Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/469d0247-fe20-3500-b4fd-bc6694c1ecdc.roa
File:                     469d0247-fe20-3500-b4fd-bc6694c1ecdc.roa (raw, json)
Hash identifier:          bUgHLzFn/KPmqni7y/xi0ZEu2Fy2OXhqqnOQnJGzKL0=
Subject key identifier:   BF:96:50:83:0C:1F:3B:B0:A7:07:D2:EE:5C:BF:11:0C:91:38:FB:09
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446E9E5542B9915ED1DA380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/469d0247-fe20-3500-b4fd-bc6694c1ecdc.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Fri 11 Aug 2023 18:30:13 +0000
asID:                     61138
IP address blocks:        23.26.143.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:e9:e5:54:2b:99:15:ed:1d:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug 11 18:30:13 2023 GMT
        Subject: CN=be340ea9-c71b-4c31-ba87-69b2f8e2ee3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a9:66:33:95:b2:a0:c1:b5:ec:5c:de:d0:e0:
                    a2:1d:cd:5a:19:f2:fd:28:89:42:37:be:0f:a6:28:
                    7a:55:f0:5d:de:e4:12:56:04:4d:26:34:f3:eb:c1:
                    2f:12:c2:83:53:16:10:6a:24:09:ec:03:b2:fe:36:
                    f5:d0:db:ee:19:b6:50:47:df:0f:58:b5:e7:33:66:
                    3a:4a:b4:a2:d7:67:36:da:69:74:00:59:8f:bc:91:
                    6b:96:01:1c:24:ad:29:99:7e:71:33:cf:6f:22:5d:
                    eb:10:e5:30:d4:ef:10:a7:27:38:f8:e2:b0:91:50:
                    d0:ec:ee:2b:e8:b4:2e:e4:99:19:8f:98:8a:bd:3a:
                    7b:45:62:0b:1c:aa:5a:1f:43:bd:19:8b:8e:3a:f6:
                    9e:2a:10:26:c0:6f:ba:b1:cc:b4:92:6b:1f:d3:d0:
                    bf:f8:18:31:20:36:81:24:d5:34:10:97:5b:89:fd:
                    a7:6e:3c:64:d7:78:77:c4:e1:42:36:dc:6c:f7:69:
                    aa:5b:67:8f:b6:9b:c5:06:00:91:de:24:6e:5c:b5:
                    50:64:79:97:fc:65:ff:7a:d3:d9:e3:d3:ea:40:8c:
                    1e:44:fe:cd:b5:d5:2b:aa:c0:1e:4b:07:7a:3c:77:
                    7d:4a:44:79:5d:f8:8f:f3:8c:a5:5f:0e:90:e7:5a:
                    d4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:96:50:83:0C:1F:3B:B0:A7:07:D2:EE:5C:BF:11:0C:91:38:FB:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/469d0247-fe20-3500-b4fd-bc6694c1ecdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:6b:5c:9c:37:ee:4a:98:a9:51:7c:d1:d5:87:e6:f1:cf:f3:
         d7:b1:6e:d8:d5:86:93:86:0d:d0:71:74:30:91:f6:00:36:61:
         63:cf:f0:70:dc:ce:5f:ed:17:55:6b:b5:cf:6c:0f:37:f0:f4:
         b7:70:5b:ce:1e:49:a3:e9:4f:76:30:18:86:51:14:c8:5f:b1:
         78:c7:45:f4:74:9e:3a:31:8c:d1:05:a6:aa:40:44:94:ff:52:
         48:da:68:c5:3a:90:9d:b4:da:1e:e2:88:c4:29:eb:e2:6f:fc:
         b8:90:23:12:d9:3e:ae:0b:df:d4:c8:40:5b:f0:c3:54:e7:18:
         65:e7:75:b0:0a:b6:5a:30:ed:3b:e4:43:50:34:f5:ba:eb:8e:
         99:ae:d2:f4:57:ec:70:0a:b8:5e:87:d1:33:f1:fd:70:c2:e2:
         22:5b:9d:f7:36:cd:2a:fa:2b:d0:ea:ff:3a:e7:4d:8b:3f:a1:
         36:6e:80:e4:e9:bc:84:b0:5e:5c:19:33:6d:d5:53:cd:b2:15:
         b2:b1:f0:98:14:83:ae:2f:c8:6c:a8:3e:e5:f4:9a:83:41:2f:
         50:d8:19:0c:b0:1f:d3:a4:f4:b8:1e:c2:c8:b3:bb:ea:0a:e7:
         08:3a:a2:8e:03:38:a5:f1:09:04:95:85:71:b5:48:23:77:2c:
         12:35:af:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:59:18 2025 by rpki-client