Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/392bb93f-0de7-3856-ab4a-111c44957dac.roa
File:                     392bb93f-0de7-3856-ab4a-111c44957dac.roa (raw, json)
Hash identifier:          BGa7IyR14Jre9/Ln1yfuS8GLkTFZPcQfCwETjyj1FFA=
Subject key identifier:   AC:D7:D6:61:20:FC:B8:01:26:B0:20:96:4D:11:C6:CD:E1:4F:D2:DE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583D210635C101BE897A0A683440
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/392bb93f-0de7-3856-ab4a-111c44957dac.roa
Signing time:             Tue 05 May 2020 04:00:00 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Thu 06 Jun 2024 04:00:00 +0000
asID:                     49999
IP address blocks:        166.0.164.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:21:06:35:c1:01:be:89:7a:0a:68:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : Jun  6 04:00:00 2024 GMT
        Subject: CN=01e99dad-9221-450d-917d-c1b5df9d1f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7b:84:a5:0a:c6:f6:87:30:5b:ed:d7:d8:ab:
                    6d:73:9e:83:fe:da:55:17:1f:f0:98:62:d3:eb:13:
                    39:8c:ff:99:ad:ec:fc:aa:eb:2f:72:be:aa:98:95:
                    b3:6b:5e:73:91:5b:6d:33:d9:38:7d:90:52:e3:40:
                    d0:8a:7b:92:d1:d4:df:ef:aa:89:f1:ea:ee:65:89:
                    99:5b:d3:66:7d:b5:80:c4:cc:4a:36:f0:c7:a1:a9:
                    d1:15:42:3d:4d:b4:3b:ca:5e:6a:3a:e2:57:f0:dd:
                    d4:d1:f6:8e:af:0a:bd:e1:e6:e9:0b:c9:49:f5:16:
                    3e:78:92:f6:e9:6e:71:ee:4a:2f:a2:4e:18:d6:a4:
                    fa:a1:9f:00:d0:f9:16:1c:5a:2b:2e:6f:86:d7:35:
                    46:c0:e4:eb:66:82:37:cd:1b:f3:53:f9:86:7b:4d:
                    e3:fb:3a:7b:df:f7:9f:78:7d:7b:11:9e:bd:0a:cd:
                    a2:52:f3:66:8a:f7:11:5b:f9:d7:c2:69:f2:28:d5:
                    b8:28:56:11:f0:30:20:8e:15:4d:ef:04:58:13:f3:
                    9f:1f:ad:01:89:36:8d:d9:d3:16:19:27:05:58:40:
                    e6:f4:d9:4d:da:f2:02:51:ff:e4:d8:9d:a5:94:2a:
                    cc:0b:ae:03:2b:45:04:fb:57:b0:fa:ff:0a:02:57:
                    e3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D7:D6:61:20:FC:B8:01:26:B0:20:96:4D:11:C6:CD:E1:4F:D2:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/392bb93f-0de7-3856-ab4a-111c44957dac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a4:52:bc:bc:94:3b:32:fe:e7:97:c5:cc:55:de:7d:69:33:
         6d:3c:b8:7a:8e:19:c0:9b:3e:4f:56:73:71:96:12:81:13:64:
         fd:54:04:0d:0e:97:0e:8b:5e:ac:88:8b:8d:78:9f:fc:8c:0e:
         13:5c:e1:28:b7:02:d0:36:1a:df:15:3f:47:b1:de:a2:6f:c0:
         85:d3:7d:7f:a4:fe:2a:7f:2d:63:85:22:44:e3:a8:37:ed:bb:
         09:b1:0a:98:ce:db:bd:e0:17:1a:51:c7:bb:d2:59:2a:a5:6b:
         e4:b5:c5:c7:d7:7f:be:b3:e3:11:3d:fc:04:77:c2:5e:7e:e8:
         27:c0:e2:ad:11:1c:2a:cd:f3:96:b2:0d:d6:52:43:5b:0d:fa:
         7c:34:a8:52:c3:0e:13:fa:4f:be:0d:06:cc:72:5b:09:eb:7d:
         a6:a9:d8:55:3f:93:36:e4:b6:62:50:e2:a8:37:47:31:b1:d9:
         3d:cb:a2:f2:aa:5f:1b:b7:8e:dc:af:20:66:5e:01:93:6c:1c:
         af:7f:a3:a0:43:5f:3a:39:6b:ea:48:27:49:62:b7:c8:06:89:
         8e:00:c9:3e:dc:bc:75:e1:1e:9f:b6:62:0c:49:02:2e:00:2e:
         dc:8d:2d:a7:ba:9f:b1:99:33:f4:68:68:ad:71:49:bd:7a:8f:
         ec:20:ad:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:40:00 2025 by rpki-client