Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02d0730e-6bdb-3838-a167-fb661168b640.roa
File:                     02d0730e-6bdb-3838-a167-fb661168b640.roa (raw, json)
Hash identifier:          T/3kTasaZ9cq1to+I526JztOr8pc0xLtIQS5kCQCioQ=
Subject key identifier:   7E:FF:58:80:5D:BB:8C:8F:FE:E5:C2:F6:1C:A7:63:FB:7F:59:5E:4F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842BAC3EB22739DB015E52EA970
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02d0730e-6bdb-3838-a167-fb661168b640.roa
Signing time:             Mon 31 Jul 2023 13:00:18 +0000
ROA not before:           Mon 31 Jul 2023 13:00:18 +0000
ROA not after:            Sun 29 Oct 2023 13:00:18 +0000
asID:                     834
IP address blocks:        23.26.216.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ba:c3:eb:22:73:9d:b0:15:e5:2e:a9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 31 13:00:18 2023 GMT
            Not After : Oct 29 13:00:18 2023 GMT
        Subject: CN=5e2e5d21-598c-4528-b104-34efdd33b78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:80:be:7b:95:f2:17:20:fb:f0:96:d0:bc:3d:
                    6d:d3:cd:75:09:c7:08:63:d5:4a:af:2a:f7:8a:d0:
                    9f:e1:01:41:c6:13:35:33:9a:b6:ea:8d:f2:3b:0f:
                    70:71:b5:fd:f1:a2:0e:49:d1:d2:8c:e4:69:ec:66:
                    1b:02:06:fe:da:86:a7:da:c7:df:63:36:af:9f:b1:
                    51:cd:b8:ff:07:bd:38:de:ce:1a:d9:34:d7:37:63:
                    8f:be:67:1b:44:28:ad:87:27:52:e9:5a:26:d6:08:
                    77:d7:47:57:9d:cd:42:17:10:88:f3:1b:d4:cf:f6:
                    77:ac:35:f1:cf:90:d4:01:3f:e3:5d:72:67:e1:e0:
                    d9:b7:5b:c6:8b:ea:95:59:73:d5:de:1a:ee:36:ec:
                    a7:6e:5f:99:bd:99:39:eb:a3:32:1a:20:16:f3:03:
                    5b:b2:2f:b5:09:8c:f9:0a:8e:60:92:08:6f:10:98:
                    5b:a9:4a:6b:2b:de:52:04:63:0e:92:16:f8:dc:1e:
                    c1:d9:8f:2d:2f:bf:d1:64:a2:2a:8f:94:03:95:40:
                    84:08:d5:0f:9a:f4:de:7e:8b:42:f2:cf:e0:7e:b7:
                    60:95:d9:59:e4:82:ae:06:6d:4b:84:60:56:4a:f9:
                    cc:0f:4a:90:03:c8:0b:50:64:07:4d:12:da:7b:f0:
                    58:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FF:58:80:5D:BB:8C:8F:FE:E5:C2:F6:1C:A7:63:FB:7F:59:5E:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02d0730e-6bdb-3838-a167-fb661168b640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:28:c5:71:ee:81:04:7d:3e:67:c3:ec:fd:15:de:5c:33:2d:
         17:b2:48:d6:e6:c2:46:7f:fc:e3:2e:e5:07:db:53:0c:eb:82:
         45:62:f8:a9:cf:ff:b6:99:68:f5:7b:af:98:b9:17:11:d1:92:
         ad:f8:32:29:76:3d:98:2d:85:17:01:6d:04:6a:aa:de:f4:f1:
         93:ff:d4:c0:35:58:c2:c0:0e:2d:b3:82:57:2a:1e:32:fd:16:
         58:b4:68:6d:ba:99:f8:0d:96:d1:de:ed:57:13:45:bf:d8:48:
         db:ae:62:98:d6:c2:51:bf:c8:c0:92:f6:d7:bb:25:3f:f6:e5:
         5f:9e:ef:1a:a6:e9:43:6a:d5:71:87:5c:5f:2f:3b:12:f6:f7:
         95:b8:9a:fb:12:ee:16:1b:49:b0:b8:f3:de:16:f5:15:f7:cd:
         b4:8b:db:20:2e:25:0a:0a:21:84:78:ff:8d:78:41:c5:fe:0c:
         d1:98:92:9e:17:b6:8f:72:52:07:76:96:af:2e:b1:1d:a9:09:
         a6:0d:89:1b:74:b2:6d:da:b0:4c:f6:17:df:2a:8e:29:a0:85:
         05:24:52:c9:76:c5:3d:0d:a3:27:a4:a3:1e:32:d9:3f:7b:53:
         f5:17:7c:05:f2:aa:73:51:af:76:9e:9e:75:c3:be:42:68:cd:
         94:86:5c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:16:49 2025 by rpki-client