Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/51828595-6c75-3e29-b047-68b27acef3a6.roa
File:                     51828595-6c75-3e29-b047-68b27acef3a6.roa (raw, json)
Hash identifier:          wUP09LOOkcB/VJor1HxBihSlrIC5i1DRpDxlXex/Wis=
Subject key identifier:   28:A6:8E:28:8B:74:E3:47:6D:9A:71:08:6E:9C:63:39:35:FD:D9:3C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583F92C5056960D95DF7F2C55220
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/51828595-6c75-3e29-b047-68b27acef3a6.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Thu 16 Jan 2025 05:00:00 +0000
asID:                     142430
IP address blocks:        166.0.220.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:92:c5:05:69:60:d9:5d:f7:f2:c5:52:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jan 16 05:00:00 2025 GMT
        Subject: CN=4f8a0bdb-a5de-4459-9663-d8787220e5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:76:f0:09:29:13:a6:c7:14:7c:62:b4:b7:54:
                    10:0d:83:ac:3b:dd:b2:13:90:50:31:7d:e2:43:2c:
                    ab:8b:04:c0:10:36:97:d3:8f:16:97:0c:b3:16:3e:
                    c0:6c:5c:3c:77:6f:86:1f:7d:9d:60:fd:cc:d7:13:
                    15:09:f1:97:82:9e:ef:57:9b:8b:c5:8d:63:2e:32:
                    ce:14:5c:a9:71:e2:f2:a8:ce:1d:17:f9:bd:b1:aa:
                    f5:21:88:01:fe:8f:d7:17:1f:3a:35:62:e3:aa:7a:
                    34:67:6e:da:ee:40:ed:b5:1f:d9:1f:2b:34:b3:66:
                    05:46:00:d0:25:ea:2c:22:fd:e6:c0:37:f3:f0:94:
                    2c:37:48:9c:94:e9:32:f4:87:5d:9a:3f:17:63:b7:
                    08:0e:b9:a2:b6:2e:8f:fd:7b:e3:d3:42:e7:1c:cc:
                    04:ae:db:c8:e8:79:b1:32:35:2f:f6:4d:bd:85:f2:
                    f6:11:b4:8b:02:6a:fa:da:ed:11:e4:b3:9b:d6:72:
                    7f:f8:2a:de:63:47:c7:44:14:83:9c:a0:75:06:19:
                    7d:fc:40:98:f8:63:56:ab:94:92:91:7e:c3:33:d0:
                    19:7f:93:f9:d5:57:0f:c7:69:12:83:ae:e7:e5:a9:
                    8e:89:a1:08:a7:e5:57:13:ef:24:86:63:27:c0:c0:
                    1c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A6:8E:28:8B:74:E3:47:6D:9A:71:08:6E:9C:63:39:35:FD:D9:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/51828595-6c75-3e29-b047-68b27acef3a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:14:cb:82:57:5f:b2:47:7f:82:b9:f1:75:59:b1:30:79:3c:
         2a:3b:e4:0f:2d:06:08:7e:2b:f4:bf:a2:fd:9a:6c:59:a4:42:
         ca:76:53:ee:5b:41:b5:0a:50:de:ca:03:57:8a:62:b1:70:17:
         19:61:fc:e6:18:04:f3:eb:46:a0:15:d2:61:3c:4b:99:7e:08:
         e5:a4:64:92:b0:f1:19:82:87:f5:57:22:b8:3a:37:e0:0a:8b:
         cc:02:99:88:d3:e5:d9:f7:21:12:cd:19:a4:5a:02:f2:2f:c3:
         3f:bb:98:50:2d:15:92:91:4c:a6:58:1e:89:f8:14:5c:4e:90:
         4e:06:0f:9c:69:4d:c8:e8:f1:ca:84:41:7a:b9:98:70:fc:7f:
         98:ee:79:74:53:a2:18:b2:c3:b9:8e:86:a1:cf:99:b9:92:e8:
         07:46:19:ca:35:62:e3:c8:4d:88:cc:ca:f8:bf:b2:51:14:e4:
         b5:f0:61:74:72:2f:80:3e:2d:0a:60:55:ee:57:a7:fc:5e:ca:
         eb:c7:3e:6f:1f:51:e3:b1:f2:da:e4:bd:b9:f9:d8:af:9f:cd:
         39:3f:84:bf:db:36:5b:6e:f3:27:a4:7c:e2:15:cf:3c:31:1f:
         41:b3:51:cb:2b:65:7e:10:4c:75:aa:b5:32:d9:59:e0:4e:1e:
         ee:86:e1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:59:52 2025 by rpki-client