Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ea996d1a-62b2-3e00-af4d-8ff6c92cf991.roa
File:                     ea996d1a-62b2-3e00-af4d-8ff6c92cf991.roa (raw, json)
Hash identifier:          UzoA0zNXD2ifQOgUBUnVL9scb9Q5FYOLC9UTxbabVUM=
Subject key identifier:   B1:A5:4C:86:06:5A:A1:D6:5B:0F:C3:05:7D:BD:97:0B:F3:E2:C5:6E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858472405CE17F72CE7608E097940
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ea996d1a-62b2-3e00-af4d-8ff6c92cf991.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     19437
IP address blocks:        23.26.118.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:ce:17:f7:2c:e7:60:8e:09:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=d6e01832-5a00-4237-8308-8a6c79c3b348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:76:68:99:67:c5:3b:ac:79:14:55:a1:28:60:
                    68:65:ac:85:c1:07:4d:6a:76:d9:ab:47:42:61:71:
                    db:60:7c:f3:b2:a9:98:7c:de:d2:5d:12:9d:a6:16:
                    73:fb:a4:96:c0:9f:78:ab:e0:c8:27:f8:03:c4:d0:
                    b6:f4:52:79:e5:85:a8:9f:1d:53:21:b6:15:c7:32:
                    63:2c:c1:55:b4:7b:a1:53:24:6e:7d:9b:06:52:b4:
                    c8:df:31:14:37:5c:27:17:c3:dc:91:b0:02:2b:d9:
                    19:d9:1d:46:bd:6e:50:ed:63:e1:95:e3:91:5e:38:
                    7e:a2:d5:f4:2c:c4:53:6a:e3:63:7c:4f:49:7f:3a:
                    bd:d5:0a:a9:55:12:16:1e:09:53:57:c7:b4:ad:da:
                    59:e0:e3:49:3f:62:7a:50:6e:b9:32:39:a0:a5:3a:
                    f6:1d:fd:57:3f:b7:b0:fe:36:57:81:6f:c9:16:e9:
                    fc:65:b6:17:56:16:81:c5:ee:1b:bf:60:31:fd:cc:
                    2f:2d:27:84:46:eb:51:20:52:90:65:e7:3c:00:93:
                    21:36:0d:a8:0f:f0:48:fc:67:01:be:10:fc:71:72:
                    70:4c:18:1d:b5:98:a0:c4:50:b8:27:8a:39:6d:83:
                    00:fb:09:2c:f4:fd:42:0a:8b:c1:2d:97:f4:6e:ab:
                    5d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A5:4C:86:06:5A:A1:D6:5B:0F:C3:05:7D:BD:97:0B:F3:E2:C5:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ea996d1a-62b2-3e00-af4d-8ff6c92cf991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:0b:97:31:8c:cd:73:63:e5:fb:45:88:eb:cf:03:fa:db:87:
         3c:1a:fe:16:65:04:cd:f8:ff:32:1e:74:03:0f:7b:8d:27:80:
         0b:a3:1b:40:74:37:f3:56:31:d7:ea:04:c1:72:11:cf:cf:0d:
         53:a0:7b:8d:3a:09:08:76:f5:ca:00:74:3c:d9:86:4f:1a:ec:
         18:23:bb:28:33:41:f2:12:08:b8:c8:ec:01:db:3e:8f:f0:ed:
         73:f9:bf:9a:09:4b:f3:3e:f8:0b:3b:6e:fd:77:2e:2a:b5:fe:
         81:99:73:da:cb:75:35:f9:e5:e7:6d:63:3e:fc:31:33:af:ad:
         bb:42:96:07:2f:f9:70:9a:fb:3a:f7:c3:cf:8e:c9:45:e7:09:
         7b:0e:8d:39:cd:a0:35:2d:59:6d:5d:b9:50:43:89:38:75:87:
         a6:84:5e:04:ee:e9:5b:0c:12:3b:ff:5b:55:14:ce:3a:0f:eb:
         db:05:fc:be:24:81:83:38:9c:75:3f:8f:50:5c:5c:aa:3d:4a:
         e5:6f:18:63:fc:2c:3b:e7:22:00:4d:c4:f5:41:f0:77:21:9e:
         d3:4a:90:dc:37:97:31:58:ea:ad:70:3f:a3:93:bb:33:08:aa:
         b4:62:d1:e8:2f:fd:eb:b4:d6:e8:77:2a:da:69:9d:99:ad:36:
         e3:f0:2c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:18:23 2025 by rpki-client