Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/81cd8f27-49a5-32fc-be2c-f2c476bf976d.roa
File:                     81cd8f27-49a5-32fc-be2c-f2c476bf976d.roa (raw, json)
Hash identifier:          2IzzmyePL9tKd5W7cc+e6ftgY689vDu5Ub6G/sQRtv0=
Subject key identifier:   F8:49:B5:8C:74:36:75:63:38:F0:B6:F2:4C:47:41:6B:4B:9D:CC:94
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328576D51CC73C042CFC1737734B667
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/81cd8f27-49a5-32fc-be2c-f2c476bf976d.roa
Signing time:             Wed 22 Jul 2020 15:46:50 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Tue 25 Oct 2022 04:00:00 +0000
asID:                     22773
IP address blocks:        108.165.128.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:77:34:b6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : Oct 25 04:00:00 2022 GMT
        Subject: CN=7850f1c4-6f52-4e83-9cc1-cb7284884661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fd:6c:bb:71:31:f9:4e:e7:c5:17:ea:cd:88:
                    7f:ae:37:fa:b3:9e:33:7d:bd:5d:24:1a:99:7c:5c:
                    de:45:b3:03:5e:0d:22:ef:84:f1:0d:e1:a4:6c:48:
                    31:66:35:c2:b1:9f:f3:20:db:04:55:71:17:b5:4d:
                    1c:0c:16:a9:ee:c6:b5:88:71:72:1d:57:c6:2e:0b:
                    52:29:34:e0:a2:9c:27:9b:11:e2:1e:54:50:11:b0:
                    a6:3a:be:78:b2:fe:8f:dd:29:af:20:d5:06:32:a8:
                    66:9f:b1:99:63:66:e8:9c:c8:4f:ae:07:86:df:f0:
                    3d:39:b4:79:02:88:77:f2:bb:e8:e9:8b:9c:30:ce:
                    f2:b7:a5:fb:c8:75:75:49:84:a9:8a:a0:aa:32:d0:
                    f7:9d:53:ee:85:ac:c6:1e:1c:a5:c1:86:8e:77:93:
                    2c:39:5c:6a:af:34:49:37:a7:02:d6:f0:ee:3b:46:
                    1f:ea:d3:ba:1a:58:7e:cd:9b:8a:bd:a7:95:8d:bc:
                    bc:9e:29:ce:36:8b:7d:94:a9:46:8a:bc:0d:ec:67:
                    49:a3:8d:cc:bd:f4:77:36:15:c2:5f:30:70:06:87:
                    fc:0d:74:61:04:44:20:dc:0b:66:53:e2:2a:7a:cd:
                    f2:d5:34:7b:b7:0b:65:00:2f:b3:99:4f:a0:c0:d9:
                    9a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:49:B5:8C:74:36:75:63:38:F0:B6:F2:4C:47:41:6B:4B:9D:CC:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/81cd8f27-49a5-32fc-be2c-f2c476bf976d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:8c:da:79:01:89:63:1f:8a:93:85:07:ee:11:07:e6:0b:bb:
         4f:7c:21:69:52:39:34:87:48:5c:52:2d:b8:91:5e:de:5b:25:
         c1:10:f7:a5:3b:de:2a:0c:20:c9:a4:7b:d1:33:03:d0:16:96:
         e6:57:b1:af:da:6e:c3:40:9e:56:31:46:fe:66:2c:99:88:6e:
         39:66:b6:ae:8f:01:46:7e:c0:e2:7d:ae:a4:61:b9:59:2b:39:
         7e:cd:c3:9d:d8:c0:93:cd:9f:ad:43:04:a7:d3:82:6e:4c:44:
         b3:a3:a0:6f:73:31:b6:24:39:a6:e8:d2:e4:e1:f5:33:ce:d6:
         9b:98:57:7b:90:2d:3b:c0:f7:6d:20:ac:cf:b8:1e:ff:5b:13:
         14:24:c7:ed:db:1e:1a:54:56:88:bd:21:1d:fe:33:cb:71:f3:
         0a:11:43:c6:00:ff:6c:3f:8a:14:63:48:38:50:5b:25:e0:df:
         b2:13:63:37:e8:d3:50:55:ce:3a:8a:03:e4:e0:4b:02:8a:50:
         e6:4e:1e:0f:2b:d7:f7:26:8c:76:b7:d7:13:1f:b1:60:f8:91:
         60:3b:12:4b:1c:7b:c7:12:68:1c:14:e9:f4:bc:af:7f:77:ed:
         66:31:34:bf:b1:a7:2a:35:92:5d:fd:d3:95:c1:91:ae:9d:a5:
         b6:97:e8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:55:07 2025 by rpki-client