Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0ed8458-319c-3485-9a28-80d2b56359b5.roa
File:                     c0ed8458-319c-3485-9a28-80d2b56359b5.roa (raw, json)
Hash identifier:          LGPOjRPz62lkmDm94bHSuMe4uv1uyw1AiyjLE9pvf1I=
Subject key identifier:   0B:96:7C:9E:33:2D:A8:79:BA:F2:D4:22:6D:19:B1:FA:0C:7D:69:6F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844883A970B9DBE78D81F70D060
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0ed8458-319c-3485-9a28-80d2b56359b5.roa
Signing time:             Fri 12 Jan 2024 20:07:07 +0000
ROA not before:           Fri 12 Jan 2024 20:07:07 +0000
ROA not after:            Thu 11 Apr 2024 19:07:07 +0000
asID:                     834
IP address blocks:        108.165.92.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:88:3a:97:0b:9d:be:78:d8:1f:70:d0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 12 20:07:07 2024 GMT
            Not After : Apr 11 19:07:07 2024 GMT
        Subject: CN=311ed54d-c46a-4284-ac5f-59a3ac619b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:11:54:a5:5d:2e:ff:ab:e0:63:d7:ee:57:45:
                    9a:36:b0:de:3c:24:c4:0f:eb:af:7d:1c:fa:f6:c8:
                    d5:6f:54:5c:24:34:f1:c7:4d:bd:0c:b2:f9:ce:b1:
                    53:c1:64:8b:b3:19:cb:63:a3:24:42:e6:6a:af:29:
                    bc:79:f3:f3:bf:93:00:0e:20:67:ec:51:af:2d:8a:
                    ae:ca:6b:41:0a:8e:e0:d4:2b:3d:e8:30:94:8e:f3:
                    76:55:d3:de:9e:74:16:08:6e:3c:78:fb:0e:d2:49:
                    49:5b:89:db:fc:2c:fc:ab:33:55:05:fe:80:c4:9e:
                    97:16:08:97:07:f7:51:cc:83:31:93:17:6b:bf:8d:
                    19:57:34:f3:72:64:c2:42:45:0a:52:c7:64:15:4e:
                    2e:fa:55:c1:a7:92:37:40:02:66:be:fb:4e:45:67:
                    ea:b6:aa:98:f6:b4:79:28:af:30:c2:a3:2b:4b:26:
                    ed:fd:66:f1:76:fe:37:1b:8b:63:9c:ed:1a:30:c1:
                    11:1e:de:7f:b6:42:ca:8e:65:ab:b0:3e:82:f9:fb:
                    fe:c2:1e:7a:51:de:5d:7f:c3:e4:31:dd:89:06:80:
                    b2:14:d2:e0:17:1a:28:91:9c:c8:48:ef:3f:ea:a0:
                    ec:fa:31:7f:03:4a:3f:d6:6e:00:f5:4b:05:e1:7f:
                    29:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:96:7C:9E:33:2D:A8:79:BA:F2:D4:22:6D:19:B1:FA:0C:7D:69:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0ed8458-319c-3485-9a28-80d2b56359b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ca:25:5b:1d:28:2a:af:d8:0a:6a:c8:ba:96:53:1f:ed:70:
         9e:5d:5d:a7:6d:f8:90:63:ec:5c:96:e1:ce:40:bf:a0:49:66:
         e2:2a:1c:0d:9b:75:b1:55:43:c1:2d:ce:1d:68:9d:f1:89:b9:
         13:d5:19:20:b9:fc:5f:e8:e0:9f:bf:7a:2e:4b:7c:0c:5c:53:
         25:bb:02:1c:90:39:2b:64:4d:04:71:aa:32:91:2a:62:76:2b:
         b4:ae:77:20:4a:36:27:7c:90:65:0d:a6:c1:4a:b1:98:64:dc:
         7c:c3:c0:77:69:dc:d9:35:cb:38:d1:96:21:52:a0:06:73:e1:
         cb:c5:8f:0f:9f:05:98:d6:0d:5f:ad:b9:85:ce:d9:e8:ba:08:
         62:e3:e5:f4:f4:b9:a8:d0:3d:f2:24:42:76:61:19:7d:8d:18:
         e1:0c:2a:ee:91:97:44:3d:00:7d:51:63:a6:f2:80:10:5a:59:
         ab:6d:f4:66:ea:4a:6a:f8:b6:ed:10:4d:78:61:da:55:05:af:
         21:a8:8c:5d:b6:ab:1e:ca:3f:5f:bf:72:dd:bd:71:e4:20:8a:
         50:87:65:60:01:3d:c5:4c:b4:e2:d3:f2:b0:44:87:c9:96:03:
         51:2a:e4:68:06:2e:0d:61:03:f2:29:1c:d9:99:cd:0b:c7:46:
         01:ca:85:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:19:21 2025 by rpki-client