Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ea204fcb-9534-3c7d-8884-890cb2279a8a.roa
File:                     ea204fcb-9534-3c7d-8884-890cb2279a8a.roa (raw, json)
Hash identifier:          2xvePe4UTMG29m7ocoHgPlEs7r20pXA7dMHWHqR7a18=
Subject key identifier:   9B:F1:34:BB:54:10:58:D7:59:17:3C:50:24:20:BE:F1:6D:0C:E3:CE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446E320BDC892FC24875580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ea204fcb-9534-3c7d-8884-890cb2279a8a.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Sun 06 Aug 2023 18:22:57 +0000
asID:                     43260
IP address blocks:        23.26.32.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:e3:20:bd:c8:92:fc:24:87:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug  6 18:22:57 2023 GMT
        Subject: CN=c75e890f-28e2-443d-9a68-8182b393c2dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:5e:28:4f:8c:a5:08:65:28:ab:4b:f6:59:
                    2e:0a:46:97:72:58:a6:e7:34:72:d4:05:da:19:3f:
                    21:f1:00:b1:2b:9b:9d:69:55:b1:7e:ad:6e:f7:8f:
                    21:c0:81:9b:d1:61:bd:39:fe:31:75:b2:16:17:12:
                    25:67:60:83:2f:91:36:81:91:3e:e2:c2:6c:1d:35:
                    14:e0:6d:78:5f:9f:7c:35:b4:fc:9b:29:4c:67:4e:
                    8d:03:9e:af:3e:38:fe:79:46:75:1e:b3:b7:07:32:
                    ef:87:f3:2f:5b:17:d6:33:22:bc:d4:19:40:4c:69:
                    15:48:4e:e5:2c:54:1f:67:c0:15:14:6b:f0:5e:ed:
                    49:a4:51:13:49:d7:1e:13:91:a7:85:a3:c7:c9:24:
                    45:ae:7d:3a:90:c4:a3:c9:0a:5d:4b:1a:31:1f:10:
                    ce:50:5b:5a:3a:ac:bc:a2:31:66:1a:50:8f:a3:4c:
                    41:d6:9c:4f:0e:d4:6f:f9:54:cd:6d:61:d3:f3:e6:
                    01:f9:11:27:34:cc:2f:d6:d5:58:ee:9d:40:5e:db:
                    67:20:bb:f7:5d:75:cf:0a:7f:0a:af:ce:76:bb:b9:
                    04:fd:99:c1:ca:fd:80:05:34:62:88:79:bb:6c:fd:
                    54:0e:56:59:71:e5:33:b4:d2:dc:00:30:be:17:bc:
                    da:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F1:34:BB:54:10:58:D7:59:17:3C:50:24:20:BE:F1:6D:0C:E3:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ea204fcb-9534-3c7d-8884-890cb2279a8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:7d:30:ee:a3:ee:9e:a5:99:16:d5:d8:ae:a7:69:14:be:63:
         e4:39:eb:91:07:b7:d0:4b:3e:b2:6e:5a:d1:c4:70:d4:86:75:
         3b:b1:d8:4c:3e:ba:65:f7:7d:33:13:82:e6:d2:79:e0:03:f7:
         5b:b3:ba:43:85:4f:b0:23:9b:e0:3f:1b:73:c5:77:af:f3:d3:
         58:ed:06:e5:34:69:d6:19:35:6e:42:9e:42:25:8a:e8:3f:de:
         a8:87:88:09:c4:9a:c6:98:3a:03:9e:6e:eb:25:f6:03:71:49:
         2c:52:01:f2:55:07:b3:cd:a5:1f:ac:e5:a5:50:9b:5c:2f:3e:
         7b:48:fa:ea:bd:62:3a:66:75:97:b0:4b:d5:63:fd:52:ff:99:
         98:24:6a:a3:9d:dd:ba:70:e3:bf:9a:57:47:03:84:a1:41:52:
         fa:79:d9:5d:3d:27:cb:87:3d:43:98:64:da:af:fa:74:2f:0d:
         bc:67:8a:d6:13:0f:3f:6a:e2:db:4b:04:58:ee:9d:c8:c9:c8:
         33:28:35:16:7f:22:ee:2e:7e:9d:58:57:1a:74:e3:46:be:62:
         69:c5:7b:27:c4:9f:85:5d:1a:a7:74:8d:79:94:56:7f:85:8b:
         dd:31:51:76:b1:ff:8a:2e:b4:18:81:f1:11:18:06:8c:29:dd:
         39:d3:e2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:30:00 2025 by rpki-client