Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c4513cc5-f42e-3d51-b313-b2d1713b67d1.roa
File:                     c4513cc5-f42e-3d51-b313-b2d1713b67d1.roa (raw, json)
Hash identifier:          kRoXspijToI7nmX7ZC3dQ2F8k58jSKPdzov0R+ua1N8=
Subject key identifier:   7E:04:48:48:F1:6C:EE:CE:67:EA:C6:50:37:A9:BC:8D:4D:B6:9B:28
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285846970A5D9D81DF9BF079547400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c4513cc5-f42e-3d51-b313-b2d1713b67d1.roa
Signing time:             Fri 19 Jul 2024 13:00:35 +0000
ROA not before:           Fri 19 Jul 2024 13:00:35 +0000
ROA not after:            Thu 17 Oct 2024 13:00:35 +0000
asID:                     9009
IP address blocks:        166.0.94.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:97:0a:5d:9d:81:df:9b:f0:79:54:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 19 13:00:35 2024 GMT
            Not After : Oct 17 13:00:35 2024 GMT
        Subject: CN=31aa1c61-c51a-47fa-9348-5be3b1fc627d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4d:01:69:30:49:16:f7:43:fa:46:25:28:b5:
                    8e:3c:d2:35:43:19:fb:06:7a:a5:db:3c:f5:de:37:
                    c0:94:7d:10:cb:a5:f5:23:7e:ce:61:85:0c:2f:f8:
                    1f:87:e1:a2:b8:20:53:17:db:31:4a:31:e3:b8:d1:
                    f3:65:24:e5:69:be:f9:90:fc:da:20:e9:da:7a:a2:
                    a7:4a:d1:ac:6e:17:b8:70:70:58:fd:74:77:24:5d:
                    36:ea:53:41:af:a9:2c:9c:5a:4a:e9:df:ab:79:24:
                    d2:27:fb:47:99:34:88:54:10:81:8f:70:9e:00:55:
                    9c:2f:15:ea:e0:a8:0b:e0:4c:2f:45:5f:48:89:0e:
                    95:57:5b:10:51:4c:44:94:61:a2:be:ad:52:df:28:
                    00:b6:3e:51:4a:72:83:d1:c4:67:50:9c:62:65:92:
                    de:ea:01:d7:12:58:ba:0e:7f:4f:e6:b5:7a:ff:65:
                    63:cd:40:a9:06:8b:b6:4e:6f:87:46:e6:75:3a:43:
                    70:4a:1a:d7:7e:07:62:df:62:f5:dd:7b:3f:da:ab:
                    c6:c8:2a:07:93:aa:de:3d:0b:b5:6b:44:05:c1:8b:
                    c4:d7:cf:38:e0:d4:d0:bb:d4:24:b6:4a:7b:a9:ca:
                    09:27:14:97:0f:36:da:94:9b:cc:33:a9:16:54:a9:
                    4a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:04:48:48:F1:6C:EE:CE:67:EA:C6:50:37:A9:BC:8D:4D:B6:9B:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c4513cc5-f42e-3d51-b313-b2d1713b67d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:51:9b:23:51:82:f1:ad:ed:a2:83:78:cb:e2:e6:24:40:03:
         2f:f8:46:37:4e:db:5b:6d:18:8f:1c:2b:8d:47:72:1e:67:df:
         c0:aa:42:e3:1b:22:d4:b7:cd:6c:0c:42:a4:97:5a:44:f3:f4:
         41:d2:24:52:de:fc:7c:85:2f:30:01:0b:e0:69:06:a0:9c:d4:
         23:54:56:41:50:8d:3f:48:75:e9:e5:ad:6c:db:bd:a8:9f:60:
         3b:f5:2f:99:fc:75:ec:ac:d5:98:1d:ef:52:bb:93:37:1f:e3:
         e7:fb:0a:9b:e8:4d:bf:e4:65:88:0c:41:a3:3f:81:f2:cf:7c:
         76:59:93:56:51:7f:3b:1e:7a:81:ef:57:50:07:2d:52:d0:7d:
         06:52:0a:79:61:2a:89:92:94:80:da:3c:c6:62:25:6e:48:fd:
         4b:f2:81:d5:c0:aa:bc:de:7c:b3:44:d9:3a:32:df:ca:7d:15:
         7c:9c:be:c0:cc:e0:15:4b:bf:aa:39:a9:71:5a:e3:71:a5:2c:
         a6:bf:af:dd:ce:b3:0a:51:35:d9:4c:23:dd:e4:49:af:80:e8:
         a3:cc:8b:2e:fc:47:32:ff:78:c4:a0:e8:05:a3:3c:62:2d:6c:
         e1:eb:c6:38:ba:56:28:a2:f0:43:a9:85:f2:40:9d:a7:a5:94:
         a3:96:13:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:51:34 2025 by rpki-client