Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d452183a-8ea3-39a7-8524-eda02bff07ba.roa
File:                     d452183a-8ea3-39a7-8524-eda02bff07ba.roa (raw, json)
Hash identifier:          zY63pFzMZQqkBTq9cP647JddTDhd1Ro4uY/awWvRHyA=
Subject key identifier:   68:91:B6:0D:B1:FF:E0:ED:64:4D:BF:78:D9:4B:A7:26:D0:10:2A:D4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285846D20AF0EB2CECF3F9E33AAA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d452183a-8ea3-39a7-8524-eda02bff07ba.roa
Signing time:             Fri 09 Aug 2024 16:14:49 +0000
ROA not before:           Fri 09 Aug 2024 16:14:49 +0000
ROA not after:            Thu 07 Nov 2024 17:14:49 +0000
asID:                     54600
IP address blocks:        23.26.24.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d2:0a:f0:eb:2c:ec:f3:f9:e3:3a:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  9 16:14:49 2024 GMT
            Not After : Nov  7 17:14:49 2024 GMT
        Subject: CN=ac44a5fe-c439-4d4f-ac26-9a74b6bbc18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:23:6a:17:62:20:93:01:f2:f5:5b:1d:9d:e5:
                    11:bc:52:d6:fc:16:b1:8d:51:11:ff:0f:58:5e:5b:
                    8d:b1:d1:74:b9:9b:92:b1:7c:d5:20:2f:7d:e5:70:
                    a4:70:2a:61:dc:c4:75:e9:5c:4e:af:8d:88:60:3f:
                    24:46:7d:48:40:0f:e3:29:05:79:59:c1:59:a7:89:
                    ca:ce:49:62:f2:8f:e3:71:fd:f4:c7:d4:44:e7:cc:
                    ab:c1:b8:cb:11:cd:f3:07:55:32:36:65:00:6a:b5:
                    2d:db:44:ef:f9:3e:63:b0:f7:44:25:7b:82:f4:2d:
                    94:45:5f:ba:40:04:6e:9d:ef:b1:d1:67:9c:6c:57:
                    6f:1c:7d:75:61:1b:b2:d8:b7:a2:e8:0e:61:cb:10:
                    91:fe:6e:82:a8:06:59:66:b9:c9:d8:bd:3d:8d:ea:
                    cc:fd:4d:14:f6:58:a0:96:1b:7f:18:98:ca:ea:b4:
                    b0:a0:ea:cd:9e:75:dc:51:60:e8:31:1b:21:cc:05:
                    87:89:f4:f9:6e:ad:18:81:4a:54:3b:ac:4d:46:b4:
                    72:bf:35:da:05:fb:45:32:72:3e:39:4d:42:fb:ca:
                    cd:77:ed:1a:5f:d1:86:e3:12:70:3a:d5:63:bf:4f:
                    7c:f9:77:45:4f:c8:68:1a:e0:02:98:77:06:c1:f5:
                    30:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:91:B6:0D:B1:FF:E0:ED:64:4D:BF:78:D9:4B:A7:26:D0:10:2A:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d452183a-8ea3-39a7-8524-eda02bff07ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:af:ff:0d:9c:87:56:8a:df:d6:28:d4:1f:11:5f:b3:1b:62:
         89:eb:21:e7:4e:78:3e:ee:7e:6a:13:64:4a:fe:49:dc:96:09:
         1b:b5:f2:5e:d0:40:41:8a:07:56:d8:6e:47:90:a1:59:b4:93:
         7d:e8:18:af:6e:4e:59:fe:1f:69:b5:37:64:19:37:7f:30:98:
         67:61:e1:13:fc:ba:89:1e:ca:c5:9d:38:c3:79:b2:68:6e:33:
         e8:0b:57:99:b6:73:3e:0e:36:de:43:ac:0b:81:28:6f:8f:fa:
         80:83:25:fd:0c:98:98:e0:4b:ad:75:19:a5:e7:90:45:80:17:
         f7:12:53:86:fd:c1:a9:37:78:b2:a5:5e:cc:ef:87:24:83:2f:
         c7:1a:b1:23:61:47:f4:db:13:a0:47:7e:57:50:36:a9:96:27:
         ca:2a:ef:61:f9:4d:83:b3:e0:8d:0e:68:f6:d6:9b:ae:48:c7:
         6d:01:e9:f3:2c:98:33:1e:9d:87:d1:52:9d:ca:c8:35:f0:24:
         ac:39:a5:bd:c2:23:65:d1:30:88:f3:a8:53:56:06:2d:27:0d:
         74:73:56:f7:44:65:77:4e:f8:47:8d:a3:2d:d3:c5:2f:13:60:
         30:42:40:6e:f6:9a:9a:ed:02:bb:da:ca:1e:21:3e:62:d7:0b:
         ad:a5:1e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:05:17 2025 by rpki-client