Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f992e160-1770-3702-86f2-bc48e68adf9b.roa
File:                     f992e160-1770-3702-86f2-bc48e68adf9b.roa (raw, json)
Hash identifier:          N5+kgc4sQgdcJPjFsM7SxWYYbVDlWoCSdXxieadCqAw=
Subject key identifier:   84:C3:FC:48:FB:63:EB:38:CE:31:31:20:62:F4:BD:88:9D:88:86:43
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842F61B93B4AA7327BD4AEC0800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f992e160-1770-3702-86f2-bc48e68adf9b.roa
Signing time:             Mon 21 Aug 2023 19:09:41 +0000
ROA not before:           Mon 21 Aug 2023 19:09:41 +0000
ROA not after:            Sun 19 Nov 2023 20:09:41 +0000
asID:                     834
IP address blocks:        166.0.186.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f6:1b:93:b4:aa:73:27:bd:4a:ec:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 21 19:09:41 2023 GMT
            Not After : Nov 19 20:09:41 2023 GMT
        Subject: CN=781064fe-9bea-400c-bf6c-6627481aad52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:87:6a:76:69:7a:a8:d8:fb:60:86:4e:58:ac:
                    29:41:69:6c:be:b5:82:4c:01:aa:86:d5:af:67:94:
                    d2:bc:61:42:43:8c:38:cf:e6:34:08:dc:ec:fa:a6:
                    83:4e:9d:3d:39:47:24:2e:af:86:98:32:32:7f:1b:
                    45:98:08:03:20:2a:1b:88:26:5c:2a:a9:de:55:08:
                    bc:d1:b7:bd:4b:e1:60:57:bc:56:d1:e4:0a:2a:9e:
                    69:ce:8a:56:91:6a:c7:67:57:66:f6:23:4b:e4:ae:
                    da:a4:d2:e1:91:8f:df:77:dc:fb:01:96:cf:75:99:
                    f6:77:05:05:f9:b2:49:94:48:ac:7f:84:a2:3d:53:
                    88:92:3d:99:0a:d4:30:8f:26:09:12:e6:91:af:b1:
                    10:82:6b:d8:40:e1:91:25:eb:0d:fb:57:07:12:ba:
                    2d:c9:d3:a0:95:53:e6:07:8d:92:e0:53:b2:73:eb:
                    3e:0b:4f:01:06:2e:1c:0e:a3:b6:dc:07:49:3c:4f:
                    4a:a5:5b:19:8e:76:79:dd:49:18:bf:7d:6c:da:d3:
                    e0:e4:96:e4:d0:60:7a:52:db:d3:7b:d3:a4:11:8d:
                    ba:3e:b1:6b:11:e0:a2:1d:80:b4:2d:58:1c:a8:0a:
                    61:f2:f7:43:3c:0b:4f:b1:22:5b:32:b1:f8:5c:e5:
                    4e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C3:FC:48:FB:63:EB:38:CE:31:31:20:62:F4:BD:88:9D:88:86:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f992e160-1770-3702-86f2-bc48e68adf9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:f3:be:c6:ea:6e:55:ae:a7:fd:c7:81:c5:bd:e6:db:99:bf:
         74:9d:fb:90:28:73:fb:6d:e6:ac:1c:ce:1b:d7:e6:48:d3:0a:
         e6:f9:b4:b8:eb:00:ae:c7:3b:f7:27:78:e1:93:79:dd:85:f1:
         b9:e3:a3:f9:8c:1c:fa:29:aa:5b:87:ec:f9:9c:8a:58:8b:66:
         cb:8d:5d:ac:a1:a1:9e:fd:ae:bc:b9:30:22:52:eb:19:f1:7b:
         d6:dc:60:62:6b:8b:81:81:d5:be:e4:3f:e9:89:14:54:c2:8e:
         f3:7c:c9:06:42:b6:99:b8:b8:65:3c:80:8d:0c:f1:51:b3:ec:
         8b:fe:1f:30:06:1f:a9:ea:c6:5b:ba:d9:cc:ec:f8:3b:78:3c:
         ed:c8:7e:4f:91:3f:a3:ce:05:57:38:04:30:a5:09:4e:80:28:
         33:bf:f9:61:ed:74:32:2f:95:3c:ad:42:29:0d:f2:5c:c9:09:
         cd:09:34:3f:85:61:5a:2b:3e:75:b9:5c:b7:c5:0e:25:12:f6:
         60:f8:c7:f9:44:23:31:aa:29:e5:96:8b:f1:cf:c1:3c:5d:c1:
         10:98:19:81:a7:84:27:4b:a3:14:14:d6:ee:f9:58:56:5d:c0:
         7c:8a:08:04:38:da:99:2d:fa:5b:d9:d5:2b:e9:de:67:ee:9d:
         11:6f:0c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:18:16 2025 by rpki-client