Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6a77b09c-22e7-315f-87fc-606c154b7486.roa
File:                     6a77b09c-22e7-315f-87fc-606c154b7486.roa (raw, json)
Hash identifier:          qcjg8kGeVtZUfOvfj/pSXlRP0tyAPk2zhJqxuXwFJ1A=
Subject key identifier:   6D:78:8D:C9:4A:C5:92:05:30:B7:AF:B2:A9:50:F1:1F:0C:A4:1F:85
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858461F4C3F445F43C38227073D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6a77b09c-22e7-315f-87fc-606c154b7486.roa
Signing time:             Thu 06 Jun 2024 15:36:42 +0000
ROA not before:           Thu 06 Jun 2024 15:36:42 +0000
ROA not after:            Wed 04 Sep 2024 15:36:42 +0000
asID:                     834
IP address blocks:        166.0.186.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1f:4c:3f:44:5f:43:c3:82:27:07:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  6 15:36:42 2024 GMT
            Not After : Sep  4 15:36:42 2024 GMT
        Subject: CN=87502c6e-008a-4419-9915-9f9447df355e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:37:37:04:84:5f:8d:0c:2d:13:8b:47:34:14:
                    3a:f1:ed:2f:d9:1b:78:3e:9c:99:2c:ba:a0:31:25:
                    65:21:03:f8:27:48:d7:f9:fc:8b:fa:13:df:47:c2:
                    19:59:41:2f:6d:fe:5c:cf:be:07:17:8c:b9:52:5e:
                    eb:ec:0a:46:c1:07:06:76:ed:cc:4e:12:a2:31:ea:
                    4e:6f:3a:0d:84:98:e0:ae:85:14:21:0b:03:1b:a3:
                    96:3e:92:33:c5:0d:22:29:8f:65:ba:84:74:5c:82:
                    2a:b1:28:ff:55:55:2d:dc:04:14:3d:7b:aa:a2:01:
                    9c:17:ad:5b:3b:97:31:72:31:85:29:18:f2:74:06:
                    96:fa:6d:19:f3:5e:67:6c:65:bc:48:5c:8f:ca:5e:
                    93:36:ef:93:8e:f8:ad:8f:95:45:b3:54:bd:f2:32:
                    64:97:a5:cb:62:20:f4:eb:af:af:3f:d5:ce:44:bf:
                    7d:b8:dd:bd:c9:7c:1c:60:be:cc:5a:24:ce:c1:60:
                    e2:97:83:14:9d:5e:c3:dd:d9:8e:1c:e1:fe:41:85:
                    64:04:d4:94:c5:15:ee:d8:b3:06:46:09:3b:f6:53:
                    c7:5d:02:12:24:c3:15:ca:eb:be:90:6a:9b:4f:ec:
                    79:4e:7d:74:6c:bc:ae:9e:48:74:e0:51:16:3f:24:
                    b2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:78:8D:C9:4A:C5:92:05:30:B7:AF:B2:A9:50:F1:1F:0C:A4:1F:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6a77b09c-22e7-315f-87fc-606c154b7486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:50:e9:11:54:b1:cc:a6:36:02:ef:d1:41:1d:0f:4a:fb:27:
         79:bd:8c:13:fb:ce:7d:2f:28:a0:27:57:b4:ff:c6:2f:7a:78:
         94:08:ab:fb:ff:0e:29:f5:95:72:05:03:6d:82:f6:36:95:69:
         d4:d4:0c:34:7c:6d:2f:f5:74:97:e5:95:c9:04:d3:4a:21:de:
         21:88:ee:f5:b7:13:d3:63:17:34:dd:2f:fb:45:38:82:79:df:
         7a:73:50:ed:6a:53:8b:70:14:c5:e9:36:1b:08:d1:2d:35:fc:
         03:8d:53:13:d6:1b:d6:4b:bc:df:42:21:7c:f5:22:2c:bf:fb:
         21:37:4c:04:7f:dd:89:ab:7e:c7:1c:3f:03:76:55:50:ff:2d:
         dd:05:12:70:de:cd:b1:48:e8:dd:bc:c0:bf:f8:e6:2e:a0:36:
         c7:b1:6d:a3:45:17:bc:5d:53:21:c5:2b:16:60:b6:a9:c4:3f:
         bd:bc:72:80:f3:9c:24:b0:ca:7f:33:19:39:31:fa:bb:1d:81:
         fd:00:32:18:37:37:da:8b:2d:07:77:da:58:85:6c:86:36:4f:
         90:b9:6d:f9:84:69:a3:ed:dc:73:c4:30:28:82:8a:e3:85:81:
         54:e0:e0:5f:c6:1c:0b:7b:97:a1:38:10:73:ba:dc:19:46:b2:
         09:fd:61:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:12:53 2025 by rpki-client