Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7605e105-43b9-3116-af73-2172411c8771.roa
File:                     7605e105-43b9-3116-af73-2172411c8771.roa (raw, json)
Hash identifier:          KC3lqJQMGhhEe27VFi3xwKHBNAMIWbQ0fJMaTB/D3cA=
Subject key identifier:   87:9C:54:09:25:51:AF:D3:99:8C:4B:26:A0:70:25:22:93:88:97:19
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446DF799E77830CCF11EDC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7605e105-43b9-3116-af73-2172411c8771.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Fri 04 Aug 2023 07:25:08 +0000
asID:                     135752
IP address blocks:        108.165.151.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:df:79:9e:77:83:0c:cf:11:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug  4 07:25:08 2023 GMT
        Subject: CN=88360ba0-e519-46f4-af73-cfcf6144537e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4e:16:33:33:82:08:dd:df:60:63:07:15:d2:
                    63:fb:bd:d3:4f:20:c8:9b:23:84:5d:c5:c9:05:a4:
                    6b:8e:94:4f:3f:ce:00:48:50:61:96:77:fb:ff:78:
                    f5:a6:12:4b:99:95:64:75:d9:be:5d:c8:13:30:f8:
                    9b:a4:c0:69:9d:0c:70:2f:59:7a:df:76:e5:2c:ff:
                    b5:ba:37:1e:69:27:9f:29:b3:eb:8c:7a:17:30:56:
                    a9:07:85:f8:62:06:a0:bc:d7:e4:7f:83:80:3f:12:
                    13:90:a4:83:54:29:b7:d8:62:85:02:6d:75:1e:ca:
                    57:78:f5:d1:3f:51:86:b4:2a:c0:bb:0c:c1:00:8b:
                    90:31:76:15:70:72:cf:e2:52:64:f6:e3:b6:1f:c8:
                    0c:ab:2f:7c:7c:91:66:82:c7:2f:c1:bc:cf:85:d2:
                    1e:fe:9c:f1:64:b5:db:87:8c:66:7e:e7:67:12:6d:
                    92:da:9b:3a:80:e7:32:b1:e1:63:c1:85:a2:e2:20:
                    ee:92:bd:62:58:74:ed:77:ef:22:05:4d:e9:6d:53:
                    3a:18:10:3d:92:be:2d:e6:7e:a9:d2:ff:c7:71:52:
                    d1:53:5a:37:fc:d8:a9:ad:ac:92:31:5f:a0:ce:19:
                    0a:a3:2c:8c:3e:ea:76:83:35:f9:ca:1f:47:3d:d1:
                    1b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9C:54:09:25:51:AF:D3:99:8C:4B:26:A0:70:25:22:93:88:97:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7605e105-43b9-3116-af73-2172411c8771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:58:93:76:fe:a4:f4:63:94:f7:db:11:6a:1e:54:22:c7:13:
         88:93:86:45:36:12:9f:e6:85:66:d9:38:85:4c:91:97:80:31:
         ff:f1:87:f9:ac:0c:c3:47:8d:a1:da:a5:b1:64:fd:60:62:fd:
         8b:b7:18:01:c9:c8:02:25:49:8c:d1:bd:dd:b3:59:b7:f6:6f:
         0b:cd:74:1e:dc:54:25:1b:fd:64:04:cf:95:c5:c9:75:27:da:
         5d:2e:5c:8b:ff:5a:eb:6d:bf:c5:be:2d:78:49:e8:d9:f2:f3:
         0d:3f:6e:fc:aa:22:79:f0:14:d6:04:31:c8:90:c0:34:a7:39:
         b0:6b:18:fe:af:bc:4a:53:d8:f9:16:27:c7:0f:55:87:4a:b9:
         38:b3:a4:a9:b5:f3:87:1c:26:69:08:71:21:26:43:fe:3e:ca:
         37:da:01:cd:42:3b:e9:e8:d0:d0:46:4e:58:5d:ac:37:69:85:
         8f:af:00:69:37:ba:73:9e:48:1e:2a:b9:c8:a6:d6:ea:dd:cd:
         38:27:e1:4a:25:e2:79:fd:1e:bf:2b:f6:41:df:19:81:8a:f8:
         f8:e2:cc:bb:11:ba:16:83:d7:5d:07:d6:1b:85:9a:d2:44:e9:
         10:34:24:6f:2b:e5:70:5b:74:6a:5f:b1:2d:fc:f4:58:86:48:
         6a:35:59:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkRt95nneDDM8R7cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDgwNDA3MjUwOFowLzEtMCsGA1UEAxMk
ODgzNjBiYTAtZTUxOS00NmY0LWFmNzMtY2ZjZjYxNDQ1MzdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU4WMzOCCN3fYGMHFdJj+73TTyDImyOEXcXJ
BaRrjpRPP84ASFBhlnf7/3j1phJLmZVkddm+XcgTMPibpMBpnQxwL1l633blLP+1
ujceaSefKbPrjHoXMFapB4X4YgagvNfkf4OAPxITkKSDVCm32GKFAm11HspXePXR
P1GGtCrAuwzBAIuQMXYVcHLP4lJk9uO2H8gMqy98fJFmgscvwbzPhdIe/pzxZLXb
h4xmfudnEm2S2ps6gOcyseFjwYWi4iDukr1iWHTtd+8iBU3pbVM6GBA9kr4t5n6p
0v/HcVLRU1o3/NipraySMV+gzhkKoyyMPup2gzX5yh9HPdEbewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIecVAklUa/TmYxLJqBwJSKTiJcZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzYwNWUxMDUtNDNiOS0z
MTE2LWFmNzMtMjE3MjQxMWM4NzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFYk3b+pPRjlPfbEWoeVCLHE4iThkU2Ep/mhWbZOIVMkZeAMf/xh/ms
DMNHjaHapbFk/WBi/Yu3GAHJyAIlSYzRvd2zWbf2bwvNdB7cVCUb/WQEz5XFyXUn
2l0uXIv/Wuttv8W+LXhJ6Nny8w0/bvyqInnwFNYEMciQwDSnObBrGP6vvEpT2PkW
J8cPVYdKuTizpKm184ccJmkIcSEmQ/4+yjfaAc1CO+no0NBGTlhdrDdphY+vAGk3
unOeSB4qucim1urdzTgn4Uol4nn9Hr8r9kHfGYGK+PjizLsRuhaD110H1huFmtJE
6RA0JG8r5XBbdGpfsS389FiGSGo1WfM=
-----END CERTIFICATE-----
Generated at Fri Jun 20 07:13:51 2025 by rpki-client