Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7345450d-e20f-3249-9b02-42b2a0bb673e.roa
File:                     7345450d-e20f-3249-9b02-42b2a0bb673e.roa (raw, json)
Hash identifier:          BvMo7sp1BMihvPzGCjU5bVAme5nCE7Z96RZN0D/lTq8=
Subject key identifier:   85:6E:AA:79:8A:F6:C1:88:B2:E2:D3:36:F8:8A:8F:03:9E:9E:A0:C9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584851A58483BA9E90E6CF1F6C40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7345450d-e20f-3249-9b02-42b2a0bb673e.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     148996
IP address blocks:        23.26.205.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:84:83:ba:9e:90:e6:cf:1f:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=e658b7e8-30e4-45a5-be4c-e657a9a6307d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:47:f1:3a:f5:2f:1a:c9:fd:41:ff:73:c7:ab:
                    d3:c9:51:f4:cf:bc:8f:03:9c:12:84:ef:8e:ea:f6:
                    cd:69:ea:7c:e5:f5:7e:a2:33:dc:ba:18:6b:84:d8:
                    28:4b:37:e4:d0:6c:a1:88:12:44:fd:b8:f5:8c:9a:
                    25:28:c2:19:28:05:be:82:20:4c:ca:de:f8:41:0b:
                    f8:2b:4a:5f:82:56:2b:62:85:5f:a8:79:8a:56:09:
                    53:e5:8d:ce:2f:f2:63:e0:17:07:f3:59:24:ee:68:
                    59:2e:32:58:ed:f6:7a:3b:41:58:9f:f9:4c:c8:78:
                    dc:da:63:59:07:c2:2a:a0:10:da:f2:f9:91:4c:ae:
                    7f:02:1e:5a:73:4f:2a:63:91:03:60:b6:a6:47:90:
                    f7:91:a8:ea:92:89:26:1a:cb:7b:71:b2:09:b3:12:
                    f0:c2:05:d5:cd:0c:4b:87:2e:4d:69:f1:15:b0:52:
                    25:ee:c0:20:00:e7:cd:37:dd:0c:7e:05:b6:d5:b7:
                    8b:8a:e8:1e:cb:1b:ee:1e:16:ee:0a:00:21:0e:d3:
                    db:d4:11:6f:c2:da:94:a6:2f:f2:5c:ad:08:78:23:
                    61:7e:c3:05:70:d6:a6:19:78:b5:a2:5c:45:80:b9:
                    09:0c:5f:8c:d1:cd:9e:bb:cb:aa:52:f5:33:29:65:
                    b6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6E:AA:79:8A:F6:C1:88:B2:E2:D3:36:F8:8A:8F:03:9E:9E:A0:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7345450d-e20f-3249-9b02-42b2a0bb673e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:0e:88:26:1c:42:84:ab:1e:be:56:46:99:8a:7b:9d:c0:d3:
         b9:d0:33:76:1d:05:a3:7a:14:79:6a:8b:1e:6e:2f:c5:f6:dd:
         28:87:a5:88:46:67:63:4c:a7:f7:e5:5d:82:fa:45:fe:7c:4d:
         c7:8d:8e:b0:69:4d:fa:2a:3f:40:98:d6:d4:19:9e:e2:94:80:
         e7:46:bd:20:a3:1a:54:2f:e4:bb:f3:50:51:ef:72:84:88:94:
         c9:d4:a0:48:bc:21:9d:68:2e:bb:f8:02:b8:d9:b5:ed:38:3d:
         d9:92:3e:4e:94:88:74:d7:64:af:70:39:87:c9:c2:cc:e6:e9:
         a5:6c:5d:8e:95:7f:f9:0d:2c:96:e0:05:a2:1c:06:51:c2:b7:
         98:4d:fc:c6:3b:23:bd:86:3c:bf:a7:5d:5f:84:dc:bf:cb:cf:
         26:2e:d4:cd:a5:ca:8b:58:9a:76:c9:09:c3:6c:fc:50:53:27:
         31:86:b9:e8:63:39:bc:c5:6e:96:0e:65:c7:8f:f1:fc:b7:63:
         3e:70:d7:f7:07:68:4c:92:ff:5e:1b:58:bb:bb:ea:19:e9:29:
         40:9b:6d:b4:f2:7c:86:2e:74:6d:ac:2d:6e:42:2e:5d:ec:6d:
         e6:fb:c4:11:95:b8:60:41:12:e8:a7:1d:a0:65:04:ea:6e:ef:
         56:66:07:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----