Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b009c05f-f2ac-379e-a8e3-4da51e9d0e23.roa
File:                     b009c05f-f2ac-379e-a8e3-4da51e9d0e23.roa (raw, json)
Hash identifier:          kxIVf7uo+4T7QnXn2kxHyPzRfyWPh8WRcHxRwujnA20=
Subject key identifier:   CF:94:A4:4C:5B:61:F3:21:D8:0D:C0:46:49:1A:D9:0F:71:7F:B2:04
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285846D20569099735F283954B7780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b009c05f-f2ac-379e-a8e3-4da51e9d0e23.roa
Signing time:             Fri 09 Aug 2024 16:03:40 +0000
ROA not before:           Fri 09 Aug 2024 16:03:40 +0000
ROA not after:            Thu 07 Nov 2024 17:03:40 +0000
asID:                     134465
IP address blocks:        166.0.155.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d2:05:69:09:97:35:f2:83:95:4b:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  9 16:03:40 2024 GMT
            Not After : Nov  7 17:03:40 2024 GMT
        Subject: CN=c595fc88-cdc1-49e0-af5f-26e4fdb1fc36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:10:f9:7a:8d:11:92:3c:98:60:1a:27:da:e5:
                    98:28:c0:6a:ba:a4:af:a6:f8:bc:43:3d:75:ba:16:
                    b8:a7:74:c7:51:21:e5:e2:bf:80:6e:b6:ce:88:64:
                    51:ab:9d:ee:87:f8:d6:0c:0f:1b:e8:24:81:8f:19:
                    cd:f5:7f:80:f0:79:22:a2:20:43:d8:89:66:9d:c3:
                    35:6e:46:cc:2d:42:57:d0:4f:3e:05:9a:04:a2:a4:
                    d8:b5:03:15:03:6f:bc:fe:70:23:94:a7:f4:ff:d2:
                    06:96:af:ab:c6:88:fc:18:4c:6c:8c:e5:f2:06:75:
                    a1:69:60:ab:9c:bd:89:c5:80:ef:f6:4e:0c:f9:8d:
                    47:92:8e:7f:21:a5:ab:0e:ad:d4:fc:82:8f:04:4b:
                    24:3f:8e:d4:96:ce:60:bc:fb:50:53:12:94:a2:dc:
                    93:52:64:66:93:6b:ff:53:9d:07:bd:62:4e:4d:c1:
                    df:5b:42:95:9a:85:38:b0:18:7e:42:c6:fe:8a:eb:
                    0b:a3:8c:39:47:bd:2b:45:9c:a4:19:21:15:4a:a5:
                    d5:0a:37:49:a5:0f:5c:d2:11:0a:08:48:6a:a2:f7:
                    80:36:54:35:5d:51:cc:61:ea:7a:e2:de:b9:dc:4a:
                    53:6c:5c:10:26:8c:5c:57:02:b7:39:c7:61:cc:e1:
                    87:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:94:A4:4C:5B:61:F3:21:D8:0D:C0:46:49:1A:D9:0F:71:7F:B2:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b009c05f-f2ac-379e-a8e3-4da51e9d0e23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ff:4c:d0:43:53:29:9d:2e:60:79:88:f0:6f:04:a0:dc:67:
         b9:e5:99:22:08:31:49:a6:6a:6e:56:2b:ec:bb:b8:14:d0:5b:
         b3:8f:76:d9:97:03:9c:2e:67:86:4a:62:c4:1c:3d:57:39:d3:
         46:44:e7:5b:96:94:8a:b0:bc:a2:f4:80:5d:b0:7e:da:55:02:
         82:6d:13:0f:6b:10:74:9a:2e:b2:9e:f4:31:c8:92:56:81:74:
         86:c2:fe:58:10:4b:8b:ba:41:4b:c8:14:03:ca:f9:ff:74:49:
         73:98:f8:9c:92:d2:d5:98:ee:3c:c8:84:6f:20:c6:2e:32:67:
         57:45:c7:a9:72:eb:94:62:68:29:a1:ae:47:a6:77:42:1f:72:
         b5:f3:e1:a2:39:c3:4a:c7:49:b5:80:7f:04:86:3e:80:03:29:
         8f:4f:89:a1:69:1d:f6:a0:eb:d2:fe:37:7a:b7:32:35:d1:c5:
         e7:6b:e0:47:4a:8b:14:ef:83:e1:3b:64:c0:69:9e:03:89:2c:
         b7:c8:ac:f0:ca:7f:26:7b:ea:e4:73:41:b4:28:0d:58:c2:e9:
         a3:a1:4d:7c:e6:2a:6d:e8:ae:34:f4:32:b0:a8:ac:50:a6:e7:
         c9:5e:b2:97:19:b6:b7:95:30:9a:98:82:0d:cc:49:4b:7e:70:
         a6:7b:48:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:34:01 2025 by rpki-client