Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2b1317fc-62b9-366b-af4d-2741026aed0e.roa
File:                     2b1317fc-62b9-366b-af4d-2741026aed0e.roa (raw, json)
Hash identifier:          SvUIzy2IFF0uDydkBEBM4kXbC89hOZKwaH4zzZGrF0o=
Subject key identifier:   71:AE:9E:15:E5:EC:B0:06:D3:5A:2C:41:C5:8B:4B:F1:76:3B:F7:DC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583EA4163FE125EFC0118190BA80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2b1317fc-62b9-366b-af4d-2741026aed0e.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Wed 23 Oct 2024 04:00:00 +0000
asID:                     397423
IP address blocks:        23.26.128.0/21 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a4:16:3f:e1:25:ef:c0:11:81:90:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Oct 23 04:00:00 2024 GMT
        Subject: CN=2d0cde61-8f78-4158-a79a-8c6d560ba10b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:29:61:6c:1e:ce:bd:a6:5f:3e:1c:f1:34:23:
                    a3:8a:8c:77:f9:e0:9e:8f:bb:4a:7d:8a:dd:17:83:
                    af:a3:14:ca:20:5c:2b:03:24:c5:66:d2:ea:54:df:
                    a9:d4:e0:63:92:1c:f8:e4:88:48:5e:05:90:1e:a9:
                    3c:f9:91:75:a2:95:0a:35:85:fd:6a:85:b9:2e:02:
                    41:1f:76:d2:30:65:02:1e:5a:d0:a8:89:6e:8f:fd:
                    28:c4:e8:30:bb:d8:dc:0a:1d:c2:da:0b:8e:fd:af:
                    9a:32:b9:ad:00:1d:fe:ff:f0:6f:c0:f5:57:9e:02:
                    03:96:a9:e1:6b:ae:8c:c4:56:ec:dd:8a:fb:18:51:
                    bb:76:2b:ec:94:0c:12:32:8d:7b:9a:ed:a2:4d:5a:
                    62:0d:17:c0:25:db:5a:b7:5a:48:7f:c6:b9:35:1f:
                    fb:c2:2b:b0:45:04:22:27:56:8d:74:ef:61:f2:86:
                    82:f6:09:57:ae:c4:56:bc:23:e1:2b:fa:02:59:db:
                    8c:00:36:7e:8c:7d:bf:a4:28:10:62:82:f6:4a:27:
                    98:a0:bc:7f:e2:de:73:bb:7f:0c:cf:cd:ac:0e:ef:
                    11:fc:72:12:15:2e:25:70:70:be:c9:48:da:70:49:
                    b4:f9:63:1a:5e:9f:f9:c9:b1:1c:a5:3f:08:c9:c9:
                    8c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AE:9E:15:E5:EC:B0:06:D3:5A:2C:41:C5:8B:4B:F1:76:3B:F7:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2b1317fc-62b9-366b-af4d-2741026aed0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:24:62:9c:5d:b8:4e:62:69:38:3a:53:4a:a4:9c:5a:60:f8:
         fb:3b:d4:23:a8:9f:a9:f4:f9:bb:8a:70:9f:81:47:38:74:ca:
         33:ca:82:ef:86:f5:1b:1d:0f:e2:4d:2e:15:53:99:15:ea:b1:
         34:a1:7f:b0:44:16:73:1e:0f:e7:1f:bc:66:0c:6b:f1:42:58:
         50:ee:d1:82:de:b2:60:21:3a:aa:f1:5d:59:41:04:b3:00:9f:
         4d:32:e6:4a:0a:8c:bb:0f:f0:f5:a0:41:a4:3c:1f:8c:4a:b1:
         6d:87:d5:d1:31:40:8e:67:56:e7:68:15:e4:22:ab:fc:7d:15:
         00:18:72:1f:2a:2b:25:25:d2:63:40:17:6e:d0:3d:45:c8:ad:
         ce:cf:23:8b:0e:cb:6f:6d:04:f8:d2:4a:78:49:13:83:85:77:
         44:b2:cd:34:10:86:cb:5d:82:0a:21:b9:10:9b:86:82:51:76:
         d1:7a:9b:9e:28:40:8b:dd:ba:cd:1e:bf:c3:84:c4:bf:c6:8d:
         41:e5:dc:65:c9:6d:97:fa:a8:87:2d:a6:e8:72:97:bb:28:00:
         ea:f7:40:2b:89:41:82:7e:18:c4:7c:f9:e8:15:e6:62:18:9d:
         14:7b:e1:c9:8e:02:19:74:5c:3f:8f:f5:a5:b3:33:4c:de:88:
         6d:df:6c:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6kFj/hJe/AEYGQuoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI0MTAyMzA0MDAwMFowLzEtMCsGA1UEAxMk
MmQwY2RlNjEtOGY3OC00MTU4LWE3OWEtOGM2ZDU2MGJhMTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhylhbB7OvaZfPhzxNCOjiox3+eCej7tKfYrd
F4OvoxTKIFwrAyTFZtLqVN+p1OBjkhz45IhIXgWQHqk8+ZF1opUKNYX9aoW5LgJB
H3bSMGUCHlrQqIluj/0oxOgwu9jcCh3C2guO/a+aMrmtAB3+//BvwPVXngIDlqnh
a66MxFbs3Yr7GFG7divslAwSMo17mu2iTVpiDRfAJdtat1pIf8a5NR/7wiuwRQQi
J1aNdO9h8oaC9glXrsRWvCPhK/oCWduMADZ+jH2/pCgQYoL2SieYoLx/4t5zu38M
z82sDu8R/HISFS4lcHC+yUjacEm0+WMaXp/5ybEcpT8IycmMDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHGunhXl7LAG01osQcWLS/F2O/fcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmIxMzE3ZmMtNjJiOS0z
NjZiLWFmNGQtMjc0MTAyNmFlZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFxqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHkkYpxduE5iaTg6U0qknFpg+Ps71COon6n0+buKcJ+BRzh0yjPKgu+G
9RsdD+JNLhVTmRXqsTShf7BEFnMeD+cfvGYMa/FCWFDu0YLesmAhOqrxXVlBBLMA
n00y5koKjLsP8PWgQaQ8H4xKsW2H1dExQI5nVudoFeQiq/x9FQAYch8qKyUl0mNA
F27QPUXIrc7PI4sOy29tBPjSSnhJE4OFd0SyzTQQhstdggohuRCbhoJRdtF6m54o
QIvdus0ev8OExL/GjUHl3GXJbZf6qIctpuhyl7soAOr3QCuJQYJ+GMR8+egV5mIY
nRR74cmOAhl0XD+P9aWzM0zeiG3fbJc=
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:39:44 2025 by rpki-client