Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bd7ec53b-e3ec-30e2-8edf-fa0a9e8b0ba1.roa
File:                     bd7ec53b-e3ec-30e2-8edf-fa0a9e8b0ba1.roa (raw, json)
Hash identifier:          du/Fr2Set2qaTGY2d8XSy8yydV198vseXA8fOml9bng=
Subject key identifier:   B2:C8:D9:5F:BE:60:B4:2A:F1:B9:E0:0E:D8:15:B0:3A:34:6A:80:68
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583D138492AD28BD4CBB8082C570
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bd7ec53b-e3ec-30e2-8edf-fa0a9e8b0ba1.roa
Signing time:             Tue 05 May 2020 04:00:00 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Sat 01 Jun 2024 04:00:00 +0000
asID:                     139660
IP address blocks:        166.0.189.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:13:84:92:ad:28:bd:4c:bb:80:82:c5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : Jun  1 04:00:00 2024 GMT
        Subject: CN=83dc6003-47dc-4555-a714-7db10d17a39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3d:d2:e7:91:6b:93:9b:5d:a9:26:0f:37:ed:
                    ac:57:1e:e2:70:42:e6:d5:f3:72:32:cf:58:37:06:
                    55:44:4e:59:4f:d4:4d:aa:6f:f6:24:66:6c:90:1d:
                    aa:07:a6:85:c8:37:4c:09:97:92:e2:10:3a:56:35:
                    b9:1c:71:2e:d0:ef:93:29:f9:25:ca:6a:63:9e:d3:
                    a0:f7:c7:c5:ea:f2:4e:20:01:e8:2f:dd:47:2e:fc:
                    ae:a5:87:68:85:e4:2b:f0:29:46:ed:fc:06:69:b8:
                    61:62:ab:3e:35:f3:99:d9:5a:44:ff:de:6a:9c:18:
                    90:bb:11:e4:4f:fe:14:59:91:a7:42:e6:18:84:2f:
                    a1:9a:3f:04:49:bd:4a:37:12:cf:83:cc:f7:bc:fe:
                    d5:7a:45:8f:f4:cc:e2:af:06:c9:ca:41:2b:5b:d7:
                    d5:a3:c5:92:ca:23:be:3b:52:e5:a5:18:3a:b1:eb:
                    05:13:ae:de:a3:b3:a9:bc:5c:0f:aa:9b:cd:49:86:
                    d3:e7:1a:15:65:48:31:ec:c1:4c:44:2a:ef:0b:0c:
                    8e:80:12:af:d0:a8:92:82:70:6d:3f:40:fd:ff:8c:
                    20:f2:f6:c5:05:d0:8d:7b:6a:9e:8e:f3:cf:fd:c8:
                    56:eb:73:88:8b:b0:32:01:35:14:e6:69:a8:0d:0f:
                    8b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C8:D9:5F:BE:60:B4:2A:F1:B9:E0:0E:D8:15:B0:3A:34:6A:80:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bd7ec53b-e3ec-30e2-8edf-fa0a9e8b0ba1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:de:9b:a9:2f:30:c5:d5:fa:25:8f:79:21:c9:4e:20:c3:a5:
         ab:46:7b:b4:c8:b1:72:ab:7f:15:83:f8:ac:df:17:cf:00:f0:
         d1:a8:02:65:b0:68:94:c7:08:11:c3:1e:d2:f0:61:88:af:25:
         94:23:6c:9c:2d:0a:7d:15:98:22:4d:29:14:4b:b4:1d:29:a1:
         9e:ae:7f:08:32:09:7f:44:cf:29:65:8a:77:59:9f:5a:0e:7f:
         d6:84:b6:30:7d:44:f3:61:4c:f1:03:6d:ba:2c:b5:af:ab:d2:
         17:d1:b4:f0:5f:f0:81:11:c9:69:a4:0f:97:7e:0a:98:d1:39:
         ce:07:07:02:5c:e2:e1:4a:98:b9:02:9c:c4:15:72:59:62:d6:
         4b:c1:f0:0c:0d:9f:92:11:88:36:9a:5c:55:a2:61:c0:21:b9:
         3c:ae:60:71:b9:74:81:b3:c7:9c:b0:df:35:da:92:2d:8a:31:
         70:72:85:e3:a5:e7:b5:e7:73:ac:93:b3:93:4a:aa:9d:87:a9:
         97:36:33:7b:9d:6e:3e:ea:7a:ec:23:19:d3:a1:9b:12:6b:6c:
         91:76:c4:ff:65:9b:f5:f6:6a:85:ac:ce:a9:f0:08:dc:43:60:
         8d:75:f7:18:86:4d:7d:d9:0d:54:1f:07:1c:b1:2e:4f:02:3c:
         89:e0:7d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:38:06 2025 by rpki-client