Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/70422564-34b7-3065-bdc1-2114bb2180df.roa
File:                     70422564-34b7-3065-bdc1-2114bb2180df.roa (raw, json)
Hash identifier:          d8ZbrsiSwVkW9fbrCeYA7ILn08TqC2Z3BtiP8YsxfcU=
Subject key identifier:   69:0B:C2:D5:B9:7A:F1:F4:C7:94:90:31:85:BB:78:76:AF:74:10:C1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842D88575EFAFF907A78752D580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/70422564-34b7-3065-bdc1-2114bb2180df.roa
Signing time:             Fri 11 Aug 2023 04:48:46 +0000
ROA not before:           Fri 11 Aug 2023 04:48:46 +0000
ROA not after:            Thu 09 Nov 2023 05:48:46 +0000
asID:                     834
IP address blocks:        166.0.197.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:d8:85:75:ef:af:f9:07:a7:87:52:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 11 04:48:46 2023 GMT
            Not After : Nov  9 05:48:46 2023 GMT
        Subject: CN=0833d87e-8cce-4047-b41c-20055ca3e5a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c4:a7:64:d8:8d:9f:1d:04:fd:eb:a3:c5:a2:
                    18:01:9f:27:10:53:0e:d3:e6:e2:8b:48:5b:20:c7:
                    79:60:56:8c:6b:a8:55:e5:52:7a:c3:08:2e:17:74:
                    02:bd:d1:d0:0f:1f:68:41:f3:87:62:2d:95:5f:fd:
                    b3:55:2e:08:b3:c8:45:a8:e8:c7:d7:a1:80:56:4e:
                    e3:a4:eb:ee:6c:e4:4a:a3:b6:84:4b:3f:a1:4d:fb:
                    c4:c2:27:3f:bd:42:94:5f:f0:b0:64:39:ff:cd:76:
                    ec:0e:66:e6:c6:ce:ea:6c:25:ce:15:30:3d:b9:f5:
                    cb:7e:9a:30:9d:8c:28:64:da:de:b5:49:60:07:2b:
                    7c:4c:f1:60:df:66:24:32:b4:f7:99:8b:fb:73:19:
                    a8:e8:f4:a7:cf:3e:dd:a8:38:c7:96:ea:47:13:50:
                    e8:3b:d6:d9:2e:81:b2:e2:82:69:05:6a:d2:b2:e1:
                    78:51:3d:2a:d3:0f:99:aa:84:f6:6c:a9:77:a1:a7:
                    9f:d7:45:e5:23:a1:f2:b2:4c:a9:4e:f9:36:17:eb:
                    d3:07:90:6b:1c:ac:8f:8a:1c:3d:4c:41:74:d6:03:
                    60:a9:79:8a:78:73:55:d8:eb:f7:9a:e3:d4:a5:ef:
                    33:9b:95:30:25:bb:cc:a7:42:e4:67:1c:fb:4b:92:
                    19:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0B:C2:D5:B9:7A:F1:F4:C7:94:90:31:85:BB:78:76:AF:74:10:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/70422564-34b7-3065-bdc1-2114bb2180df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:5e:a8:8b:a7:b9:fc:80:39:41:df:26:59:97:e3:1b:bc:ca:
         b5:02:7d:e4:bc:c0:6b:0f:dd:84:af:32:ab:28:87:c9:61:59:
         6c:a0:0f:d1:38:b1:50:6d:e9:c8:1e:d0:8a:5c:2b:a9:34:08:
         ff:19:a1:67:0f:d4:05:e1:fe:d8:f2:6e:ec:47:76:82:32:7e:
         5e:e5:2d:62:c9:1b:dd:a7:af:a1:f4:48:f7:49:05:74:97:e8:
         86:7d:22:4b:3f:19:f5:81:dc:5e:cb:39:9e:cf:6a:1d:ab:a7:
         6a:a3:f5:bc:5a:04:15:89:41:79:91:6e:cf:d4:ea:4a:23:fa:
         08:92:2b:cc:81:57:ef:68:65:ba:7a:c1:ad:77:fa:09:51:65:
         af:db:d3:d7:66:80:ef:3b:a7:3c:aa:78:5c:34:38:dd:30:97:
         cf:c6:cd:c9:27:85:96:c8:38:1e:96:37:64:9d:61:67:e4:25:
         8c:9e:bc:14:56:bc:b2:7a:44:23:af:d3:27:d5:c0:65:45:b9:
         39:74:18:44:41:e4:01:ad:37:40:2d:9a:d6:c4:d5:dc:a4:3e:
         ab:d8:81:28:2c:f3:6f:fb:d2:bc:6a:e4:1b:e9:27:fd:15:46:
         31:cc:08:bc:5e:a7:4f:c5:53:80:3f:3e:aa:ea:de:fe:6e:28:
         3c:14:83:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:55:15 2025 by rpki-client