Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5c082c03-40ee-3e46-9e97-e7f7e9899c59.roa
File:                     5c082c03-40ee-3e46-9e97-e7f7e9899c59.roa (raw, json)
Hash identifier:          clcVPo0Dbjhgwt1ujHZeKd3TnLOtP1D0WKA35BeW9V8=
Subject key identifier:   97:43:88:85:A0:B1:41:84:FF:A1:02:B6:A1:36:1F:E3:CD:8D:A6:55
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583FC18C63BEE7C995E21C8FF900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5c082c03-40ee-3e46-9e97-e7f7e9899c59.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sun 02 Feb 2025 05:00:00 +0000
asID:                     212669
IP address blocks:        166.0.163.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c1:8c:63:be:e7:c9:95:e2:1c:8f:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Feb  2 05:00:00 2025 GMT
        Subject: CN=251e9577-b9fc-4184-92cd-eaa86063f627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:19:9b:b8:f4:ae:ca:c1:98:b5:15:8d:a6:58:
                    32:4a:69:ae:a5:de:c2:e8:0d:50:de:91:8e:0d:48:
                    9d:88:b0:7b:b1:2a:0b:2d:1f:1c:35:63:9f:fb:40:
                    11:ea:d0:b0:b6:68:ca:72:df:98:f5:a6:5a:3b:4d:
                    34:51:2d:69:24:01:b8:fe:8c:d8:ac:1c:05:10:a2:
                    e7:94:2c:e7:e5:e7:0c:56:27:35:f1:69:7d:99:d3:
                    cf:d3:f2:55:86:a5:bd:e3:7f:95:d2:56:d6:ad:98:
                    df:50:35:a1:e8:d0:68:42:01:3a:69:d4:b8:05:91:
                    e8:10:f3:77:5c:6f:aa:0d:e4:dc:96:bc:85:08:51:
                    12:16:a1:1d:25:88:ec:7f:cf:86:75:0f:ae:89:75:
                    57:c6:95:7d:22:fb:73:5e:eb:bd:82:bc:da:b5:db:
                    1f:ed:06:d5:3b:35:a1:a6:5e:4c:57:2f:eb:87:4c:
                    d4:4d:28:06:6f:66:a3:8f:f1:ec:20:2e:6e:52:8a:
                    8f:99:3a:cd:90:f4:ec:89:97:f3:0c:d4:6e:67:cf:
                    21:06:66:94:51:f0:9c:a4:4b:c6:52:3d:d7:43:bc:
                    8c:92:da:70:d9:5e:6e:8f:bf:cc:2f:89:02:d5:bb:
                    9d:77:c0:08:39:f6:e0:cc:be:26:14:85:43:fc:0d:
                    a8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:43:88:85:A0:B1:41:84:FF:A1:02:B6:A1:36:1F:E3:CD:8D:A6:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5c082c03-40ee-3e46-9e97-e7f7e9899c59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:99:54:5f:ae:1a:39:f4:27:c5:e8:0b:47:cd:ca:d6:34:10:
         93:d9:4f:a5:21:f3:82:37:94:a2:38:52:90:e3:59:f6:f1:b6:
         0a:cc:46:58:a9:dd:43:71:54:58:ea:d5:6b:3c:4a:4f:f4:57:
         fc:4f:c8:e9:c5:d8:d3:38:68:18:b1:0e:b5:42:f2:4f:2a:b1:
         4a:6a:76:b1:d3:e7:c9:e2:5f:7b:71:c9:99:61:da:8c:cf:ef:
         39:2c:60:ef:41:97:4b:ca:3a:07:f7:b4:6c:b7:2d:5f:88:ad:
         64:ac:fc:c3:9e:db:d0:78:66:52:79:1c:56:59:92:33:70:7f:
         38:a6:c8:03:d5:ed:77:08:5a:fa:cb:3e:15:fc:79:c9:e3:a6:
         5e:c5:4e:69:81:24:5b:8b:b2:34:9c:17:15:cd:16:bd:2c:c2:
         9e:76:03:b3:bb:12:b9:96:48:4c:a4:98:57:27:b9:42:e9:d6:
         f9:e4:35:a3:01:83:83:dc:f2:4f:ce:1b:a6:d1:c1:f8:3a:fd:
         ee:ae:3e:11:d0:bd:af:1b:aa:07:2d:0c:6c:16:93:89:75:11:
         8e:84:6d:57:62:0e:73:e5:47:e2:40:60:c2:4e:7b:0d:cf:73:
         9d:c8:7b:81:74:82:05:df:b4:b3:51:0f:d8:91:f6:44:90:e7:
         a3:b3:13:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:07:47 2025 by rpki-client