Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60b9572d-bdc6-3050-83da-5551da451b2d.roa
File:                     60b9572d-bdc6-3050-83da-5551da451b2d.roa (raw, json)
Hash identifier:          grSnOAv+ICRn7QN3d02fit3ojJYSCJFvk4DLFQ+XXro=
Subject key identifier:   C0:0B:66:22:2D:03:2A:F2:1C:EE:5D:21:B2:28:D2:31:90:75:51:C4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285840A6F9D59B890AE0C619F5F980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60b9572d-bdc6-3050-83da-5551da451b2d.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Fri 25 Apr 2025 04:00:00 +0000
asID:                     7018
IP address blocks:        108.165.183.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:a6:f9:d5:9b:89:0a:e0:c6:19:f5:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Apr 25 04:00:00 2025 GMT
        Subject: CN=f89bcbb7-c101-474a-aed0-1007cf4a4b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0c:2e:1a:16:4a:7e:b5:79:2f:f0:9a:eb:a9:
                    00:89:e3:55:eb:22:57:93:3e:b1:56:18:98:48:9d:
                    9b:a6:ed:ea:14:c2:c9:ea:e4:9f:b9:09:73:4f:de:
                    dd:40:09:db:92:95:dc:a0:98:54:3a:77:4e:ba:00:
                    0d:2d:05:08:34:5f:20:b9:43:96:8b:00:3b:85:b8:
                    0c:bd:74:26:1a:e8:c1:d5:0c:65:e8:6c:b0:c2:ca:
                    e4:0f:b0:8b:cf:ce:3c:2e:71:64:61:d9:f8:9d:0e:
                    a8:44:f7:65:bd:56:db:d6:e4:c6:09:80:7e:f0:5e:
                    be:9c:f2:7d:df:6a:5d:58:88:6c:2b:71:65:4d:e7:
                    46:50:dd:3e:14:bd:80:09:2f:16:6c:0f:99:bc:78:
                    59:ea:93:9d:d5:c7:e9:e1:07:3d:bd:77:8a:f2:0d:
                    cb:bc:bc:a8:39:60:b6:02:a4:6b:8b:ce:c8:e7:45:
                    7d:62:ab:86:b6:61:54:61:e4:89:21:31:8b:e2:44:
                    d5:42:5b:bb:7d:0b:08:26:09:6b:4d:77:29:94:f4:
                    01:96:16:91:de:41:16:91:4a:8d:5e:5f:c0:f5:89:
                    6c:35:40:8f:b4:e4:a1:2b:6a:f0:dd:be:61:e3:7c:
                    b8:92:2d:7c:ed:4c:fc:b9:ac:2c:72:9d:b8:52:7e:
                    e3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0B:66:22:2D:03:2A:F2:1C:EE:5D:21:B2:28:D2:31:90:75:51:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60b9572d-bdc6-3050-83da-5551da451b2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:6d:8f:d8:ee:1c:bb:22:ab:69:75:ef:27:75:fb:55:68:fa:
         e2:25:45:78:28:09:c0:1d:af:0e:98:f4:0f:57:2e:24:0d:47:
         1b:a7:b6:c8:84:61:70:fb:1b:50:51:2f:3a:2f:7a:df:01:25:
         a6:4c:ba:ba:bc:72:54:f9:c2:95:e3:c1:75:38:97:3d:48:54:
         1e:cc:63:a9:0a:85:40:56:fd:a0:01:b7:27:81:05:40:91:1c:
         c2:51:0c:cd:4c:7b:fd:59:b9:01:33:cb:d8:bb:58:25:20:7f:
         a1:9d:51:24:79:90:8a:81:d8:4e:58:d2:e5:96:c5:a2:a2:eb:
         ef:90:26:88:d4:50:4e:4f:cd:3d:a6:2d:af:4f:f7:b8:f8:39:
         a5:ee:84:e1:22:86:24:40:74:1a:09:0f:6f:e5:af:aa:bf:72:
         56:8c:df:25:08:c4:1a:9d:48:4e:b9:3c:3b:2a:b4:0d:e6:01:
         92:b9:af:8d:34:5f:5b:e6:9f:71:27:4c:77:ab:46:a4:88:0e:
         98:fe:df:91:ff:7a:44:a1:d9:ca:2d:46:08:03:8a:f3:40:f1:
         1a:fc:f9:ec:2c:04:dc:cd:f4:c5:dc:f8:f0:a9:77:49:6b:4f:
         b1:c7:78:4c:e1:5a:d3:48:ab:fb:d8:3c:ee:c8:84:c6:3d:56:
         9a:fc:ed:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:08:27 2025 by rpki-client