Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/de0d7efa-37a9-3740-886c-9691d7456cf5.roa
File:                     de0d7efa-37a9-3740-886c-9691d7456cf5.roa (raw, json)
Hash identifier:          183PSqY1hTWYNnP9iq7DRL3uMYtpX52ZJ5tMWKWEez4=
Subject key identifier:   B9:B5:48:CE:45:32:F7:7E:D6:91:94:CC:BF:B1:96:37:A0:62:F1:6C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584766138E4FEE04B10F96BB8B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/de0d7efa-37a9-3740-886c-9691d7456cf5.roa
Signing time:             Tue 01 Oct 2024 16:51:48 +0000
ROA not before:           Tue 01 Oct 2024 16:51:48 +0000
ROA not after:            Mon 30 Dec 2024 17:51:48 +0000
asID:                     834
IP address blocks:        23.26.62.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:66:13:8e:4f:ee:04:b1:0f:96:bb:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  1 16:51:48 2024 GMT
            Not After : Dec 30 17:51:48 2024 GMT
        Subject: CN=5e8e03f2-e0c4-4c8b-9905-0bbb14430c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:dd:46:27:8b:94:ac:71:5e:22:2a:f8:25:
                    06:ab:4e:bc:ea:db:fe:d5:9b:17:fc:99:0f:1b:68:
                    a4:33:b6:53:c3:c1:1c:3a:ef:ba:6f:6f:58:c6:f5:
                    81:0a:9f:98:21:32:42:0c:96:6b:b7:c4:10:94:a1:
                    85:89:d6:06:6d:1a:21:df:5c:3e:b3:34:9f:e7:60:
                    de:4c:33:44:7b:9d:ed:af:bc:0b:e6:b4:a6:8e:13:
                    0d:dc:66:8c:da:36:c0:ce:f5:d7:d0:34:41:3b:21:
                    32:4a:c6:dc:a1:da:ab:1c:51:2c:35:a7:e9:23:94:
                    d9:2b:ac:7d:8c:68:37:5f:ad:96:83:c9:11:09:82:
                    8c:ee:32:bd:c3:c3:04:e8:fe:a3:6f:3d:7f:28:a1:
                    47:19:f0:69:06:90:08:22:bc:8b:4c:f4:ce:83:a6:
                    10:a4:8b:86:9c:a4:f5:81:4f:38:01:10:68:ea:60:
                    62:38:6d:86:7a:bc:f3:4b:2a:e0:ba:99:40:34:ef:
                    cc:dc:f0:27:18:c6:60:9e:7d:1c:6b:75:0c:8a:18:
                    fd:db:52:80:3e:22:f8:5a:c8:ba:c0:50:be:71:54:
                    a1:90:b9:a4:5a:dd:83:a9:64:a0:f6:01:32:54:94:
                    43:20:0b:4c:de:a2:f7:6e:63:e0:05:90:f6:2a:56:
                    63:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B5:48:CE:45:32:F7:7E:D6:91:94:CC:BF:B1:96:37:A0:62:F1:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/de0d7efa-37a9-3740-886c-9691d7456cf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:6e:3f:ed:d9:68:fa:32:79:e9:e0:b8:0c:4a:87:2a:7b:25:
         a0:ef:cd:b8:36:7b:ef:5b:bf:eb:3a:f3:5b:ba:a8:c6:75:b8:
         1f:4a:61:bc:df:be:d9:27:d0:a5:db:b6:e3:40:f0:c5:b5:d8:
         f3:95:7d:ae:69:fc:1e:8e:bf:8e:cd:04:c0:6e:c9:b5:0b:8d:
         c8:29:3d:41:6a:81:ed:78:32:dc:58:57:a6:de:b2:c5:0f:82:
         81:e2:e4:09:19:78:86:aa:fd:51:a7:9d:61:f0:6f:c2:bd:33:
         c7:db:b1:73:b4:d5:d7:df:ea:76:72:23:46:d6:de:a7:37:8b:
         be:93:e3:b9:51:98:3d:70:b2:d5:18:15:e0:b0:b1:c0:4e:4d:
         0f:f5:34:80:4a:14:f3:7d:a7:b8:4e:c8:cb:ed:69:34:1a:f2:
         3e:ca:94:22:2e:dd:09:a4:f5:f7:b5:d6:4d:df:b1:fc:1d:da:
         05:bb:13:a5:95:a4:cb:37:96:31:e1:49:68:e6:23:4b:02:22:
         9e:aa:17:0d:dd:a5:b3:2e:32:4d:99:5a:4d:04:29:fb:be:1d:
         22:29:f6:87:62:02:00:36:66:97:e5:3c:ed:0c:bc:0c:e3:88:
         97:bb:24:ae:db:cc:6a:7c:91:df:e9:e9:38:76:0f:dd:1a:7f:
         58:96:c1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:25:23 2025 by rpki-client