Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/74ae01fe-c382-39e9-bb1a-0449728f78cc.roa
File:                     74ae01fe-c382-39e9-bb1a-0449728f78cc.roa (raw, json)
Hash identifier:          UHwJtFGUYsNGScx5VZm1C181m9zPY8p/ActMqx1OswI=
Subject key identifier:   26:C3:64:22:57:95:2E:3E:32:D0:18:D3:61:A3:69:F6:80:18:C9:C8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841FD41D91A13A71D5DE8381060
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/74ae01fe-c382-39e9-bb1a-0449728f78cc.roa
Signing time:             Wed 24 May 2023 15:50:31 +0000
ROA not before:           Wed 24 May 2023 15:50:31 +0000
ROA not after:            Tue 22 Aug 2023 15:50:31 +0000
asID:                     47869
IP address blocks:        166.0.19.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:fd:41:d9:1a:13:a7:1d:5d:e8:38:10:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 24 15:50:31 2023 GMT
            Not After : Aug 22 15:50:31 2023 GMT
        Subject: CN=3b3b364e-4c2e-4f33-8d80-ba3ac64d47bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f9:7d:4d:f0:c9:30:45:59:7b:a9:be:0c:7d:
                    79:cd:3e:87:8e:a9:eb:3b:87:38:64:29:c7:4a:23:
                    fa:0c:6c:0b:0f:06:cc:90:06:18:e4:b4:d3:b4:b1:
                    7b:73:58:d7:a1:db:3e:ad:ff:84:b2:58:f2:46:f1:
                    f0:23:63:8d:4c:11:37:6c:e6:79:ea:8c:08:e3:a4:
                    ec:c7:ac:6d:33:2a:be:1d:d3:16:9c:ae:05:57:33:
                    b0:9a:79:db:a6:85:6f:d3:66:1c:37:51:70:60:0f:
                    b4:de:3c:20:83:69:f2:41:33:5b:c8:7c:e6:8f:3c:
                    cd:5a:fb:94:34:a0:a3:1a:ea:af:e9:97:c9:07:f3:
                    62:f5:a1:16:45:cb:fa:1e:e6:b4:c9:ce:5a:dd:0a:
                    94:bd:f8:1b:eb:2b:a3:05:5f:f4:73:74:f1:46:ef:
                    cd:42:7d:9b:2b:1a:20:fe:13:cf:e0:d8:5e:61:cd:
                    c8:5e:c4:a3:c5:24:5a:a9:45:c7:f5:fb:43:b5:89:
                    9f:3b:5d:a5:7e:2b:62:51:b6:c5:47:fa:bd:68:67:
                    45:29:1c:95:71:dd:a1:15:a9:4a:0e:50:63:cd:51:
                    ef:7e:46:aa:47:05:e8:84:17:47:34:92:7f:14:71:
                    e7:83:b9:cb:31:52:4b:d6:e3:28:82:12:50:92:b9:
                    dd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C3:64:22:57:95:2E:3E:32:D0:18:D3:61:A3:69:F6:80:18:C9:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/74ae01fe-c382-39e9-bb1a-0449728f78cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ea:a6:94:46:02:ea:47:54:84:a4:d8:80:16:e3:79:af:2a:
         e1:cc:f6:69:c8:e0:f4:d8:b8:84:6b:bd:e6:c9:6a:b6:a3:b7:
         e8:23:ec:f6:51:f6:62:73:89:7a:89:5a:03:9c:31:7f:a4:06:
         86:78:5e:63:6f:c9:47:e1:97:ad:3c:ba:6b:f1:8f:a9:79:f6:
         2b:d0:64:11:de:b1:c9:01:ea:a4:b2:0f:3b:4d:74:62:70:9f:
         54:ec:a4:75:88:db:7a:e3:b9:ab:e6:c7:80:a6:55:ca:e3:5e:
         e9:13:c8:32:5a:87:a4:eb:c5:00:17:64:17:98:1e:f2:8b:a6:
         c1:10:07:35:dc:2c:7e:de:79:76:57:05:21:19:f3:8e:67:c9:
         1d:54:bb:c1:2b:05:a3:5d:de:34:e1:86:d8:a5:c9:19:e6:10:
         a6:af:3a:c8:12:dd:42:2b:14:45:40:82:f2:a7:10:f5:0f:61:
         f6:ee:f5:58:1f:b2:89:71:42:ab:e7:a0:d1:d3:2d:8d:1d:a6:
         61:5a:c5:f5:f0:d2:f5:20:a1:88:7d:02:52:8b:78:f6:10:d0:
         5d:f5:a4:02:b3:d1:14:0e:51:eb:3b:99:62:75:06:a1:54:30:
         a0:a3:28:99:3b:36:47:dd:a2:51:4d:88:19:d1:db:68:e4:8d:
         21:7e:2f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:04:33 2025 by rpki-client