Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f12275ac-8c37-395b-96b7-28184fb2aeaf.roa
File:                     f12275ac-8c37-395b-96b7-28184fb2aeaf.roa (raw, json)
Hash identifier:          0t4PhTBD99y4tb9EwzF4lCZ0hJBTl9KpffYPuFl7wHA=
Subject key identifier:   07:1E:62:54:22:DA:3E:6F:ED:0D:9A:0E:9B:AA:17:C6:10:D9:78:7A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848E5675B65159FDD0806EBAA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f12275ac-8c37-395b-96b7-28184fb2aeaf.roa
Signing time:             Sun 16 Feb 2025 00:15:15 +0000
ROA not before:           Sun 16 Feb 2025 00:15:15 +0000
ROA not after:            Fri 16 May 2025 23:15:15 +0000
asID:                     834
IP address blocks:        108.165.105.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:67:5b:65:15:9f:dd:08:06:eb:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 16 00:15:15 2025 GMT
            Not After : May 16 23:15:15 2025 GMT
        Subject: CN=b3444181-c3db-4167-90b7-de4d87724bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d5:76:03:92:5c:ff:bd:0d:9e:53:ad:3e:29:
                    a1:33:1e:8a:ab:c8:e6:71:2f:ec:3f:02:fb:56:bd:
                    b5:13:c0:76:8d:a7:8f:f4:51:ae:be:e6:ca:ec:b1:
                    65:c4:35:0b:db:cc:cc:f6:c9:4c:26:6a:be:e5:87:
                    08:04:9a:53:a2:f6:5c:ef:51:82:3b:1a:66:a0:76:
                    de:b1:0e:46:2e:4a:76:c9:ad:91:3b:a1:68:60:2c:
                    3f:70:15:1e:21:99:27:6f:77:8f:18:d3:e1:99:e4:
                    f9:db:e2:d2:08:c9:ce:77:07:74:c5:c6:43:44:73:
                    65:e8:c4:4a:e9:68:4f:14:0a:fd:aa:39:3c:69:32:
                    38:50:ea:d6:73:b3:81:e8:d8:fb:26:6e:4c:55:7d:
                    ac:4b:93:ae:da:fe:3a:12:47:04:59:93:98:b4:b3:
                    0c:24:b9:b3:54:35:85:e2:f5:ee:59:4f:11:02:e2:
                    41:f0:63:67:47:69:89:8b:2a:e8:5b:56:89:b9:51:
                    c9:2d:b3:45:13:0c:12:b6:09:07:fa:6e:7a:9f:46:
                    79:80:cb:f9:35:2d:df:be:aa:a6:a2:68:00:d2:38:
                    8d:a1:73:bb:b5:2a:6a:c9:91:70:59:f2:50:f0:f2:
                    b7:23:76:4e:ee:ff:67:39:17:1d:13:d9:bf:50:4c:
                    0f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1E:62:54:22:DA:3E:6F:ED:0D:9A:0E:9B:AA:17:C6:10:D9:78:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f12275ac-8c37-395b-96b7-28184fb2aeaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:dc:0d:91:ce:47:ee:79:72:1f:ee:69:15:c1:65:94:b6:a0:
         66:9a:7c:ca:bd:b0:4e:00:0e:92:c1:bb:d5:26:4f:26:59:48:
         5e:c7:9c:bc:1a:18:d5:36:9b:80:ee:c3:90:72:2a:f9:bf:52:
         69:1b:bd:7d:41:50:18:8a:a8:71:71:ed:e9:db:09:8d:1a:1e:
         ce:c5:a1:3b:65:af:aa:13:22:ad:83:6a:7f:1e:2c:1f:90:40:
         02:67:02:35:f2:cf:7a:d5:63:1e:1f:c3:18:c0:56:93:38:f1:
         ed:6e:c4:9f:be:60:f2:fe:92:5a:28:63:7b:3e:82:8e:c0:7c:
         39:8b:51:7e:d2:9c:96:df:c4:f7:b9:95:f0:82:d6:02:04:f6:
         8d:d8:65:3e:6b:a1:57:13:9d:1e:52:cb:56:f5:14:a0:67:8a:
         e3:1c:03:9a:18:8d:df:65:01:c5:a2:c3:61:c6:6e:69:85:6b:
         12:74:8d:89:a0:93:51:c6:2b:a0:fd:2e:f6:8e:f5:db:bd:96:
         91:73:51:d2:c7:0e:6a:2d:ee:6c:ce:75:02:3e:a9:91:30:ae:
         19:4f:ee:51:10:01:5e:74:db:f5:64:44:48:17:26:bd:20:74:
         c2:30:fd:c5:17:6c:f5:5e:05:49:c1:d3:66:59:99:18:07:de:
         08:d8:46:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:03:28 2025 by rpki-client