Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/54745dc2-d615-3bb1-ac6b-aed3937749ef.roa
File:                     54745dc2-d615-3bb1-ac6b-aed3937749ef.roa (raw, json)
Hash identifier:          ik5FnVtTFGvd03ZSkXIHHJOb33UrQ4Vcqjk5gkh59Kw=
Subject key identifier:   74:CE:F4:2D:6A:37:A6:25:12:E3:BE:4F:B2:91:E2:F6:16:94:85:F2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584246021B6CFFEDC3035530ACC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/54745dc2-d615-3bb1-ac6b-aed3937749ef.roa
Signing time:             Mon 19 Jun 2023 17:16:06 +0000
ROA not before:           Mon 19 Jun 2023 17:16:06 +0000
ROA not after:            Sun 17 Sep 2023 17:16:06 +0000
asID:                     207633
IP address blocks:        166.1.202.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:46:02:1b:6c:ff:ed:c3:03:55:30:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 19 17:16:06 2023 GMT
            Not After : Sep 17 17:16:06 2023 GMT
        Subject: CN=729ed18a-645c-4bd1-8931-b8023bce5bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:98:ff:dc:ad:1e:07:3a:90:ca:f6:55:2c:b0:
                    2d:a6:12:95:de:c7:52:51:cb:3c:36:95:a3:ab:9b:
                    43:10:3a:41:5a:16:01:aa:fb:21:e7:93:ad:91:96:
                    7a:af:8a:86:58:89:53:d5:07:82:19:d8:65:43:86:
                    34:89:9e:1e:df:69:29:51:e4:c5:f2:18:d8:1c:64:
                    d3:b0:d7:9b:45:6e:79:5b:71:b5:cb:15:67:06:ff:
                    60:f0:12:ff:73:cd:3a:53:6f:a9:54:a3:6b:3a:c8:
                    e6:a6:eb:38:0f:8b:26:4c:42:58:90:06:35:cf:c8:
                    8c:ec:2e:64:2f:f0:c7:0f:23:98:b5:15:7e:64:74:
                    b5:96:5f:bf:0f:55:3f:c7:3d:08:59:1b:38:04:e6:
                    a3:b9:aa:ce:29:b0:67:e5:0d:cf:77:12:2e:55:2b:
                    8b:22:7a:0a:7f:19:77:97:a7:ad:77:5a:20:d2:10:
                    8a:b8:dd:bf:92:79:d1:6d:25:cb:b8:ee:d8:66:10:
                    86:a3:2e:d1:3a:af:37:5f:93:49:5e:e5:a9:33:e8:
                    fb:86:1c:28:83:02:c4:c5:8b:f1:bf:36:83:13:62:
                    2d:89:6c:9e:18:0b:a1:a4:ef:c8:f8:47:46:c4:70:
                    ef:69:b9:8e:73:43:69:9b:21:fd:8d:b6:27:da:32:
                    17:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CE:F4:2D:6A:37:A6:25:12:E3:BE:4F:B2:91:E2:F6:16:94:85:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/54745dc2-d615-3bb1-ac6b-aed3937749ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:69:02:65:cd:bd:4e:a4:b4:29:27:7b:c4:c7:0b:8f:91:7e:
         2e:28:80:1a:89:37:9f:7d:02:36:a6:ce:3b:8b:cf:4c:21:18:
         f3:c5:18:20:59:94:62:25:13:cd:ab:82:2b:e3:67:41:b4:83:
         80:5a:6e:49:30:6d:a9:a9:7f:0c:a4:54:f6:ab:ab:ae:ed:1f:
         59:27:10:5e:16:ee:76:c7:40:b4:af:57:5b:4d:90:9a:6d:22:
         53:a1:f8:2c:2d:28:42:1a:6e:16:b1:0e:99:b6:53:ca:c9:61:
         af:df:a7:dd:7d:19:96:6e:b0:55:f9:93:60:f5:14:cf:85:1c:
         0a:30:68:05:b2:5e:56:1e:0e:18:f9:42:14:da:8e:b5:e5:c8:
         1b:46:a7:09:86:9c:5b:54:93:7a:67:43:ac:cd:89:06:6d:32:
         2a:62:4e:21:9f:ce:e5:a4:7d:2a:c5:0f:cc:39:02:ae:38:4a:
         57:44:39:7d:18:50:51:36:bc:7b:44:5b:6b:93:80:c5:b6:5f:
         d7:fc:5f:d1:58:48:7a:43:06:3e:39:bd:70:40:0a:f3:bb:b2:
         bc:84:c4:d0:74:be:b8:2a:81:79:fc:7a:df:88:0f:72:3d:dd:
         4a:8e:38:62:29:6f:a5:08:b1:42:47:4f:f8:df:4b:91:07:c3:
         f7:38:a0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:47:54 2025 by rpki-client