Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cda35ae3-f5fa-3886-b3c7-cc7d270f4c86.roa
File:                     cda35ae3-f5fa-3886-b3c7-cc7d270f4c86.roa (raw, json)
Hash identifier:          scT1/PKB32fCj7sJXlFxiOSXzaXDmvzEWGYYbEnM62E=
Subject key identifier:   C4:83:08:7D:36:B7:A3:98:C2:03:B2:28:F0:B6:F7:37:2B:5F:FF:8D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842ACCE81EA30A72902C732A600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cda35ae3-f5fa-3886-b3c7-cc7d270f4c86.roa
Signing time:             Wed 26 Jul 2023 13:00:20 +0000
ROA not before:           Wed 26 Jul 2023 13:00:20 +0000
ROA not after:            Tue 24 Oct 2023 13:00:20 +0000
asID:                     174
IP address blocks:        23.26.155.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ac:ce:81:ea:30:a7:29:02:c7:32:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 26 13:00:20 2023 GMT
            Not After : Oct 24 13:00:20 2023 GMT
        Subject: CN=bad88833-4c37-4a39-a682-170ca92c0a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:25:4c:2c:c6:0d:7e:53:e7:91:d2:d9:8c:50:
                    05:ee:9a:22:40:59:cc:73:42:fb:73:49:b8:9a:10:
                    ba:29:40:49:0a:a6:b4:03:f3:d6:08:96:f9:87:64:
                    ea:41:e1:45:89:67:a2:59:3f:c6:41:53:73:29:80:
                    dc:f4:f0:ef:a4:fc:1a:cf:9e:0e:92:56:6e:a8:be:
                    a6:2e:b8:e7:76:88:83:9a:0c:23:a1:42:5f:03:bf:
                    94:0d:09:c4:b9:96:a3:a6:3b:9c:bf:9b:16:c1:3a:
                    2b:3f:e1:b7:cc:36:a7:ff:c8:d8:7e:f9:29:81:99:
                    f6:41:6b:83:05:9b:50:1e:6c:b7:6d:e9:52:ef:f3:
                    f0:42:e0:e7:f3:86:b7:56:4f:12:b1:b5:27:d5:53:
                    68:fa:22:c6:57:59:4a:71:ec:4f:2b:5f:3a:17:09:
                    91:89:f5:fd:d8:87:25:ac:f5:38:db:e8:bc:e0:5a:
                    76:b8:a6:d1:3b:3e:4a:cb:01:4d:46:fa:8e:7b:ad:
                    66:ce:a6:9a:8c:67:44:c1:12:1d:23:51:d7:60:7a:
                    6c:7e:41:d4:8f:65:c7:fb:de:09:8c:16:fd:3d:88:
                    05:56:7c:df:d1:26:03:8c:c5:94:15:7d:6c:a4:8e:
                    e7:ea:02:4b:2d:6f:cf:85:1c:ca:b1:80:97:6d:35:
                    ac:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:83:08:7D:36:B7:A3:98:C2:03:B2:28:F0:B6:F7:37:2B:5F:FF:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cda35ae3-f5fa-3886-b3c7-cc7d270f4c86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:dd:af:0a:6f:83:1a:8d:4f:59:6b:fa:ba:fe:f4:7d:84:42:
         c7:5e:31:c0:07:75:f9:4c:c8:d1:c2:db:5b:fc:34:63:bb:9b:
         0f:05:b2:4a:93:01:6f:39:da:91:d2:00:d3:73:ac:b1:f1:91:
         9c:4c:b1:40:66:51:5d:db:14:dd:0f:5b:da:05:97:2c:9a:00:
         13:a1:46:9e:7c:5e:24:7b:30:f7:1e:a7:12:c5:d4:23:b7:9b:
         6e:55:62:70:8b:d9:0f:4c:b9:22:cf:83:44:02:69:63:34:08:
         1e:e4:b0:d5:4f:13:9d:4a:5c:d3:03:c8:e7:b7:64:a0:f0:02:
         30:7a:35:5a:cc:ab:1f:6a:d3:81:50:d7:fe:8e:5b:e5:b7:b4:
         9e:7a:ff:26:87:d2:c5:06:8a:ea:db:cb:43:42:b3:b7:9b:1d:
         19:74:40:cc:61:03:e5:7f:f3:60:2d:5d:0c:66:11:88:ce:de:
         aa:9e:d7:b5:9a:12:21:63:d2:be:27:6d:6f:a7:7c:c8:2a:02:
         28:54:1b:01:97:59:5a:83:13:53:f6:f1:05:cd:b9:62:5f:95:
         26:25:ef:b9:a8:70:b3:2a:81:11:8c:fd:e8:3d:de:5b:2a:74:
         d7:9a:43:af:d1:aa:d9:69:d2:97:49:1c:82:e2:29:0f:b7:ea:
         19:ab:38:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:03:42 2025 by rpki-client