Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d2a38b75-7b48-37bb-9279-10e052103c0a.roa
File:                     d2a38b75-7b48-37bb-9279-10e052103c0a.roa (raw, json)
Hash identifier:          EAzozecy/+wskBBjKU8ECq+5+j0OFxJXsjFYaMjCFiE=
Subject key identifier:   BC:7D:A6:56:72:74:44:F2:81:C5:69:5B:73:B6:6F:54:A3:4F:CD:28
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858452C911CDB7C47AD9021F8E600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d2a38b75-7b48-37bb-9279-10e052103c0a.roa
Signing time:             Mon 11 Mar 2024 16:54:02 +0000
ROA not before:           Mon 11 Mar 2024 16:54:02 +0000
ROA not after:            Sun 09 Jun 2024 16:54:02 +0000
asID:                     834
IP address blocks:        23.26.99.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:91:1c:db:7c:47:ad:90:21:f8:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 11 16:54:02 2024 GMT
            Not After : Jun  9 16:54:02 2024 GMT
        Subject: CN=c6320510-b293-4a61-8d14-14399600817f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:7f:92:63:96:75:79:c7:5a:c2:12:b1:17:
                    52:9b:9d:ce:78:3c:9d:7a:73:98:9c:57:a7:67:91:
                    4b:ed:74:e8:de:ee:80:4e:97:88:6f:89:85:18:f2:
                    11:3e:32:03:51:54:7f:5d:85:6d:f4:64:7b:bf:0a:
                    44:bd:b5:68:76:2f:a5:28:86:b7:ba:76:67:9a:67:
                    cd:06:b8:28:23:69:5d:48:6d:2d:df:34:1e:f4:85:
                    70:5b:4b:97:4c:29:48:65:d4:9f:ea:5f:c6:7b:c9:
                    a6:e3:29:15:03:9b:10:39:bf:12:e3:46:a6:c1:d2:
                    57:0c:52:7b:c1:d6:69:90:be:d6:27:e7:64:4c:a7:
                    a6:3e:9b:39:d4:ee:0b:08:72:5b:fe:9c:7f:6f:72:
                    9e:10:88:38:e6:01:37:05:08:ce:2b:4e:33:4d:c3:
                    0d:57:ea:47:1e:1c:43:00:76:a8:94:21:0c:05:52:
                    8f:97:a8:c4:d3:bc:ff:1f:1e:b3:84:19:e7:ba:b8:
                    f9:3b:8f:df:d1:2a:91:26:6d:8d:1e:54:c3:6a:fe:
                    72:a7:09:dd:33:84:2b:62:cb:e5:54:08:a6:c2:75:
                    87:17:b0:a6:f0:c5:83:ce:6d:12:86:f1:7e:c6:1c:
                    59:b3:9a:6c:7c:04:87:37:c4:c3:5d:dc:ac:a3:a2:
                    c7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7D:A6:56:72:74:44:F2:81:C5:69:5B:73:B6:6F:54:A3:4F:CD:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d2a38b75-7b48-37bb-9279-10e052103c0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:9c:d8:e5:07:e4:6d:94:dc:14:c8:3e:c1:ec:37:3d:83:a0:
         f6:16:4a:20:76:ec:e1:9e:01:cd:7e:87:11:45:9f:b0:79:cd:
         60:12:34:95:54:28:2b:72:d8:09:87:e3:03:94:ae:05:07:60:
         11:33:8f:6c:73:4b:08:97:72:18:9f:de:39:b3:5f:72:8c:e1:
         10:8c:bf:9f:de:9f:0e:e4:31:de:65:71:d9:02:18:11:63:28:
         b8:8f:36:af:1d:2f:d6:77:84:ee:7f:1c:7d:09:06:30:cc:4d:
         f1:8c:11:5d:51:18:8e:1d:9e:4f:15:a9:74:1d:d9:0c:09:20:
         65:74:36:2b:a2:c1:92:13:43:cd:5b:56:b6:ea:de:9b:0d:b5:
         e1:b9:a5:8d:6c:9e:8a:24:6d:e1:80:ec:d0:39:e3:7e:74:90:
         98:de:20:10:f5:f2:e2:1a:f6:25:cb:e1:30:19:c2:c8:fb:cf:
         4f:25:9a:12:84:b4:cc:39:8e:f6:31:45:92:ec:13:e0:9d:87:
         ef:cc:c0:0a:ce:37:79:c6:e2:a4:52:79:f1:22:80:21:47:f0:
         a4:c2:a2:23:f6:76:bc:0e:ac:9a:0f:5d:e4:60:69:74:d3:02:
         29:55:2c:d1:25:1d:d7:6b:51:39:e8:5a:59:b6:df:56:09:f2:
         ff:e7:56:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:32:20 2025 by rpki-client