Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0b77a945-ae11-381a-874b-e330df21b10c.roa
File:                     0b77a945-ae11-381a-874b-e330df21b10c.roa (raw, json)
Hash identifier:          TzUl7wIYeLaLnFg4Iq9iI5pshfl5G95IxmGLr4aQcSI=
Subject key identifier:   57:0A:F5:CB:8F:C5:84:CA:3A:BE:D4:8B:72:5D:FA:28:FC:6F:E7:99
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858485E35AB364FF4B0486E199B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0b77a945-ae11-381a-874b-e330df21b10c.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     49999
IP address blocks:        23.26.209.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:ab:36:4f:f4:b0:48:6e:19:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=d3cdb3fa-4256-40b1-94ca-1d7ff16d08c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:30:7c:41:7b:fb:24:02:3f:6b:62:48:25:
                    1c:e7:31:25:76:8a:a2:e7:06:5e:4c:16:1a:b2:8c:
                    e4:82:36:82:12:68:c9:d8:8a:cb:4d:27:0e:8e:6d:
                    ee:42:74:52:64:36:8f:dc:4f:95:1c:49:08:94:06:
                    42:30:3d:cc:c0:b3:d0:7f:df:68:93:83:c9:50:2c:
                    62:94:0a:a3:d9:6b:8c:99:8e:8e:a8:0d:43:2f:6a:
                    09:2b:65:28:ed:2d:95:6b:ca:df:77:3b:f5:61:e6:
                    5b:d0:b4:2b:a8:16:70:78:aa:a9:84:f8:83:16:09:
                    08:30:45:1d:94:56:bb:ae:e4:2a:69:2e:b6:fd:8d:
                    14:5f:d6:76:c5:2c:44:f8:7e:4b:16:58:aa:67:31:
                    6a:eb:4b:b9:29:54:34:21:bb:9f:34:6a:07:03:0f:
                    a6:75:a4:db:d8:fd:4e:82:57:63:8f:db:98:16:bc:
                    71:bc:3d:90:31:bd:ed:2b:7b:5c:8a:dd:d0:a4:83:
                    53:e4:e2:76:e7:70:3e:d9:b9:8a:b8:b5:04:93:f1:
                    8d:42:bc:3e:0a:ce:15:21:1c:b6:31:a1:fc:a2:c3:
                    39:c6:d5:96:55:5d:5b:0d:8f:e1:d1:de:79:d0:24:
                    96:cc:05:b9:4c:0a:86:25:b2:6f:d8:b9:6d:f3:28:
                    c2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0A:F5:CB:8F:C5:84:CA:3A:BE:D4:8B:72:5D:FA:28:FC:6F:E7:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0b77a945-ae11-381a-874b-e330df21b10c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:23:e0:7a:80:bd:b6:10:5f:42:9b:7e:44:b4:74:92:cc:7a:
         03:28:ec:99:45:38:5e:f5:82:a1:d5:fe:2c:80:f9:a5:49:d0:
         5b:5e:c1:bf:dc:15:5d:c9:5b:f7:2e:35:29:84:d1:b6:c2:e3:
         c6:8c:e5:20:e6:dc:da:7c:c5:ff:0a:84:10:33:47:09:d0:44:
         92:c9:e2:da:00:45:9d:d6:74:1d:f1:12:38:cf:21:35:17:65:
         13:a9:8f:56:b6:d3:7c:24:94:e6:80:24:50:32:a9:b6:ca:28:
         36:f8:36:41:89:f8:c2:94:94:b2:72:85:36:29:df:f0:65:75:
         b1:d9:e0:5b:4b:bf:2d:bd:93:ae:43:ac:05:62:7e:09:f9:73:
         08:d4:ef:03:83:60:b0:47:5e:f4:83:fe:e9:55:3f:cb:a5:92:
         4b:8c:1a:54:dc:65:2d:96:74:ef:24:bd:8b:d9:10:84:41:5e:
         be:3a:d7:b1:51:b9:b9:0c:52:cd:04:84:ac:82:66:70:cd:e3:
         42:ca:7a:20:0b:ce:91:57:de:46:c7:e3:91:96:ed:50:11:3f:
         45:fc:ad:bd:ba:0e:dd:fe:0d:1f:da:be:5d:a8:3b:60:cd:aa:
         8b:0a:fa:c9:8d:11:87:f8:94:ed:37:2c:ba:3a:e5:07:fc:d0:
         a6:b9:b1:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNas2T/SwSG4Zm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk
ZDNjZGIzZmEtNDI1Ni00MGIxLTk0Y2EtMWQ3ZmYxNmQwOGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg4wfEF7+yQCP2tiSCUc5zEldoqi5wZeTBYa
sozkgjaCEmjJ2IrLTScOjm3uQnRSZDaP3E+VHEkIlAZCMD3MwLPQf99ok4PJUCxi
lAqj2WuMmY6OqA1DL2oJK2Uo7S2Va8rfdzv1YeZb0LQrqBZweKqphPiDFgkIMEUd
lFa7ruQqaS62/Y0UX9Z2xSxE+H5LFliqZzFq60u5KVQ0IbufNGoHAw+mdaTb2P1O
gldjj9uYFrxxvD2QMb3tK3tcit3QpINT5OJ253A+2bmKuLUEk/GNQrw+Cs4VIRy2
MaH8osM5xtWWVV1bDY/h0d550CSWzAW5TAqGJbJv2Llt8yjCIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFcK9cuPxYTKOr7Ui3Jd+ij8b+eZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMGI3N2E5NDUtYWUxMS0z
ODFhLTg3NGItZTMzMGRmMjFiMTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACUj4HqAvbYQX0KbfkS0dJLMegMo7JlFOF71gqHV/iyA+aVJ0Ftewb/c
FV3JW/cuNSmE0bbC48aM5SDm3Np8xf8KhBAzRwnQRJLJ4toARZ3WdB3xEjjPITUX
ZROpj1a203wklOaAJFAyqbbKKDb4NkGJ+MKUlLJyhTYp3/BldbHZ4FtLvy29k65D
rAVifgn5cwjU7wODYLBHXvSD/ulVP8ulkkuMGlTcZS2WdO8kvYvZEIRBXr4617FR
ubkMUs0EhKyCZnDN40LKeiALzpFX3kbH45GW7VARP0X8rb26Dt3+DR/avl2oO2DN
qosK+smNEYf4lO03LLo65Qf80Ka5scE=
-----END CERTIFICATE-----