Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5b2e5c85-9342-3f4e-b1cc-3cf4e53cbc8f.roa
File:                     5b2e5c85-9342-3f4e-b1cc-3cf4e53cbc8f.roa (raw, json)
Hash identifier:          tO2rFvFaTCB5HiQry4HT+SdAIMYvG9CoY8YMCkAXeT4=
Subject key identifier:   C3:96:F8:8E:89:67:DA:15:16:BD:B7:74:D8:13:28:24:4C:6F:08:8F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858410C17F4995F2E4FF77F5C7780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5b2e5c85-9342-3f4e-b1cc-3cf4e53cbc8f.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sat 31 May 2025 04:00:00 +0000
asID:                     399976
IP address blocks:        23.26.253.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:0c:17:f4:99:5f:2e:4f:f7:7f:5c:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : May 31 04:00:00 2025 GMT
        Subject: CN=6a6daa54-9481-4471-9a5f-e6f21efb595d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d7:d3:97:8a:fb:7a:f7:6c:77:ba:ac:bc:f7:
                    36:5e:8b:6d:a3:09:04:6e:a2:fe:d8:db:93:bd:b5:
                    cc:0d:82:23:31:6e:1a:48:86:34:13:bb:80:c9:83:
                    68:42:2d:49:a7:8c:ad:d6:57:17:c6:e8:42:8b:b8:
                    59:f7:bc:71:db:2b:2a:21:bc:d4:c3:e6:7b:e0:40:
                    98:2a:3e:00:dc:fc:31:e3:e6:98:5e:1d:cb:ab:29:
                    eb:3d:25:3e:47:a5:4b:d0:d0:19:26:81:f3:a7:01:
                    e2:aa:76:a7:51:ca:f6:0a:c3:e3:60:3f:72:69:21:
                    ad:92:39:74:26:0e:c8:4a:bc:9e:46:59:8d:ee:fa:
                    f0:ae:84:9d:85:f1:e5:4e:c9:eb:bb:d8:8f:2b:ef:
                    01:79:64:64:d8:56:ce:81:3c:fe:44:8c:fe:13:05:
                    79:57:02:85:3d:ca:32:3e:ba:e5:8d:e9:37:33:29:
                    ea:88:51:14:9a:bb:cd:f0:7f:b9:4b:f5:b5:c2:aa:
                    23:de:bf:37:2a:8f:f8:0d:de:c3:2f:50:d9:74:c1:
                    fb:a8:19:1f:71:a3:e6:af:03:5d:1b:96:57:d8:08:
                    3c:d2:11:4f:02:06:09:99:60:53:3e:67:ef:fc:3b:
                    d7:4f:a3:2a:e9:e0:cb:5b:ab:57:c3:11:0d:6f:00:
                    2d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:96:F8:8E:89:67:DA:15:16:BD:B7:74:D8:13:28:24:4C:6F:08:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5b2e5c85-9342-3f4e-b1cc-3cf4e53cbc8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:a7:3d:f2:76:07:a8:9c:72:dc:82:10:14:47:f3:67:d2:70:
         2c:61:19:85:e8:f8:3b:cc:95:cd:df:b1:3a:f4:dd:a7:2f:eb:
         de:c1:97:b1:e0:80:18:e4:35:aa:0e:cf:56:77:a4:a6:37:de:
         e4:04:d7:0c:70:d3:35:17:66:8d:94:8f:48:e8:f6:0d:74:3a:
         87:96:b2:3f:39:15:0d:0e:06:57:a2:f5:95:b3:13:d3:c8:5a:
         d5:6d:bc:6c:af:39:62:3d:d2:2d:17:95:67:5f:c5:49:23:f2:
         b3:32:b6:3f:c7:b4:24:92:5c:7b:d3:d1:cd:5f:4b:b1:9d:96:
         25:cf:b4:58:f8:4d:0a:eb:52:3b:12:e2:8b:3c:29:4c:21:34:
         de:a2:2a:67:19:0e:b3:32:1e:72:aa:08:c0:dc:19:1f:1f:1d:
         ec:9e:37:b2:f7:9f:cd:76:8f:e4:b5:0a:3b:ee:72:57:47:93:
         c7:9b:f0:a3:d1:0e:c8:e1:8b:99:3e:08:e7:bb:23:b5:2f:17:
         fa:00:0d:9c:48:81:51:79:a9:5e:4c:4b:fa:3e:e3:7b:d1:68:
         49:1a:ec:2d:8a:49:bd:64:a8:40:b8:b7:b2:96:b5:39:f2:82:
         75:02:27:6d:1a:42:21:94:8f:25:27:6c:71:38:68:a6:32:e2:
         39:36:49:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEEMF/SZXy5P939cd4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI1MDUzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NmE2ZGFhNTQtOTQ4MS00NDcxLTlhNWYtZTZmMjFlZmI1OTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztfTl4r7evdsd7qsvPc2XottowkEbqL+2NuT
vbXMDYIjMW4aSIY0E7uAyYNoQi1Jp4yt1lcXxuhCi7hZ97xx2ysqIbzUw+Z74ECY
Kj4A3Pwx4+aYXh3LqynrPSU+R6VL0NAZJoHzpwHiqnanUcr2CsPjYD9yaSGtkjl0
Jg7ISryeRlmN7vrwroSdhfHlTsnru9iPK+8BeWRk2FbOgTz+RIz+EwV5VwKFPcoy
Prrljek3MynqiFEUmrvN8H+5S/W1wqoj3r83Ko/4Dd7DL1DZdMH7qBkfcaPmrwNd
G5ZX2Ag80hFPAgYJmWBTPmfv/DvXT6Mq6eDLW6tXwxENbwAt+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMOW+I6JZ9oVFr23dNgTKCRMbwiPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNWIyZTVjODUtOTM0Mi0z
ZjRlLWIxY2MtM2NmNGU1M2NiYzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxr9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJWnPfJ2B6icctyCEBRH82fScCxhGYXo+DvMlc3fsTr03acv697Bl7Hg
gBjkNaoOz1Z3pKY33uQE1wxw0zUXZo2Uj0jo9g10OoeWsj85FQ0OBlei9ZWzE9PI
WtVtvGyvOWI90i0XlWdfxUkj8rMytj/HtCSSXHvT0c1fS7GdliXPtFj4TQrrUjsS
4os8KUwhNN6iKmcZDrMyHnKqCMDcGR8fHeyeN7L3n812j+S1CjvucldHk8eb8KPR
Dsjhi5k+COe7I7UvF/oADZxIgVF5qV5MS/o+43vRaEka7C2KSb1kqEC4t7KWtTny
gnUCJ20aQiGUjyUnbHE4aKYy4jk2SRg=
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:34:43 2025 by rpki-client