Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/419a5a7f-1147-3b2e-8042-e203282c8d0d.roa
File:                     419a5a7f-1147-3b2e-8042-e203282c8d0d.roa (raw, json)
Hash identifier:          iQRMDENuZnrNhYHfXTxMEX4GGLAtPvo1RFoqqX17ctU=
Subject key identifier:   32:1D:32:14:16:55:AF:08:C9:81:D0:4F:88:02:36:17:68:AB:5D:EB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584311D7AF64B2A5CABE2A580900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/419a5a7f-1147-3b2e-8042-e203282c8d0d.roa
Signing time:             Thu 31 Aug 2023 17:35:31 +0000
ROA not before:           Thu 31 Aug 2023 17:35:31 +0000
ROA not after:            Wed 29 Nov 2023 18:35:31 +0000
asID:                     147291
IP address blocks:        166.0.252.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:11:d7:af:64:b2:a5:ca:be:2a:58:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 31 17:35:31 2023 GMT
            Not After : Nov 29 18:35:31 2023 GMT
        Subject: CN=32192c69-b589-484e-9752-3c5ebecd30b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4e:e3:48:85:4d:51:81:f5:37:30:ab:07:b6:
                    54:39:34:e8:8e:e0:ad:80:4f:49:c4:ec:76:ce:63:
                    ff:c5:b7:dc:95:b0:c6:05:1c:91:3a:34:bc:96:38:
                    ef:b1:0f:09:2e:2d:78:0c:d6:3c:51:df:69:80:1f:
                    05:39:b0:ae:24:c0:0b:c1:be:f9:78:87:01:dd:df:
                    9f:d3:d1:b8:12:45:07:56:22:05:5a:a7:5c:02:9c:
                    f2:6d:87:b7:4e:2b:12:8b:a9:f2:ee:96:de:d3:7e:
                    5b:e4:c0:d4:fb:83:24:c3:60:52:c7:2f:aa:b5:c4:
                    8e:57:bc:53:b2:f3:bd:aa:27:8c:9d:a5:25:ac:69:
                    ee:8a:15:63:86:8c:19:23:a0:33:6e:70:a1:d9:43:
                    69:70:f3:19:05:61:cb:05:5a:c1:4a:09:e3:03:f3:
                    5b:ca:6d:78:a1:74:64:39:05:d9:74:20:67:5f:73:
                    11:bb:4d:29:d9:3e:9b:cd:e8:f4:0b:6c:b8:f0:a0:
                    c7:98:ce:9a:50:d4:97:92:95:56:a9:41:5c:4e:83:
                    70:fe:f6:67:ac:f0:b7:cb:73:3e:4b:e2:3d:f7:cc:
                    91:ad:3e:65:a7:01:b2:5b:60:e8:24:27:b4:34:3b:
                    45:c6:52:db:f5:4a:1e:cf:8a:39:4f:2e:3f:8a:11:
                    8d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1D:32:14:16:55:AF:08:C9:81:D0:4F:88:02:36:17:68:AB:5D:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/419a5a7f-1147-3b2e-8042-e203282c8d0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:79:2c:d3:5c:c0:42:76:e7:42:b0:c5:10:15:e8:af:c4:90:
         4c:40:84:1e:4d:9c:0b:d5:ce:61:16:19:20:92:3f:0d:de:dd:
         84:9f:90:db:90:22:b5:92:08:f4:21:ed:0f:d8:9e:15:b8:d7:
         17:e5:5f:cd:e3:9f:91:45:56:82:55:ca:28:72:1d:0d:dc:c2:
         ed:39:dc:9f:4e:47:37:2c:21:44:6b:45:9d:5a:55:6c:8e:0b:
         9f:37:07:89:3f:07:58:46:e6:52:c3:ed:a2:a4:a0:3d:1c:cd:
         99:62:d2:f4:a8:8d:aa:1d:cc:28:84:56:ed:97:33:1f:56:8a:
         58:56:d4:53:ce:ac:be:b6:bc:1d:6e:59:21:8f:82:02:b0:a7:
         70:30:78:f5:2b:22:90:3a:42:2e:64:24:1b:6d:44:03:68:26:
         ad:f1:90:6c:e6:81:98:70:75:5c:20:4d:69:8b:6c:e4:de:44:
         d1:a1:a2:7b:f5:5c:b5:28:fa:8c:e5:b6:30:22:fe:ad:72:c7:
         2e:a1:6d:8e:16:cf:48:af:87:3a:4f:fb:03:29:08:e4:b6:bc:
         a3:e6:31:62:50:3c:04:f5:6c:3c:56:f8:33:2d:86:9b:c5:42:
         0d:eb:8d:4f:17:a9:95:63:c3:07:20:73:32:63:26:73:e1:b5:
         92:b5:98:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:47:19 2025 by rpki-client