Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8bc8439b-0c22-30de-be2d-e419b521979f.roa
File:                     8bc8439b-0c22-30de-be2d-e419b521979f.roa (raw, json)
Hash identifier:          Ey4B8JACNh6gsQUgni4P6SWxQmIQFhBk6liBMW/UVk8=
Subject key identifier:   56:08:04:BE:08:D4:64:98:90:2F:BD:F2:14:B6:D1:5D:C5:9A:8C:F1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285846970A5FBD3F96DF9F8FFE5080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8bc8439b-0c22-30de-be2d-e419b521979f.roa
Signing time:             Fri 19 Jul 2024 13:00:35 +0000
ROA not before:           Fri 19 Jul 2024 13:00:35 +0000
ROA not after:            Thu 17 Oct 2024 13:00:35 +0000
asID:                     212238
IP address blocks:        23.26.39.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:97:0a:5f:bd:3f:96:df:9f:8f:fe:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 19 13:00:35 2024 GMT
            Not After : Oct 17 13:00:35 2024 GMT
        Subject: CN=b38bc14f-69e0-4577-a713-1f62cfec7a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:46:ab:6d:08:04:46:d3:ba:9d:69:8e:c6:d9:
                    8a:47:90:a6:26:61:90:a4:96:cc:1f:e9:31:e3:19:
                    c8:1a:35:b1:6d:e3:02:3e:05:52:d9:d8:75:ba:6b:
                    25:68:91:88:f0:23:64:72:71:bf:ce:c0:ce:dc:57:
                    05:aa:94:96:a9:db:7c:f0:d7:52:a4:fd:0e:62:4e:
                    de:18:7a:33:0c:00:9d:f8:a5:b8:3e:b3:a4:97:95:
                    e6:89:aa:d7:8e:ef:c2:ee:ed:a0:e8:43:c9:6a:ca:
                    e8:7b:09:2e:7c:34:4e:b3:ff:33:1b:2c:b8:d6:66:
                    41:45:bc:23:80:fa:21:91:5f:e8:9f:23:b6:0c:61:
                    0c:cb:d9:ce:db:d1:eb:4f:33:31:28:6e:66:06:e4:
                    1c:2b:40:e0:2d:e6:56:60:f8:58:26:bb:7b:34:af:
                    7e:6e:71:7a:f8:43:e0:5e:06:c8:90:b1:13:e9:ec:
                    f8:94:1e:aa:93:91:bb:42:d7:e0:08:45:d7:96:94:
                    3d:e9:dd:46:85:57:9d:d6:fc:48:b4:47:bf:b8:b7:
                    48:ef:d1:f3:75:71:4d:24:34:fd:c9:86:34:45:9b:
                    da:ef:28:d4:ba:e3:8a:56:00:ee:9f:1a:36:ff:b6:
                    71:0d:73:82:8b:c4:d4:ee:bd:b6:71:04:38:d6:87:
                    10:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:08:04:BE:08:D4:64:98:90:2F:BD:F2:14:B6:D1:5D:C5:9A:8C:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8bc8439b-0c22-30de-be2d-e419b521979f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:67:9f:dd:6a:83:7d:d3:73:ea:c4:59:ec:8f:58:1a:10:39:
         13:6f:5b:2b:66:fa:c1:6a:91:54:91:3a:bf:0e:cd:40:41:5c:
         1f:9f:bb:4d:08:b1:82:f4:32:34:a7:a7:c4:b3:56:5f:90:77:
         a9:ab:f0:6e:79:2c:3e:82:7d:56:0f:1c:16:12:21:23:1a:b4:
         cb:27:9f:cc:b4:fd:1d:54:46:a2:28:56:ac:1b:78:01:58:b1:
         b0:31:9e:ca:5b:ca:6e:b7:b1:09:8b:37:00:a0:57:e3:1f:87:
         44:07:51:68:6c:8b:84:91:26:ef:50:b8:5f:1d:eb:57:fc:86:
         49:1b:e7:1d:a9:a4:fa:e8:44:25:bb:90:46:fd:ca:31:5b:f3:
         d5:69:ad:13:b5:de:96:6e:a0:b3:0c:59:15:0e:82:02:fd:f4:
         bb:9e:28:a7:fa:5f:4e:25:28:3d:55:35:22:a1:e8:4f:21:75:
         59:b9:65:bd:3b:37:8a:33:e8:18:5d:46:f9:f2:d3:7c:65:49:
         b6:f9:43:8d:35:12:04:91:d9:f0:e1:0a:3e:f2:d8:56:2b:26:
         e5:2d:87:34:e0:69:1f:5c:d7:84:8d:8e:e7:49:ec:52:ea:97:
         06:38:7a:c1:1a:cd:47:00:58:39:1e:80:54:2c:7b:08:f5:5e:
         35:83:15:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 03:07:19 2025 by rpki-client