Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3598a4bc-94c9-31d1-bae6-5b762a1ab892.roa
File:                     3598a4bc-94c9-31d1-bae6-5b762a1ab892.roa (raw, json)
Hash identifier:          jVyK2TPS4XFLkcZjitn8qJkGMMKKUxJAIdCxZgl5gQg=
Subject key identifier:   5D:2B:3F:9B:8C:11:6A:82:EF:4A:9C:76:E6:53:3E:89:35:5F:1A:69
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285846F6484108066A0A074448FE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3598a4bc-94c9-31d1-bae6-5b762a1ab892.roa
Signing time:             Thu 22 Aug 2024 15:47:27 +0000
ROA not before:           Thu 22 Aug 2024 15:47:27 +0000
ROA not after:            Wed 20 Nov 2024 16:47:27 +0000
asID:                     834
IP address blocks:        23.26.196.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f6:48:41:08:06:6a:0a:07:44:48:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 22 15:47:27 2024 GMT
            Not After : Nov 20 16:47:27 2024 GMT
        Subject: CN=a562c9fa-4fcb-44b7-8921-432f4ceec2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:05:b3:d0:2b:38:58:39:7e:b0:48:b4:d6:a5:
                    c4:e0:5d:e1:4f:49:b9:09:fd:73:e1:48:76:b9:ee:
                    51:a8:3a:fc:04:b1:5e:00:d4:84:aa:5a:3b:41:59:
                    8c:7d:90:58:e2:f2:9e:f0:5c:eb:46:7e:6a:b1:77:
                    85:21:1b:e7:a9:6c:01:0d:7a:1a:ba:d5:5e:cd:c2:
                    46:7a:95:b9:91:9a:25:22:1e:f6:25:62:8b:0a:a7:
                    e7:9f:1f:e8:1f:1d:73:88:8b:7c:e5:2e:3b:81:8c:
                    1d:9a:2c:a1:08:eb:de:83:ce:8b:c4:be:b5:3b:ee:
                    d4:9f:3f:83:d4:11:7c:70:c3:f8:c4:a9:46:9e:00:
                    3a:6a:e1:43:74:13:a4:4f:fc:f5:e4:00:04:95:6c:
                    c9:8e:38:ae:ca:52:2a:a0:87:f2:35:93:36:1a:3e:
                    41:2d:19:d1:30:69:ee:63:34:11:42:9a:6b:dd:92:
                    4c:76:97:b1:6e:44:1b:a3:38:c1:d6:7e:9a:e5:73:
                    e9:3c:9a:ce:f4:ad:d0:6a:3c:0b:93:d3:56:dd:dc:
                    49:d6:23:b8:b5:2d:0f:10:37:51:0d:44:07:97:3e:
                    48:60:5b:f8:6a:1e:d9:36:eb:a2:f0:ba:85:6f:e4:
                    77:40:8e:28:ce:eb:44:84:8b:5f:82:1c:20:26:e9:
                    23:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2B:3F:9B:8C:11:6A:82:EF:4A:9C:76:E6:53:3E:89:35:5F:1A:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3598a4bc-94c9-31d1-bae6-5b762a1ab892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:87:f0:73:37:ac:39:d7:94:9f:2c:ab:a2:98:06:aa:a7:82:
         bf:bb:8b:90:76:44:05:fe:83:a0:53:47:07:0c:12:40:9b:9c:
         17:fc:fe:ca:ee:dd:7a:ad:bd:ab:01:74:e7:ac:a3:bf:40:3c:
         31:61:64:bd:09:63:d4:52:6d:0b:4f:56:6a:9a:f3:18:c7:97:
         c7:8f:f5:1e:0a:20:6d:29:ce:b1:73:5e:64:88:16:30:14:50:
         75:36:e2:f4:fb:88:8f:59:cf:6c:63:82:07:e3:4e:e0:ed:67:
         f5:a7:7e:03:62:80:ab:53:fe:a0:63:56:f4:e3:1c:c7:d5:57:
         46:79:c0:c9:f8:0b:df:9a:9b:c5:ed:d1:6c:b0:2c:e0:ef:c7:
         99:94:4a:93:7f:9c:f9:8c:a1:1f:af:7f:41:18:e8:c3:f9:3b:
         71:e5:7d:08:59:d4:01:7c:10:b5:02:06:6e:02:35:00:3b:7b:
         d4:74:75:8e:50:06:0f:9e:85:83:7a:14:ca:61:b2:35:00:f4:
         e3:bb:60:af:9d:06:4f:86:cc:8d:9b:71:93:9d:1b:f8:81:5b:
         e9:de:de:f8:43:11:e3:3f:cf:4b:91:ee:c1:64:9f:b5:20:54:
         22:9c:f0:04:fc:08:16:92:e0:88:ce:28:b5:f3:3a:ce:a0:b0:
         00:fd:1a:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEb2SEEIBmoKB0RI/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDgyMjE1NDcyN1oXDTI0MTEyMDE2NDcyN1owLzEtMCsGA1UEAxMk
YTU2MmM5ZmEtNGZjYi00NGI3LTg5MjEtNDMyZjRjZWVjMmU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgWz0Cs4WDl+sEi01qXE4F3hT0m5Cf1z4Uh2
ue5RqDr8BLFeANSEqlo7QVmMfZBY4vKe8FzrRn5qsXeFIRvnqWwBDXoautVezcJG
epW5kZolIh72JWKLCqfnnx/oHx1ziIt85S47gYwdmiyhCOveg86LxL61O+7Unz+D
1BF8cMP4xKlGngA6auFDdBOkT/z15AAElWzJjjiuylIqoIfyNZM2Gj5BLRnRMGnu
YzQRQppr3ZJMdpexbkQbozjB1n6a5XPpPJrO9K3QajwLk9NW3dxJ1iO4tS0PEDdR
DUQHlz5IYFv4ah7ZNuui8LqFb+R3QI4ozutEhItfghwgJukjUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF0rP5uMEWqC70qcduZTPok1XxppMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzU5OGE0YmMtOTRjOS0z
MWQxLWJhZTYtNWI3NjJhMWFiODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIuH8HM3rDnXlJ8sq6KYBqqngr+7i5B2RAX+g6BTRwcMEkCbnBf8/sru
3XqtvasBdOeso79APDFhZL0JY9RSbQtPVmqa8xjHl8eP9R4KIG0pzrFzXmSIFjAU
UHU24vT7iI9Zz2xjggfjTuDtZ/WnfgNigKtT/qBjVvTjHMfVV0Z5wMn4C9+am8Xt
0WywLODvx5mUSpN/nPmMoR+vf0EY6MP5O3HlfQhZ1AF8ELUCBm4CNQA7e9R0dY5Q
Bg+ehYN6FMphsjUA9OO7YK+dBk+GzI2bcZOdG/iBW+ne3vhDEeM/z0uR7sFkn7Ug
VCKc8AT8CBaS4IjOKLXzOs6gsAD9Gjk=
-----END CERTIFICATE-----