Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/271d93cb-4509-3cf4-851d-6d2e07ad1d37.roa
File:                     271d93cb-4509-3cf4-851d-6d2e07ad1d37.roa (raw, json)
Hash identifier:          ABl52+crzIgIycSHWshqSuOFVj0Ubcn0BkQRq1TIJkc=
Subject key identifier:   6C:4C:C3:7B:3B:7C:21:48:FA:39:2E:36:1E:6C:CE:F9:62:46:4D:D6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845EF892F4BA51D4EDD5844BC80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/271d93cb-4509-3cf4-851d-6d2e07ad1d37.roa
Signing time:             Mon 20 May 2024 13:00:35 +0000
ROA not before:           Mon 20 May 2024 13:00:35 +0000
ROA not after:            Sun 18 Aug 2024 13:00:35 +0000
asID:                     63801
IP address blocks:        23.26.205.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ef:89:2f:4b:a5:1d:4e:dd:58:44:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 20 13:00:35 2024 GMT
            Not After : Aug 18 13:00:35 2024 GMT
        Subject: CN=d6a914b1-8535-436d-9fd9-742985ceaf83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fd:57:04:f9:67:a3:55:17:6c:1e:0d:1d:f1:
                    3f:21:16:9a:dd:49:b6:0a:42:f2:7d:60:70:06:87:
                    a6:1f:e3:ab:f6:7c:18:b6:a2:b7:99:35:c0:9d:14:
                    25:b9:37:93:46:83:93:54:fb:f3:ec:87:a7:7f:8f:
                    d4:b5:a1:a4:c2:01:a2:94:d1:db:ae:f6:0b:9b:b2:
                    4e:62:fb:d0:03:4b:3a:af:3d:c8:f5:ff:f4:c6:df:
                    61:f7:a2:4d:2f:bc:1b:17:eb:80:f0:2b:e0:ab:ca:
                    29:d2:68:41:69:e4:05:71:ef:fb:74:07:4c:7e:d8:
                    40:81:ad:65:d8:0b:7f:2f:5d:13:b2:33:b5:e2:b0:
                    92:0d:b7:b8:fe:63:21:be:4d:44:7b:17:b4:fb:05:
                    a0:76:e4:52:38:9b:d1:81:fe:77:07:22:c9:e7:df:
                    57:5d:2a:e1:da:ac:20:cc:1e:63:13:28:6c:d0:72:
                    d2:28:49:2f:75:d1:27:f1:33:19:ca:ba:f5:65:70:
                    ec:92:c4:30:ae:af:40:ad:11:84:a3:ff:36:17:bf:
                    77:d5:d4:0e:76:4c:01:4c:2d:98:ae:46:c0:1f:21:
                    6f:f6:17:7a:bb:2a:70:80:84:fc:49:a8:c3:ca:f8:
                    a0:1b:7e:75:f3:77:68:d1:04:ab:36:72:dd:f8:ed:
                    c2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4C:C3:7B:3B:7C:21:48:FA:39:2E:36:1E:6C:CE:F9:62:46:4D:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/271d93cb-4509-3cf4-851d-6d2e07ad1d37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:71:7d:4f:04:aa:55:70:c6:4a:4c:22:f7:6c:87:ff:c2:0e:
         d2:8a:7f:86:7b:f4:3e:48:ca:60:b6:8b:81:22:94:ad:61:ed:
         c3:7b:c6:bd:50:0d:24:30:67:a0:6a:09:2e:7e:b7:6f:17:86:
         6a:dc:38:5a:9d:04:70:d8:ea:f4:ee:ee:a4:d9:6f:bc:98:23:
         08:48:8f:89:7e:82:90:df:38:80:f8:4d:be:39:49:eb:83:db:
         c8:64:fb:87:e8:ae:e2:fb:85:6d:0a:17:5a:38:bf:64:d8:32:
         10:6c:0f:51:78:0c:fd:f4:82:92:fc:38:a0:97:1d:2b:d7:60:
         da:02:f1:70:ad:0e:84:07:4d:df:56:ff:09:90:61:d9:97:ae:
         d1:aa:87:bc:22:0e:a1:46:9e:53:47:c8:34:4b:ea:fe:c4:79:
         da:81:0f:47:e1:72:c6:e7:69:36:0d:3b:01:7c:94:6e:28:47:
         de:a0:40:74:6f:77:96:b9:5e:8d:fd:cc:f8:f6:2d:9d:4d:ba:
         33:9b:36:dc:22:5d:e6:77:87:72:07:af:af:8c:b5:db:39:54:
         2e:2c:39:60:4c:cb:20:b7:63:26:88:50:6f:5e:4e:8f:17:90:
         bf:bc:f5:92:7b:53:2c:02:3a:5f:85:ff:66:d9:8e:a3:1f:b4:
         ef:f4:43:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:48:49 2025 by rpki-client