Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/94600495-f607-305b-a9f6-d0ddc810bd82.roa
File:                     94600495-f607-305b-a9f6-d0ddc810bd82.roa (raw, json)
Hash identifier:          HyuBhPX2y2ojT7c4YBZA5Czcmd00k+TscLE4n+++qwY=
Subject key identifier:   4F:BE:1A:1C:59:8F:05:0D:61:37:5A:68:F4:30:53:77:D7:71:BA:3C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E44CD337244478AF34A92980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/94600495-f607-305b-a9f6-d0ddc810bd82.roa
Signing time:             Mon 15 May 2023 17:17:25 +0000
ROA not before:           Mon 15 May 2023 17:17:25 +0000
ROA not after:            Sun 13 Aug 2023 17:17:25 +0000
asID:                     834
IP address blocks:        108.165.107.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:4c:d3:37:24:44:78:af:34:a9:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:17:25 2023 GMT
            Not After : Aug 13 17:17:25 2023 GMT
        Subject: CN=326177e4-8da9-4d49-957b-753f310ddf37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f1:34:73:66:55:08:fa:d6:8c:5e:1c:4c:fe:
                    09:76:c5:d9:46:f6:b7:7e:cb:be:fb:33:23:21:a4:
                    a8:8c:2f:99:72:5b:9f:a8:6b:96:3e:7f:02:49:5a:
                    02:a7:23:9a:8f:7e:30:74:7f:4b:67:52:c6:06:0d:
                    3f:2c:0d:54:4d:0d:46:93:48:0c:65:a4:66:2f:29:
                    72:90:21:28:8b:46:1b:25:fe:c3:b7:94:09:aa:81:
                    23:25:42:f0:92:84:23:ee:65:a0:2b:54:ef:da:1c:
                    f8:96:50:ad:88:87:bd:07:25:f8:1f:52:c0:5b:3d:
                    fc:16:c3:fe:83:14:97:bd:e3:d0:7b:65:97:30:18:
                    2c:23:cf:fa:2d:a6:6c:2e:e7:5b:b7:70:b5:c6:9c:
                    a9:70:4d:73:08:33:1d:3a:28:54:df:08:4d:0a:26:
                    54:c3:28:c4:cb:36:e1:c2:7c:73:a8:16:61:8c:af:
                    71:d8:9b:d6:ae:b5:10:af:e1:6a:6e:a2:f8:ac:fa:
                    bf:41:81:a0:4f:04:9f:b7:f7:1b:5f:05:b0:cd:6d:
                    cd:2c:3d:91:fe:01:8b:6a:29:9b:4e:fd:ec:17:92:
                    68:7b:ef:a1:e8:45:23:36:de:5b:ef:84:28:45:9a:
                    bc:c4:78:da:19:56:35:62:96:b9:2e:85:05:af:b4:
                    c7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BE:1A:1C:59:8F:05:0D:61:37:5A:68:F4:30:53:77:D7:71:BA:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/94600495-f607-305b-a9f6-d0ddc810bd82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:45:36:03:69:b8:20:5d:c9:85:7a:0e:75:3d:a6:25:5b:2b:
         d5:4e:a6:46:cf:2c:25:f4:6c:e5:cf:34:50:c0:2b:b7:d1:19:
         7e:98:cc:02:91:c7:f7:0c:5f:62:ac:bf:b4:34:3b:58:43:c1:
         ea:a4:b7:8e:99:f6:73:6b:43:88:8a:10:cf:2f:52:53:3b:73:
         d6:00:e2:7c:01:44:88:03:d0:14:e8:37:25:53:f9:51:e6:cb:
         21:59:a4:e7:f2:67:74:f2:3d:48:7e:c9:41:a1:15:a7:fc:73:
         4a:37:b5:d9:78:cb:8a:c0:17:c2:d0:43:80:5a:52:24:14:90:
         8b:4f:a9:b2:df:59:a1:56:88:be:3f:b1:39:2f:da:bb:9b:92:
         f5:b5:c4:35:7a:02:4e:24:b2:61:99:a6:48:54:1d:78:38:74:
         d5:59:84:ca:55:7d:5a:d2:e0:0d:8e:19:ed:5a:d0:67:8c:2d:
         13:79:00:fa:33:66:0f:98:9b:20:d6:e8:37:14:4d:79:54:16:
         b0:55:e0:c2:8a:e2:b3:ca:c6:03:04:04:0b:3a:6b:e4:03:51:
         c3:41:5d:94:38:da:9d:21:b5:74:c6:e1:f9:75:b0:70:1a:b0:
         0e:51:27:73:68:d2:01:67:8a:fa:e9:11:9e:72:29:2a:60:13:
         88:68:5e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:05:52 2025 by rpki-client