Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0477fbb1-dba6-3fe7-aaba-df0c4a6ddd64.roa
File:                     0477fbb1-dba6-3fe7-aaba-df0c4a6ddd64.roa (raw, json)
Hash identifier:          F5Ouq5WC8wB87SIHx2tp90CmYhMxIlih7tjSMYXb1Mg=
Subject key identifier:   45:E7:D6:13:E3:C0:64:63:61:31:CE:09:F6:A2:91:EF:B9:42:F4:00
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858422AA04932D37C9016DC024880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0477fbb1-dba6-3fe7-aaba-df0c4a6ddd64.roa
Signing time:             Fri 09 Jun 2023 21:52:10 +0000
ROA not before:           Fri 09 Jun 2023 21:52:10 +0000
ROA not after:            Thu 07 Sep 2023 21:52:10 +0000
asID:                     0
IP address blocks:        23.26.160.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:2a:a0:49:32:d3:7c:90:16:dc:02:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  9 21:52:10 2023 GMT
            Not After : Sep  7 21:52:10 2023 GMT
        Subject: CN=da78226c-b6e7-4742-ad86-5482261678c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:89:df:f7:e3:28:fe:f2:7e:a7:55:81:e6:65:
                    22:69:96:71:6f:0c:a1:d5:49:67:61:09:d2:23:fc:
                    93:27:f0:f3:ea:12:29:87:23:c1:c6:b9:c4:35:03:
                    60:4d:ac:c4:2c:32:31:a6:f9:12:06:3a:aa:be:66:
                    ef:40:a6:ad:b6:ac:f8:01:f4:0c:24:8b:01:43:67:
                    43:35:a4:17:32:1c:47:2c:02:17:18:b2:1f:63:b8:
                    fa:5d:1f:75:7d:80:88:cb:92:87:59:ce:1e:42:1b:
                    af:0a:6f:18:ad:db:2d:9b:89:40:fb:1e:5f:71:20:
                    7c:6a:74:fe:c7:a1:dd:55:28:a7:32:ba:01:85:44:
                    be:93:bc:97:c8:0c:0c:40:b8:2b:8e:28:7f:b2:68:
                    9e:2a:b9:22:3c:a3:43:95:22:cd:fb:46:10:68:b6:
                    24:2c:67:b8:b3:8a:ff:5e:e4:01:dc:68:c9:3a:c0:
                    5f:e7:65:5d:63:9b:1b:a8:97:bd:ea:42:b3:6c:10:
                    20:2e:05:76:13:ca:4f:12:89:9f:61:45:c0:db:4c:
                    cc:2e:ba:a3:cc:d4:b3:0d:bb:c3:3b:4a:56:80:db:
                    6d:1c:2f:65:39:4d:97:6f:f6:d5:69:dc:20:63:44:
                    a3:b4:2f:48:6b:f6:6b:58:be:f5:75:37:e7:e8:31:
                    8c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E7:D6:13:E3:C0:64:63:61:31:CE:09:F6:A2:91:EF:B9:42:F4:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0477fbb1-dba6-3fe7-aaba-df0c4a6ddd64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:b5:1b:b1:fe:9d:7b:ff:33:65:05:03:ba:bc:e6:ed:c3:34:
         1d:af:ea:8b:58:4e:0a:53:ca:7a:48:ef:a1:f4:d0:14:46:13:
         b8:41:76:bb:25:76:3f:d8:12:7c:5c:be:be:39:9e:b1:82:19:
         cb:98:fa:19:5c:85:3f:ed:81:70:13:04:f9:d6:06:c3:67:a9:
         00:d7:c4:75:df:5b:64:6f:24:af:0c:04:7d:86:fd:b4:e3:4f:
         f6:c6:a5:d5:20:8b:0a:1b:b9:ec:f0:e2:57:10:c9:d9:25:19:
         61:b1:41:90:74:25:9c:b6:06:da:ae:b9:be:47:27:a6:d4:4c:
         b2:a9:d2:1c:d6:0e:d9:f3:66:4a:d8:07:cb:00:21:77:98:ce:
         6e:22:5a:9e:85:72:cc:d7:dd:4d:1b:a0:33:bc:b3:5e:64:19:
         19:29:96:22:b5:53:d9:a4:78:16:ee:02:07:3a:b5:39:fe:98:
         85:b5:be:0f:83:46:fe:97:9e:42:a4:e7:06:84:ed:9f:72:41:
         52:3d:8a:2c:a9:ea:75:c9:3a:0c:05:77:92:50:0c:0d:6a:0e:
         c5:d5:70:ed:c9:64:52:66:f2:45:28:65:06:75:dc:c7:b8:36:
         47:1b:73:8e:0e:5c:a4:66:27:11:58:f0:1f:08:2a:a8:1b:84:
         d3:22:f1:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEIqoEky03yQFtwCSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDYwOTIxNTIxMFoXDTIzMDkwNzIxNTIxMFowLzEtMCsGA1UEAxMk
ZGE3ODIyNmMtYjZlNy00NzQyLWFkODYtNTQ4MjI2MTY3OGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlonf9+Mo/vJ+p1WB5mUiaZZxbwyh1UlnYQnS
I/yTJ/Dz6hIphyPBxrnENQNgTazELDIxpvkSBjqqvmbvQKattqz4AfQMJIsBQ2dD
NaQXMhxHLAIXGLIfY7j6XR91fYCIy5KHWc4eQhuvCm8Yrdstm4lA+x5fcSB8anT+
x6HdVSinMroBhUS+k7yXyAwMQLgrjih/smieKrkiPKNDlSLN+0YQaLYkLGe4s4r/
XuQB3GjJOsBf52VdY5sbqJe96kKzbBAgLgV2E8pPEomfYUXA20zMLrqjzNSzDbvD
O0pWgNttHC9lOU2Xb/bVadwgY0SjtC9Ia/ZrWL71dTfn6DGMXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEXn1hPjwGRjYTHOCfaike+5QvQAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDQ3N2ZiYjEtZGJhNi0z
ZmU3LWFhYmEtZGYwYzRhNmRkZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFxqgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ61G7H+nXv/M2UFA7q85u3DNB2v6otYTgpTynpI76H00BRGE7hBdrsl
dj/YEnxcvr45nrGCGcuY+hlchT/tgXATBPnWBsNnqQDXxHXfW2RvJK8MBH2G/bTj
T/bGpdUgiwobuezw4lcQydklGWGxQZB0JZy2Btquub5HJ6bUTLKp0hzWDtnzZkrY
B8sAIXeYzm4iWp6FcszX3U0boDO8s15kGRkpliK1U9mkeBbuAgc6tTn+mIW1vg+D
Rv6XnkKk5waE7Z9yQVI9iiyp6nXJOgwFd5JQDA1qDsXVcO3JZFJm8kUoZQZ13Me4
Nkcbc44OXKRmJxFY8B8IKqgbhNMi8cc=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:27:20 2025 by rpki-client