Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b0091d3-6b7c-3bf0-b655-1fcc2f38e5bd.roa
File:                     4b0091d3-6b7c-3bf0-b655-1fcc2f38e5bd.roa (raw, json)
Hash identifier:          goKjJRCSz4pmWn0UOi9Fb6v5jxoWW+jtnR8s9tky+nU=
Subject key identifier:   9B:40:02:7B:CD:C3:32:42:A2:8C:14:C7:FD:47:3B:51:70:34:33:B4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584766138F36D2150100453ADF40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b0091d3-6b7c-3bf0-b655-1fcc2f38e5bd.roa
Signing time:             Tue 01 Oct 2024 16:51:49 +0000
ROA not before:           Tue 01 Oct 2024 16:51:49 +0000
ROA not after:            Mon 30 Dec 2024 17:51:49 +0000
asID:                     834
IP address blocks:        23.26.93.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:66:13:8f:36:d2:15:01:00:45:3a:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  1 16:51:49 2024 GMT
            Not After : Dec 30 17:51:49 2024 GMT
        Subject: CN=c6ea8609-c699-4d81-bb72-5e4e9fb0ef84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:64:59:f9:d9:f1:1c:57:01:41:03:ba:54:0a:
                    d2:81:c2:12:de:e3:16:77:36:28:5f:af:4d:b0:9d:
                    7c:f6:c7:29:d6:2a:97:56:0f:4d:c3:3c:8c:ec:07:
                    b5:ee:1d:e2:ab:8d:57:72:4c:62:c1:01:0d:79:53:
                    b5:3b:61:d3:3a:0b:4d:c6:3e:95:34:13:04:76:a6:
                    c7:0e:aa:1f:14:fb:1e:42:53:a5:14:32:08:e9:c2:
                    33:30:08:36:74:f1:fe:03:2a:76:40:09:2d:29:89:
                    d7:2d:95:ce:24:81:95:1e:48:bf:df:37:e3:ef:18:
                    bc:e6:84:aa:c2:fe:8d:92:52:60:96:dd:86:4e:92:
                    33:27:cb:17:40:90:ba:ba:99:99:54:f0:1f:fd:48:
                    20:80:2c:de:ce:0d:23:1a:88:86:4e:d4:c6:66:1b:
                    d2:5a:9e:91:68:53:49:91:bc:75:2c:10:b4:71:a2:
                    b3:17:10:86:9b:69:4d:af:02:13:52:df:89:6f:82:
                    89:34:f5:6f:35:5a:26:12:d5:70:d9:bd:48:b0:bb:
                    f7:d4:42:43:1d:bb:5d:e8:b6:fc:40:03:70:f8:ec:
                    ea:ba:cc:d8:ca:66:10:19:6f:2b:a4:de:86:0f:47:
                    ca:10:a3:3e:8d:ab:46:00:60:d7:e6:53:06:22:c5:
                    8c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:40:02:7B:CD:C3:32:42:A2:8C:14:C7:FD:47:3B:51:70:34:33:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b0091d3-6b7c-3bf0-b655-1fcc2f38e5bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:3f:12:d8:17:8b:3d:25:75:87:24:4d:07:16:5e:69:79:ac:
         2b:39:69:cd:4f:9e:00:84:8c:ce:2a:0f:35:b8:79:03:96:84:
         48:b0:0d:fa:04:85:32:76:99:f2:2e:d1:3b:7f:8d:be:22:8b:
         33:6a:cf:80:bd:de:1e:3a:2e:8d:8c:66:0d:78:a5:db:42:41:
         4a:0f:53:ac:3b:37:07:17:7b:c8:fb:01:92:7f:41:ad:d7:9b:
         83:12:88:2f:f9:b2:e8:04:7d:a6:ec:94:18:7f:5c:27:82:c5:
         97:53:c7:15:ae:ec:ae:33:d0:98:f5:6d:2d:3f:d2:53:94:03:
         be:62:89:0c:52:58:ed:6c:1c:d6:a4:48:90:89:89:3f:64:b2:
         65:ed:6d:73:52:6d:15:f3:fb:cd:44:27:8e:4c:b0:ee:cb:94:
         62:53:9c:d1:da:c0:f0:b4:75:a4:80:84:09:d1:da:54:80:e3:
         eb:4a:0a:fb:71:44:05:19:08:27:d4:a8:ec:45:a6:35:8b:b7:
         76:59:b4:7e:ed:ca:d2:ee:5d:7d:11:33:13:c2:9f:dc:9e:5b:
         80:a6:a1:b1:94:ad:b8:fe:c0:74:1c:95:8c:4f:a1:ab:e7:6a:
         e3:c5:b7:ee:db:48:05:01:67:aa:b6:ef:ee:c0:79:46:b7:be:
         7f:a1:1e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:42:24 2025 by rpki-client