Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42acfb5b-ca50-3e24-bfca-0a81286f50aa.roa
File:                     42acfb5b-ca50-3e24-bfca-0a81286f50aa.roa (raw, json)
Hash identifier:          TPE970zCzv3tYMsnmyU/bigfAsZ+gX8ZNzIMOpn3uK0=
Subject key identifier:   B0:AD:78:6F:82:12:CE:7F:B6:99:91:D0:F7:D4:57:F1:F4:EE:75:5D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584667E8699687CE76244839B600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42acfb5b-ca50-3e24-bfca-0a81286f50aa.roa
Signing time:             Tue 02 Jul 2024 15:49:33 +0000
ROA not before:           Tue 02 Jul 2024 15:49:33 +0000
ROA not after:            Mon 30 Sep 2024 15:49:33 +0000
asID:                     834
IP address blocks:        23.26.246.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:67:e8:69:96:87:ce:76:24:48:39:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  2 15:49:33 2024 GMT
            Not After : Sep 30 15:49:33 2024 GMT
        Subject: CN=82bfed4f-02aa-4260-8530-aea123615e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3c:aa:9a:35:52:f4:c1:92:9e:ba:38:78:3f:
                    b2:9f:22:6e:84:33:fc:23:61:f7:e1:d6:88:ea:1a:
                    7a:d9:f8:87:d3:d5:cd:c8:f2:d7:12:0b:62:3c:6a:
                    bb:13:01:8c:0a:71:59:7a:b4:ea:79:1c:82:f9:60:
                    44:a5:44:35:65:9d:14:b4:66:88:6a:4f:38:91:75:
                    7d:53:b0:38:a7:48:cb:54:6e:21:b3:04:b3:27:c8:
                    91:8f:8a:71:2c:5b:0b:31:97:6c:cb:26:c2:2c:e8:
                    27:34:8d:9b:21:30:33:fd:51:97:1c:cb:05:4b:aa:
                    d9:5f:8a:1f:b9:b0:dd:18:34:f3:4d:d6:5d:94:d4:
                    38:c5:d4:cc:2f:f9:0d:62:21:dc:d5:84:19:d6:02:
                    5f:67:6b:9d:3d:49:50:16:7b:b7:56:6d:ef:fe:b3:
                    7a:7c:1b:7a:b6:73:b9:8a:b5:53:64:70:28:40:50:
                    ed:7c:16:b9:99:11:5d:2c:53:fc:47:d3:7e:c7:ab:
                    31:a6:d6:89:e8:8f:e7:21:45:08:b1:4a:4b:f7:9f:
                    ab:60:10:d8:0a:9e:0f:6f:94:02:3f:35:99:c1:43:
                    ee:b4:b6:32:57:62:e4:21:2e:0a:fa:f7:30:61:33:
                    1f:ff:a5:e3:be:8a:02:9b:3a:15:fa:95:c5:57:33:
                    f0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AD:78:6F:82:12:CE:7F:B6:99:91:D0:F7:D4:57:F1:F4:EE:75:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42acfb5b-ca50-3e24-bfca-0a81286f50aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:7b:8b:87:de:f2:aa:16:ad:2d:d5:6c:da:4d:1c:56:b0:eb:
         a9:bb:b9:1b:a2:7a:10:94:92:2e:ff:3d:08:c2:73:cd:a1:fe:
         91:cb:0b:93:d9:13:99:55:02:e6:c4:bf:8f:79:85:73:52:58:
         a1:fe:87:1f:eb:14:f7:98:5f:1a:b8:8a:dc:fe:02:83:ca:c2:
         1f:14:2d:6e:a0:76:23:03:ef:2c:7f:51:bb:77:3f:f0:59:6d:
         aa:55:57:5d:ab:af:b2:80:9b:98:a0:ec:b7:3d:13:87:fa:90:
         6b:00:3f:1e:c8:c4:88:c5:06:37:3b:1e:ea:93:8a:5e:e2:df:
         d5:1e:be:dc:83:52:ac:ff:10:1f:9d:db:4a:56:c2:15:e8:b3:
         a8:d4:69:ec:f0:b2:17:3b:eb:d0:a9:5d:b7:e1:9d:cd:0b:94:
         ba:01:9e:9b:b1:f1:e8:b2:1e:bc:fb:96:5e:0b:78:c8:3a:93:
         cb:a9:02:38:10:c8:45:2b:2a:0a:2e:13:f5:a1:82:5e:94:07:
         48:f4:5b:b0:e4:fb:47:fd:15:30:a7:ef:a2:c7:a0:e4:1f:60:
         e6:bd:fc:a7:e1:ed:95:e2:e0:24:b8:2a:8c:8b:55:c5:46:d4:
         b7:bf:ee:2f:d1:57:f9:33:e1:98:e4:a8:b6:d7:fd:ac:dd:db:
         80:85:17:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:16:53 2025 by rpki-client