Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eede0d68-1e59-3078-8133-54b49300a6d0.roa
File:                     eede0d68-1e59-3078-8133-54b49300a6d0.roa (raw, json)
Hash identifier:          xuGKZ7AbNSmIAJxpBd58+BENBKZ4GDXYUe3aMK3DmTI=
Subject key identifier:   00:FF:69:68:DC:5F:F7:2B:55:E1:16:D1:25:3D:2B:6B:15:9B:1D:F6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858445BB7AFE1A081338AE1438AC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eede0d68-1e59-3078-8133-54b49300a6d0.roa
Signing time:             Wed 27 Dec 2023 21:27:48 +0000
ROA not before:           Wed 27 Dec 2023 21:27:48 +0000
ROA not after:            Tue 26 Mar 2024 20:27:48 +0000
asID:                     834
IP address blocks:        23.26.232.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:5b:b7:af:e1:a0:81:33:8a:e1:43:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 27 21:27:48 2023 GMT
            Not After : Mar 26 20:27:48 2024 GMT
        Subject: CN=046b0545-e259-4852-adc2-00cbe4b60042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:dd:e9:71:72:04:5d:c2:52:84:f1:62:00:
                    39:e0:7a:61:30:26:49:22:10:86:03:03:8b:7e:2c:
                    71:87:be:c2:23:8f:3f:27:65:4a:38:f4:dd:45:74:
                    ba:cc:8a:67:92:2e:a9:95:20:42:04:eb:c0:fd:0a:
                    0b:ba:04:d0:22:c6:9c:08:47:9f:71:1e:1c:6d:1c:
                    a0:cb:8f:2b:95:67:44:34:14:a7:71:a0:a8:eb:16:
                    f8:b4:0f:6b:ce:eb:27:a5:e2:cb:12:9d:17:cd:cc:
                    27:7e:ca:6c:42:3e:e3:d7:02:c8:87:a6:9a:c4:4f:
                    af:cc:64:f7:60:57:3f:3f:1d:c5:b2:81:66:70:fe:
                    78:55:98:12:b4:5c:d5:76:c5:36:b0:3e:74:9c:43:
                    62:18:aa:c0:0b:95:75:84:20:81:6a:66:6c:e1:12:
                    83:80:97:f9:e9:13:bc:b2:d9:e9:b9:a7:94:c3:ba:
                    ae:cc:91:13:85:6f:b2:60:a6:07:7d:38:a2:74:d8:
                    e6:27:83:78:93:b4:ae:29:33:bb:0b:29:d0:51:68:
                    68:5b:bd:5f:96:4c:6d:3d:c0:91:94:08:ba:fb:ac:
                    99:a5:fc:e2:e6:74:6f:06:9f:86:69:dc:32:b1:4b:
                    3c:25:04:b9:a7:f4:35:20:38:93:a9:a3:58:f2:94:
                    15:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FF:69:68:DC:5F:F7:2B:55:E1:16:D1:25:3D:2B:6B:15:9B:1D:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eede0d68-1e59-3078-8133-54b49300a6d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:0f:0d:77:15:7d:d0:db:36:e3:cd:bb:27:d2:f0:1a:e8:1d:
         28:65:0d:8c:6d:93:25:dd:4b:99:94:c4:37:a0:ac:b4:9f:66:
         d2:56:6c:d2:a6:9b:c3:20:25:20:5f:e3:e8:32:ff:22:4f:f2:
         ee:e8:4f:8a:a0:8a:fd:ac:67:d9:ba:70:72:46:4a:9a:9f:20:
         10:97:d5:e6:3a:c1:e5:0d:bd:d9:d0:2a:69:14:5b:3d:c2:31:
         99:8d:17:5f:90:70:ac:fe:71:8a:cd:74:c9:35:c0:27:db:aa:
         79:f7:52:cc:d0:c9:69:a6:22:1d:cb:b9:ab:0f:0a:eb:e3:cf:
         9e:2b:e0:a9:f1:a7:89:d0:98:07:03:3a:a3:57:a1:e3:3c:43:
         af:63:32:16:28:a1:8a:d0:7c:59:15:4f:88:d6:f2:d6:35:0e:
         02:bb:d2:67:e7:ab:69:77:be:54:15:14:53:d1:33:00:c0:48:
         81:ff:f5:60:54:37:73:e8:cb:45:d2:ae:be:68:99:f3:2d:d9:
         6f:2a:c6:1d:d1:2f:4e:2d:14:40:d7:52:e1:68:b2:bf:59:5d:
         9e:6a:f6:21:dd:ff:f2:2e:af:03:00:3a:3c:6b:60:d8:ce:2c:
         63:9a:df:e0:af:66:7d:3a:56:4c:a1:66:fa:ed:af:37:54:86:
         4b:7c:52:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:18:17 2025 by rpki-client