Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/df0d7988-a542-33d6-8d56-7e5b5a7b2c50.roa
File:                     df0d7988-a542-33d6-8d56-7e5b5a7b2c50.roa (raw, json)
Hash identifier:          u5oWUix3nKZ7seNagD+cJpsxphJph4YJJeBsdn0IPx0=
Subject key identifier:   D7:77:15:F0:C5:C6:F9:F1:9D:F7:8B:7C:8B:34:AE:FF:A1:3E:16:6D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858482C7DDEE12526ADF255119840
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/df0d7988-a542-33d6-8d56-7e5b5a7b2c50.roa
Signing time:             Wed 11 Dec 2024 18:36:04 +0000
ROA not before:           Wed 11 Dec 2024 18:36:04 +0000
ROA not after:            Tue 11 Mar 2025 17:36:04 +0000
asID:                     33335
IP address blocks:        23.26.60.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:7d:de:e1:25:26:ad:f2:55:11:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 11 18:36:04 2024 GMT
            Not After : Mar 11 17:36:04 2025 GMT
        Subject: CN=9997c932-ad24-46fe-ba50-658ed23f6130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d4:76:9c:07:3a:25:76:41:e6:d8:d1:0d:19:
                    e5:a7:94:62:d9:76:37:d0:dd:91:50:92:42:dc:69:
                    3b:82:e6:e7:44:e2:16:34:88:93:f6:c6:3e:8b:58:
                    9c:54:a4:49:fc:17:8c:46:46:b4:f2:a9:82:2c:79:
                    62:53:78:5a:f4:71:a7:2b:4c:23:06:a9:b0:22:1e:
                    77:1f:53:0b:00:13:2c:46:23:88:c4:7c:1d:39:88:
                    3e:61:0f:41:55:37:47:ab:5f:19:bb:30:bd:4f:64:
                    e9:d8:29:82:d0:07:bb:c8:e3:fd:1d:3d:77:98:68:
                    c3:32:0d:79:71:fb:5c:b3:27:02:4e:8a:3f:43:cd:
                    9a:ad:ab:0b:01:a5:b4:0e:50:15:70:ac:22:6b:5d:
                    17:bf:12:df:5a:a8:da:49:b5:52:85:6a:c9:58:85:
                    76:bc:bb:44:9b:9d:31:89:e6:c4:64:f7:80:d4:d3:
                    6e:d4:41:cf:b8:6e:bd:27:5b:c0:fb:ee:49:5a:53:
                    b9:d4:a1:a1:39:b0:5e:85:bd:4e:01:12:49:52:bd:
                    a3:66:ac:61:43:aa:04:34:85:f7:2d:1a:b4:a9:b7:
                    56:e9:13:9c:dd:13:d5:05:3d:85:cb:ec:eb:8f:29:
                    4a:a1:88:b7:56:33:c2:48:f8:55:70:d8:17:c8:c9:
                    0c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:77:15:F0:C5:C6:F9:F1:9D:F7:8B:7C:8B:34:AE:FF:A1:3E:16:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/df0d7988-a542-33d6-8d56-7e5b5a7b2c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:77:1b:25:32:ff:32:3c:b6:12:a5:d0:99:a6:1e:00:08:e1:
         56:b7:7a:8e:c9:8f:9e:5b:da:ce:e6:64:ab:81:66:0e:57:a1:
         66:18:35:e9:d4:36:71:fc:3c:00:22:b8:ea:af:06:3e:60:ca:
         a2:74:57:58:bf:2c:5b:ea:05:19:8c:b6:ad:9a:dd:4d:19:86:
         e2:3d:52:c5:ae:2b:20:6f:28:a7:5b:54:d5:65:b4:54:6a:05:
         71:35:5d:bc:f7:99:64:33:64:76:3a:72:a0:96:24:a1:bb:df:
         1c:c1:d1:08:13:d1:78:a8:25:a6:d8:0b:db:d8:8b:b4:c4:c6:
         3c:76:a4:4e:ba:3d:5e:c3:6b:a3:5d:76:be:06:51:81:c4:39:
         98:89:44:00:c5:f4:b4:cc:43:30:23:3b:87:fc:a9:9f:f7:b6:
         58:08:2c:3a:d7:fd:cf:f6:2e:c3:2e:1b:d7:46:93:58:f3:f1:
         55:51:b5:1f:d0:71:c6:df:37:09:98:bb:a3:3a:0e:7a:ce:a6:
         7d:a2:9b:af:e2:ca:e2:75:d3:22:01:02:b1:f8:62:d2:99:a6:
         c5:da:29:31:3f:e4:87:d4:12:a8:57:9f:f7:2b:1e:a6:73:fd:
         ae:a1:d7:f7:fc:0d:cb:ba:00:76:22:a6:74:df:a9:69:c2:53:
         9d:be:c7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----