:c4:35:6e:8f:ef:98:0f:17:1d:4d:f9:58:74:
                    1b:d8:5a:13:f9:ed:63:61:fb:0b:ca:75:fa:0a:f7:
                    96:18:be:32:90:e5:4a:45:e2:a3:05:ec:cb:c4:c4:
                    a8:1d:23:62:5a:f0:bf:85:b7:b1:45:9f:5e:cd:e4:
                    b9:45:9c:bf:6d:93:ae:c3:9e:cb:92:9f:98:64:65:
                    e1:07:e8:ea:08:86:f3:a7:47:72:6d:b4:67:87:95:
                    06:e7:2f:8c:8e:03:2c:40:94:2f:20:3d:3d:88:42:
                    77:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6C:2B:A7:17:01:D7:3D:7A:36:BC:B6:15:0C:5D:2F:D1:4E:38:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3017f5b6-83b2-364c-9f93-479259c8a430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:d3:c6:ed:65:54:fb:af:6c:d4:08:3b:18:6b:49:88:84:96:
         15:56:e4:31:ae:27:af:83:d3:b1:d2:bf:b8:f1:d1:77:5c:68:
         55:22:dd:91:2a:b2:94:83:8e:ee:a8:0c:28:be:10:37:1f:95:
         c4:4e:15:92:8e:55:a8:55:c4:e5:81:7c:10:d9:ab:33:19:91:
         50:d0:ac:43:86:29:de:17:bf:00:e5:52:57:61:a4:38:c9:23:
         d4:bb:7b:b7:be:fe:42:71:dd:1c:bb:6a:32:c5:45:4f:aa:46:
         7e:f0:f8:c9:ee:f3:d1:5d:c4:ec:52:5b:33:b8:3f:e4:af:6a:
         3e:9f:6c:56:38:78:3c:04:25:38:5c:4c:a2:ca:9e:d3:0d:e1:
         ad:b2:e9:95:ac:80:8d:64:a0:5c:65:c3:9a:33:35:a0:2e:08:
         91:e1:d0:80:58:bf:3d:cf:dd:6a:25:25:78:b9:f3:a0:3b:69:
         28:14:5b:10:ba:94:a3:86:32:83:06:4a:9e:66:bd:b5:7d:4b:
         34:2b:2c:af:e6:62:e2:d5:9e:f4:59:9d:ff:8f:fc:41:b3:b2:
         5c:94:d9:09:76:3f:32:69:bb:d4:87:a9:9d:65:14:18:a5:f4:
         0c:f6:6a:2d:79:77:3d:e6:21:9b:86:2c:a8:9c:c5:02:ed:a1:
         83:97:f1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:34:47 2025 by rpki-client