Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/50fd159a-ffe0-3644-bbd5-62619485e25f.roa
File:                     50fd159a-ffe0-3644-bbd5-62619485e25f.roa (raw, json)
Hash identifier:          mP3+BPdYCNKlAtWY+LJCicZ3p8efAbKynH7FAiEQBaU=
Subject key identifier:   A1:CD:14:9F:87:A9:0D:F7:AE:61:4C:B8:73:B8:22:50:F1:DA:35:9A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584766138C818347AB3626768600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/50fd159a-ffe0-3644-bbd5-62619485e25f.roa
Signing time:             Tue 01 Oct 2024 16:51:47 +0000
ROA not before:           Tue 01 Oct 2024 16:51:47 +0000
ROA not after:            Mon 30 Dec 2024 17:51:47 +0000
asID:                     834
IP address blocks:        23.26.49.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:66:13:8c:81:83:47:ab:36:26:76:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  1 16:51:47 2024 GMT
            Not After : Dec 30 17:51:47 2024 GMT
        Subject: CN=a5137856-69ee-483a-8643-129245f4c2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9c:43:86:af:d6:4d:05:e4:a6:40:33:d5:49:
                    c5:5e:86:53:93:44:6b:f2:da:88:4e:17:e9:40:c1:
                    35:b2:2a:34:06:0d:09:c5:55:c1:06:43:ad:8f:bf:
                    18:90:72:a3:63:df:b6:40:4d:6f:bf:d8:7e:d7:ca:
                    a5:bf:0e:1e:f9:e8:bd:ed:e1:40:f0:96:52:22:08:
                    bf:a4:1e:3e:1c:25:48:31:e5:a7:16:ea:88:fd:3c:
                    55:f3:6a:65:cd:58:1d:26:fd:46:b7:ca:c0:d6:43:
                    a8:61:19:23:25:a6:cd:93:3d:96:16:96:9e:1e:22:
                    d3:48:d8:f8:f5:1e:7c:b2:a4:cb:a6:62:5c:93:38:
                    80:c3:d6:8f:ea:e3:ae:7d:62:3e:66:b8:9c:8a:e6:
                    7b:5c:14:32:e7:3f:8e:00:a1:b6:a1:84:fc:db:e9:
                    c0:12:6f:3e:51:1b:55:a2:fd:09:ac:62:b6:be:8b:
                    3f:c8:a6:05:f6:93:bc:eb:df:f0:94:56:e2:d3:d5:
                    93:8e:8f:14:15:4c:36:00:4c:53:9a:f3:64:30:3d:
                    b7:10:5d:88:03:04:9f:35:86:e6:de:89:80:84:b7:
                    c0:66:23:0e:49:13:ca:0f:1a:fe:94:3c:6e:d3:88:
                    5a:d2:06:0e:86:56:21:bb:14:14:63:91:41:02:05:
                    e4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CD:14:9F:87:A9:0D:F7:AE:61:4C:B8:73:B8:22:50:F1:DA:35:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/50fd159a-ffe0-3644-bbd5-62619485e25f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:9d:04:46:26:51:72:b2:79:0c:79:2e:2e:ec:6f:0b:13:79:
         bd:3c:c9:b7:1d:78:f8:d5:3c:1d:5d:d1:56:a5:16:28:c1:65:
         0d:88:41:4d:9f:bf:2b:24:23:fa:51:f7:23:ad:c4:65:91:3e:
         74:6a:4d:68:93:94:da:99:a0:c8:97:63:9a:9a:c8:7a:44:58:
         55:f5:09:4f:24:fc:44:2c:fb:5c:19:60:cd:e7:6b:a9:b1:f9:
         26:fd:44:48:13:09:2d:94:1f:92:21:1b:12:85:ca:c3:b2:74:
         04:44:0f:3d:ac:08:e9:40:30:57:81:72:36:2b:01:3f:f2:ef:
         af:29:34:31:29:ec:5e:11:04:64:77:94:0a:43:d6:b6:67:bb:
         65:32:f6:c3:4a:99:75:de:39:d3:22:90:00:05:52:ad:17:0c:
         d7:dc:af:d5:8b:7f:40:a5:eb:f0:da:0c:be:c6:b6:eb:63:00:
         30:d1:bf:3d:b4:34:ee:33:bc:80:c8:79:2c:5e:3a:93:f7:7c:
         b1:5f:84:83:71:d3:0e:99:ec:9b:54:d0:a5:a2:64:4a:aa:53:
         b0:6a:91:cd:73:ce:0d:00:1e:de:c8:70:16:c2:73:d2:eb:a6:
         f6:d5:43:6c:f6:0d:25:74:3a:8f:b8:bd:9f:ee:e5:02:55:14:
         ae:80:c2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:14:29 2025 by rpki-client