Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e537d2a5-928b-3cbf-a69f-70f23bb15dda.roa
File:                     e537d2a5-928b-3cbf-a69f-70f23bb15dda.roa (raw, json)
Hash identifier:          FSbXDJD7pEXtVmpJUZYH0kxWRcYVoZY+BJF4Scub/Y4=
Subject key identifier:   A4:0C:25:92:BE:BF:E0:CC:6F:78:F0:ED:02:F1:65:15:06:80:5A:8C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285846970A60E30C17FA134D5ED580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e537d2a5-928b-3cbf-a69f-70f23bb15dda.roa
Signing time:             Fri 19 Jul 2024 13:00:35 +0000
ROA not before:           Fri 19 Jul 2024 13:00:35 +0000
ROA not after:            Thu 17 Oct 2024 13:00:35 +0000
asID:                     212238
IP address blocks:        23.26.61.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:97:0a:60:e3:0c:17:fa:13:4d:5e:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 19 13:00:35 2024 GMT
            Not After : Oct 17 13:00:35 2024 GMT
        Subject: CN=489e97a4-d6b8-4d4f-9c33-6dfb5b5083f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dc:d9:8f:27:5a:76:ca:f9:dd:67:cc:95:19:
                    f7:80:24:a6:5b:97:b3:fe:20:ac:cb:0d:06:77:d7:
                    9b:8b:74:e9:3c:d9:22:cf:01:3e:b2:fd:bb:f0:8a:
                    36:80:42:1b:87:54:34:99:13:a4:eb:6a:fe:9d:a1:
                    7b:73:70:de:96:64:86:de:f5:12:8a:db:07:70:39:
                    47:bf:7d:66:b2:8a:bd:27:a2:73:53:7e:ea:19:5d:
                    06:ca:25:f1:5c:0a:08:c6:11:87:c4:69:a4:52:d1:
                    55:2f:16:5b:a2:e9:50:fb:4b:cc:09:58:5e:ff:d9:
                    d3:57:c8:df:7d:2b:13:06:ea:78:ca:09:4c:26:d5:
                    f6:53:81:34:a1:7d:ae:76:0a:ca:24:25:1f:64:3e:
                    90:95:82:ff:26:40:df:c1:f6:66:e9:6d:1c:78:8a:
                    47:0c:40:e4:fe:40:6c:0e:92:0b:e6:38:2c:f4:fc:
                    ae:a0:d0:a2:e4:41:4d:44:e6:7c:2a:85:4d:f1:a0:
                    ed:f3:0b:85:03:1b:b8:16:b4:75:de:42:95:7c:c9:
                    9c:8a:8a:5e:5e:cb:21:b3:ef:10:67:d5:65:a8:ee:
                    ee:e2:31:72:e1:2c:a4:ec:cc:97:b7:48:db:9f:1f:
                    6c:37:3b:55:0b:e6:8e:de:07:72:c1:75:79:58:f9:
                    69:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0C:25:92:BE:BF:E0:CC:6F:78:F0:ED:02:F1:65:15:06:80:5A:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e537d2a5-928b-3cbf-a69f-70f23bb15dda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:a3:66:e6:c3:6a:97:71:d7:1c:6a:14:4f:62:0c:14:36:12:
         fd:65:25:0b:8b:80:4f:6a:52:94:80:d9:f1:b0:dd:93:77:10:
         43:e0:5c:55:05:d7:18:ce:26:de:6c:0a:c1:46:a6:80:58:23:
         84:04:f6:b8:63:09:aa:42:5f:82:70:64:dd:e7:2a:04:89:e5:
         60:5e:9a:b5:0c:6c:b0:49:f8:be:32:a9:3e:42:89:e6:dd:19:
         c8:55:85:23:23:e4:a8:f7:23:81:f4:92:75:d7:96:eb:a2:71:
         15:ac:dc:a5:3a:b5:2c:0f:7d:85:fe:ca:a6:ce:de:fb:e6:74:
         d3:03:c0:c4:70:bd:b1:81:d2:e5:22:35:f9:0a:fd:12:5d:9f:
         96:4f:09:28:e1:fc:64:f3:c6:b8:5b:de:d7:bb:07:45:ec:ef:
         ed:d8:eb:10:c8:60:0b:dc:3c:3d:4d:57:dd:52:f7:a0:be:12:
         65:e5:8b:04:90:00:27:20:1d:4f:88:26:9f:91:d1:e9:3a:1d:
         dc:04:74:98:c2:97:52:de:e8:ff:ef:cf:00:24:b6:f4:d5:3b:
         91:33:56:d7:e9:e1:58:43:46:1f:ae:c8:59:8f:b2:d6:7b:ae:
         e4:6b:b6:0b:0c:5f:f0:d0:f3:57:15:e6:68:be:c5:05:b0:ce:
         1d:f7:76:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaXCmDjDBf6E01e1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDcxOTEzMDAzNVoXDTI0MTAxNzEzMDAzNVowLzEtMCsGA1UEAxMk
NDg5ZTk3YTQtZDZiOC00ZDRmLTljMzMtNmRmYjViNTA4M2YzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdzZjydadsr53WfMlRn3gCSmW5ez/iCsyw0G
d9ebi3TpPNkizwE+sv278Io2gEIbh1Q0mROk62r+naF7c3DelmSG3vUSitsHcDlH
v31msoq9J6JzU37qGV0GyiXxXAoIxhGHxGmkUtFVLxZboulQ+0vMCVhe/9nTV8jf
fSsTBup4yglMJtX2U4E0oX2udgrKJCUfZD6QlYL/JkDfwfZm6W0ceIpHDEDk/kBs
DpIL5jgs9PyuoNCi5EFNROZ8KoVN8aDt8wuFAxu4FrR13kKVfMmciopeXsshs+8Q
Z9VlqO7u4jFy4Syk7MyXt0jbnx9sNztVC+aO3gdywXV5WPlp0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKQMJZK+v+DMb3jw7QLxZRUGgFqMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTUzN2QyYTUtOTI4Yi0z
Y2JmLWE2OWYtNzBmMjNiYjE1ZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxo9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI6jZubDapdx1xxqFE9iDBQ2Ev1lJQuLgE9qUpSA2fGw3ZN3EEPgXFUF
1xjOJt5sCsFGpoBYI4QE9rhjCapCX4JwZN3nKgSJ5WBemrUMbLBJ+L4yqT5Ciebd
GchVhSMj5Kj3I4H0knXXluuicRWs3KU6tSwPfYX+yqbO3vvmdNMDwMRwvbGB0uUi
NfkK/RJdn5ZPCSjh/GTzxrhb3te7B0Xs7+3Y6xDIYAvcPD1NV91S96C+EmXliwSQ
ACcgHU+IJp+R0ek6HdwEdJjCl1Le6P/vzwAktvTVO5EzVtfp4VhDRh+uyFmPstZ7
ruRrtgsMX/DQ81cV5mi+xQWwzh33dsg=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:01:59 2025 by rpki-client