Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/19514244-2806-39d7-9d33-d71dd8e72bd7.roa
File:                     19514244-2806-39d7-9d33-d71dd8e72bd7.roa (raw, json)
Hash identifier:          05i0oieBufSnSkIPo3yuuu9HSajwbXpduK+T2IaCGo0=
Subject key identifier:   C6:3E:B8:6F:79:FF:6B:0D:BF:7F:BE:11:9C:4B:31:13:45:E6:AA:8A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843871EBF4DEBAE8A3649799C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/19514244-2806-39d7-9d33-d71dd8e72bd7.roa
Signing time:             Thu 12 Oct 2023 17:48:17 +0000
ROA not before:           Thu 12 Oct 2023 17:48:17 +0000
ROA not after:            Wed 10 Jan 2024 18:48:17 +0000
asID:                     834
IP address blocks:        23.26.72.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:87:1e:bf:4d:eb:ae:8a:36:49:79:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 12 17:48:17 2023 GMT
            Not After : Jan 10 18:48:17 2024 GMT
        Subject: CN=f30ec966-f484-4386-ae9b-6701ebe77ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:8c:6a:8a:e3:55:ee:85:8e:56:c0:b0:ca:
                    d3:3f:34:c0:05:0e:8e:f3:c8:0a:7e:e9:52:90:21:
                    f6:06:0d:cf:15:c5:db:4e:80:39:91:c7:e0:a7:97:
                    2e:3f:c9:27:5d:1c:bb:da:52:74:92:cd:37:e9:24:
                    ab:c5:db:81:e4:0f:aa:e9:43:4f:b2:2e:ea:3e:ad:
                    f2:51:1a:c5:4f:96:04:8f:16:b2:5a:96:85:55:55:
                    90:17:71:ce:f9:58:0c:dd:90:3a:bc:b3:12:89:96:
                    4d:c1:5a:04:a9:99:1c:dd:a9:0f:c6:6b:c6:4a:03:
                    d0:9e:2a:70:a8:86:f1:48:f6:50:1a:2b:a9:fe:9e:
                    37:02:e5:cf:fd:bc:b4:be:01:28:5b:a0:ee:69:cc:
                    6e:05:ea:17:13:ca:99:0a:96:2e:ab:a3:aa:13:87:
                    8f:47:a8:1e:3f:fc:72:e7:dd:14:ad:26:2a:c2:2a:
                    db:1b:0c:1b:5f:44:6f:de:d4:50:b3:ba:fb:20:ac:
                    30:cc:9f:26:20:fa:aa:3d:18:64:3a:62:e8:84:5f:
                    7c:aa:20:cd:b1:29:48:54:28:18:b2:9d:e2:e7:f0:
                    d8:eb:db:95:d6:f1:69:05:cb:86:6a:95:35:f2:30:
                    8d:8c:a8:48:44:26:3b:13:6d:6e:65:f1:8a:51:8a:
                    0f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3E:B8:6F:79:FF:6B:0D:BF:7F:BE:11:9C:4B:31:13:45:E6:AA:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/19514244-2806-39d7-9d33-d71dd8e72bd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:f0:c7:d5:12:68:74:45:91:41:98:1a:38:31:82:59:f5:fb:
         3e:6b:46:fa:57:f7:c2:cf:8a:48:06:c8:a6:2a:b0:4c:41:3b:
         7b:06:a9:28:7c:23:8c:dd:01:4f:64:de:5f:f7:b8:76:c9:be:
         fc:29:01:4f:cb:51:11:4f:76:f1:b0:ef:9a:45:6d:68:ec:9f:
         c7:44:c5:60:79:92:ef:a3:c3:c8:95:86:e0:b2:92:06:96:65:
         76:87:07:3f:78:97:bc:41:fd:de:0a:ab:43:68:f5:83:9e:5b:
         37:80:45:1e:0e:d8:d6:f6:2a:2f:38:df:b0:39:4f:76:71:8b:
         59:fe:1f:e6:84:93:e2:a1:03:fe:48:f0:e7:10:b3:2e:df:f5:
         87:8b:48:8a:88:f0:8d:23:f3:8d:fc:e1:c6:5f:9a:42:67:8d:
         45:f0:af:c5:c7:5c:64:e9:fd:00:80:59:93:fb:af:af:37:f2:
         c9:1d:b6:a9:cb:41:ca:5e:38:bb:02:5e:bf:ca:38:d3:60:19:
         fd:8f:43:13:26:4b:e7:28:5e:9a:44:ae:d9:79:e1:ee:ab:36:
         73:73:0c:1b:c9:0c:41:6a:43:63:dd:ad:e8:14:db:6b:fb:2f:
         ac:b1:cb:81:b2:9a:75:4e:c1:bd:fa:03:b9:20:54:57:a8:5e:
         8c:e8:90:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:49:26 2025 by rpki-client