Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b11486d-6c37-3e6a-a4e3-888202094914.roa
File:                     8b11486d-6c37-3e6a-a4e3-888202094914.roa (raw, json)
Hash identifier:          Zko6HHh6YxiQuJXomDXlsCEV/KeUiJHlFeapY74Vu/I=
Subject key identifier:   6B:AB:8B:F4:2F:B8:B6:8D:AD:84:AC:46:47:F8:2A:46:25:30:62:52
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858427809CEC2E3B7A64B07408A40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b11486d-6c37-3e6a-a4e3-888202094914.roa
Signing time:             Fri 07 Jul 2023 15:22:02 +0000
ROA not before:           Fri 07 Jul 2023 15:22:02 +0000
ROA not after:            Thu 05 Oct 2023 15:22:02 +0000
asID:                     834
IP address blocks:        108.165.240.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:78:09:ce:c2:e3:b7:a6:4b:07:40:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  7 15:22:02 2023 GMT
            Not After : Oct  5 15:22:02 2023 GMT
        Subject: CN=ee4a6c82-73ea-49e4-a287-56f60169cd6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:09:b7:97:71:9f:79:79:0f:20:9d:ae:7b:b7:
                    82:94:ae:60:e1:3b:db:12:72:6c:f5:92:79:46:5b:
                    44:f0:a4:d6:44:6c:d9:fd:4f:32:31:09:5b:0a:eb:
                    ee:47:71:93:64:b4:dd:a0:7e:96:66:d5:d8:63:4f:
                    8c:a8:02:bc:be:17:15:30:ac:d7:b8:c1:56:15:8f:
                    2a:dc:ca:a0:55:e8:fb:d7:89:18:74:ce:b5:c8:cb:
                    83:61:42:9f:e7:ae:1c:0c:b6:14:56:78:17:e1:a1:
                    91:21:61:0b:ae:08:5a:13:24:8e:3e:6c:94:23:31:
                    2c:49:ea:5c:3f:40:0d:a0:3c:59:fa:fa:b7:70:0d:
                    1b:7e:d8:cc:e6:b7:18:f9:17:d6:fe:9b:fc:12:c9:
                    1b:78:14:a9:2a:67:c3:9a:5d:d5:72:fc:2e:39:b0:
                    80:5c:54:f2:39:18:06:e2:d2:4b:a6:7d:ab:f8:52:
                    84:04:88:84:cf:88:4b:11:c7:95:f5:a2:c6:f2:75:
                    88:19:7c:f2:df:3b:f5:36:6b:42:17:14:66:30:62:
                    2c:de:b1:c5:01:ad:4a:8e:05:d4:41:17:c3:64:4e:
                    95:f5:d4:00:39:e5:7c:95:04:3a:71:9c:8c:cc:8b:
                    77:d2:b9:96:bf:04:50:7d:69:3c:81:28:30:8d:49:
                    d2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AB:8B:F4:2F:B8:B6:8D:AD:84:AC:46:47:F8:2A:46:25:30:62:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b11486d-6c37-3e6a-a4e3-888202094914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:00:6f:ff:b2:5e:83:f8:7c:cf:92:33:47:eb:2d:dd:35:87:
         13:01:be:dc:fd:bb:57:1e:1e:ca:da:3e:d0:28:a2:c9:6f:ee:
         89:f5:10:e7:03:f5:c5:35:6c:6f:ad:8c:0b:3d:e9:0a:52:fc:
         ae:be:95:d0:58:32:e5:1e:ef:48:51:d6:f6:ae:46:a0:e8:d1:
         4a:57:4c:4d:63:2f:9f:87:93:1f:39:7c:be:86:5e:fd:b5:64:
         45:14:83:e1:66:a6:29:c1:4c:a4:10:48:9a:bb:f2:22:be:a6:
         07:d4:14:48:f2:b0:14:60:d5:00:c6:67:16:15:45:48:e4:59:
         fd:58:58:9e:ce:b6:55:19:0e:30:41:f3:2f:ab:7c:e7:6a:d6:
         8a:76:5f:7c:7c:74:4b:6b:fb:17:e8:4a:e0:e3:ca:05:4f:5b:
         b7:23:61:c1:02:f2:fc:83:8a:fd:a7:3b:38:ca:9f:cd:a3:1c:
         5d:0c:f6:c8:d6:f4:50:c6:c7:bb:c8:1f:9e:5e:2b:ad:5f:85:
         81:14:98:31:9a:8d:c8:1b:99:ba:a2:47:58:ec:f6:c9:5c:e6:
         c9:d7:37:6b:29:4b:83:05:98:a8:e8:82:1b:14:a6:31:cc:7f:
         25:f9:11:99:71:7c:43:8d:da:91:cc:2a:dd:00:06:15:d5:36:
         58:a3:dc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:34:49 2025 by rpki-client