Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91e7b5f6-8fe9-33d5-b63f-c8bb475cb2ca.roa
File:                     91e7b5f6-8fe9-33d5-b63f-c8bb475cb2ca.roa (raw, json)
Hash identifier:          a6EN1QDUHiGRdFVcGwBp/fzv+okZZzvtI8yCYP8TqjY=
Subject key identifier:   D7:44:3B:D6:D3:22:F2:FD:D3:6D:05:4D:25:06:27:63:DB:49:43:1A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285846C9A185EBDBE2BCAA609AC600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91e7b5f6-8fe9-33d5-b63f-c8bb475cb2ca.roa
Signing time:             Tue 06 Aug 2024 15:55:56 +0000
ROA not before:           Tue 06 Aug 2024 15:55:56 +0000
ROA not after:            Mon 04 Nov 2024 16:55:56 +0000
asID:                     834
IP address blocks:        108.165.95.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c9:a1:85:eb:db:e2:bc:aa:60:9a:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  6 15:55:56 2024 GMT
            Not After : Nov  4 16:55:56 2024 GMT
        Subject: CN=07174c6d-846b-4eb1-9150-c22bd4ff0c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:31:7e:3d:6f:51:94:02:85:80:aa:20:2d:1f:
                    b0:ff:09:a6:d2:f1:17:5b:ed:69:31:16:e9:1e:f2:
                    fd:4f:be:3f:d9:1f:90:da:fa:a2:5f:1f:39:0f:99:
                    cf:06:58:a7:7b:e8:88:57:97:8e:d1:d2:21:8d:14:
                    03:5c:b5:3e:59:e6:16:c2:3e:54:8e:7d:a9:01:ca:
                    16:cd:22:09:47:82:8c:47:72:a4:b3:6d:e6:d8:4f:
                    f8:5a:a1:81:41:95:01:b2:51:d9:39:f5:17:22:7f:
                    79:63:1a:85:b0:a3:d0:49:ea:28:a5:74:32:07:f1:
                    b4:96:db:75:a7:24:84:f3:63:60:e3:a3:32:62:03:
                    3e:84:84:62:8a:bb:a8:35:bb:de:42:3d:61:8e:4e:
                    96:a7:91:7b:b2:26:59:6b:f6:14:86:1d:6c:77:55:
                    60:b0:f7:9b:49:18:97:cc:f9:33:95:6a:5c:2f:a4:
                    c5:08:eb:cf:6b:65:00:85:05:0f:ed:ab:24:bb:59:
                    35:77:0d:5c:d7:71:ca:c4:9a:a8:4e:08:c8:09:51:
                    5a:7a:fc:98:05:81:4f:3e:03:8a:21:66:8e:05:c6:
                    d4:41:da:0d:63:e3:26:bb:e3:38:ce:ce:1f:6f:21:
                    a2:aa:36:fc:ed:b5:f3:af:47:bc:eb:f3:ec:21:bf:
                    3a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:44:3B:D6:D3:22:F2:FD:D3:6D:05:4D:25:06:27:63:DB:49:43:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91e7b5f6-8fe9-33d5-b63f-c8bb475cb2ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:a9:fb:70:03:7c:38:25:cb:81:b3:e4:16:7f:9f:9a:d9:e2:
         04:9e:94:7a:0f:55:01:7e:4e:1a:e4:2a:46:04:73:3e:3b:c5:
         4e:33:5c:37:c9:48:f6:52:18:42:52:ea:3c:01:90:f8:4d:58:
         f7:70:66:33:d9:a8:f9:25:41:a8:96:00:59:92:5c:15:b9:db:
         f5:a0:8d:5e:86:dd:da:d1:4f:48:cc:3f:0f:f4:36:f5:af:d1:
         61:27:b6:8c:5e:f7:dc:41:1a:95:49:46:8e:b4:0a:f8:91:51:
         e9:76:9e:43:39:54:a2:1a:de:6e:06:94:cb:34:46:47:e1:24:
         78:7d:15:41:c6:bc:e0:6b:8c:28:a1:df:15:45:35:f1:c1:5e:
         75:27:05:7a:8a:4b:aa:ec:a2:c9:f3:e1:2f:9d:f8:cf:91:4d:
         63:65:58:ff:ff:e3:f2:65:70:85:cb:79:46:4e:af:ec:fa:19:
         42:f1:89:48:59:f3:dd:2a:2c:1d:0d:e6:d9:35:29:bc:66:42:
         7f:42:f5:67:d6:b5:82:c8:c1:25:36:8a:60:92:07:d6:f6:9d:
         5d:f3:5b:77:30:65:2b:9a:9d:8c:2c:17:c7:f4:a7:66:33:ac:
         35:7a:37:85:1b:12:e1:d5:4a:4b:1a:ed:34:e4:55:68:aa:b1:
         a8:dc:d4:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbJoYXr2+K8qmCaxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDgwNjE1NTU1NloXDTI0MTEwNDE2NTU1NlowLzEtMCsGA1UEAxMk
MDcxNzRjNmQtODQ2Yi00ZWIxLTkxNTAtYzIyYmQ0ZmYwYzgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTF+PW9RlAKFgKogLR+w/wmm0vEXW+1pMRbp
HvL9T74/2R+Q2vqiXx85D5nPBline+iIV5eO0dIhjRQDXLU+WeYWwj5Ujn2pAcoW
zSIJR4KMR3Kks23m2E/4WqGBQZUBslHZOfUXIn95YxqFsKPQSeoopXQyB/G0ltt1
pySE82Ng46MyYgM+hIRiiruoNbveQj1hjk6Wp5F7siZZa/YUhh1sd1VgsPebSRiX
zPkzlWpcL6TFCOvPa2UAhQUP7asku1k1dw1c13HKxJqoTgjICVFaevyYBYFPPgOK
IWaOBcbUQdoNY+Mmu+M4zs4fbyGiqjb87bXzr0e86/PsIb86DQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNdEO9bTIvL9020FTSUGJ2PbSUMaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTFlN2I1ZjYtOGZlOS0z
M2Q1LWI2M2YtYzhiYjQ3NWNiMmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAep+3ADfDgly4Gz5BZ/n5rZ4gSelHoPVQF+ThrkKkYEcz47xU4zXDfJ
SPZSGEJS6jwBkPhNWPdwZjPZqPklQaiWAFmSXBW52/WgjV6G3drRT0jMPw/0NvWv
0WEntoxe99xBGpVJRo60CviRUel2nkM5VKIa3m4GlMs0RkfhJHh9FUHGvOBrjCih
3xVFNfHBXnUnBXqKS6rsosnz4S+d+M+RTWNlWP//4/JlcIXLeUZOr+z6GULxiUhZ
890qLB0N5tk1KbxmQn9C9WfWtYLIwSU2imCSB9b2nV3zW3cwZSuanYwsF8f0p2Yz
rDV6N4UbEuHVSksa7TTkVWiqsajc1IE=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:58:19 2025 by rpki-client