Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0fe9bcdb-ad9b-31fa-8b62-345284e372b1.roa
File:                     0fe9bcdb-ad9b-31fa-8b62-345284e372b1.roa (raw, json)
Hash identifier:          7jForVM4y0GuUvvoESMDa6urwZleOPJU95kOxeLbzxY=
Subject key identifier:   06:64:64:9F:AB:A6:2B:60:5A:8C:04:65:AF:B9:8D:D9:81:EC:85:64
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858475540BB9D5E43C4DC09B47580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0fe9bcdb-ad9b-31fa-8b62-345284e372b1.roa
Signing time:             Wed 25 Sep 2024 16:14:05 +0000
ROA not before:           Wed 25 Sep 2024 16:14:05 +0000
ROA not after:            Tue 24 Dec 2024 17:14:05 +0000
asID:                     834
IP address blocks:        23.26.99.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:55:40:bb:9d:5e:43:c4:dc:09:b4:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 25 16:14:05 2024 GMT
            Not After : Dec 24 17:14:05 2024 GMT
        Subject: CN=b14f1954-cadb-4b89-8271-f68a4c742195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:30:70:a4:26:9e:d4:51:c2:c5:1a:7c:0d:56:
                    d9:dc:cc:87:ea:a6:f1:0c:24:ff:f1:b4:08:c8:dc:
                    a3:b4:c2:0b:81:09:bf:e2:25:f2:27:4b:75:a9:57:
                    dc:5e:5b:31:bf:46:45:3d:87:0a:d2:67:ac:9a:29:
                    0e:62:db:d7:e7:09:b5:13:a6:9c:8b:82:4e:49:4f:
                    21:17:2e:d6:f3:ed:1d:96:18:7b:de:b4:2e:57:1b:
                    e2:65:e1:05:bf:29:7b:d4:1a:2b:27:37:ec:5b:ab:
                    5a:2f:42:e1:32:08:e3:a8:b7:a7:f1:b3:e3:26:c7:
                    ec:df:44:f8:0d:34:8c:b6:ec:aa:1d:80:8e:88:ba:
                    eb:a6:6f:b3:a2:93:bc:8d:8d:5a:30:6a:86:ce:e1:
                    0f:99:ee:4c:5d:84:ae:23:c0:26:a5:27:b7:67:41:
                    70:57:ad:a2:ff:af:a7:9a:6a:12:fc:9d:7a:88:e2:
                    9a:43:1e:2d:92:0b:40:81:26:f6:aa:42:14:ce:5c:
                    36:e8:9e:28:00:b5:90:54:66:85:b8:88:12:cf:60:
                    f4:69:fc:95:81:81:9b:c8:c9:51:ba:42:db:49:e5:
                    c0:0f:8d:66:ec:1c:14:db:81:fb:35:c0:d1:bf:01:
                    67:fc:d2:82:90:03:4a:c4:d3:50:95:95:86:f3:79:
                    4b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:64:64:9F:AB:A6:2B:60:5A:8C:04:65:AF:B9:8D:D9:81:EC:85:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0fe9bcdb-ad9b-31fa-8b62-345284e372b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:db:37:70:dc:3a:9f:4e:7c:af:9b:e8:13:fe:42:69:cb:18:
         29:3b:4e:1d:7c:be:12:13:1d:d9:3b:11:75:7e:d8:ce:a0:bd:
         de:42:e9:e3:89:9a:7e:e4:76:4b:43:06:87:49:9c:6d:9a:54:
         db:b8:94:e8:3e:86:44:3d:8d:03:67:0f:40:29:22:92:91:74:
         2a:83:76:7f:d4:95:99:9f:30:f7:d8:12:ac:d9:1b:ed:5c:3d:
         46:91:bb:0c:a9:fb:08:7c:16:ea:5f:0e:07:62:ab:00:7a:5e:
         d3:06:b3:1e:42:2c:20:ce:5e:4a:fd:0a:14:3c:57:5b:09:a5:
         8f:b7:99:c4:6d:a3:df:af:e9:ac:9f:68:37:8f:c2:ed:8d:84:
         e0:a5:f6:2e:e0:f0:b5:d9:74:b0:03:29:4e:3d:6c:d2:8c:d6:
         99:4f:e3:a8:43:1d:a7:05:8e:e3:ca:17:98:1e:19:54:ce:13:
         ab:dc:bf:cb:34:4f:d6:11:ff:cf:d3:1b:bf:6e:20:52:f7:19:
         bd:2b:22:3f:8d:d3:da:36:ba:4b:8f:91:c0:d6:df:bf:c0:66:
         3a:83:e4:a8:21:12:13:15:b3:59:4a:22:4a:84:47:ef:4c:c4:
         43:fa:5e:8d:67:39:4e:7f:ac:88:78:9a:ef:a8:c3:ba:c6:85:
         e0:f9:73:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:36:21 2025 by rpki-client