Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/61fcf7b6-4cbb-3d46-926d-868a1b0270f0.roa
File:                     61fcf7b6-4cbb-3d46-926d-868a1b0270f0.roa (raw, json)
Hash identifier:          crslz0fFGsUyYMk7ZXjonGzzQQ9BZDUbm6Iz0ZGihLU=
Subject key identifier:   46:4F:F4:51:B3:4D:94:F2:89:CA:DE:4A:9F:63:AE:BA:65:F2:0D:98
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858422CEDFBBC90AB485B76450600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/61fcf7b6-4cbb-3d46-926d-868a1b0270f0.roa
Signing time:             Sat 10 Jun 2023 17:40:20 +0000
ROA not before:           Sat 10 Jun 2023 17:40:20 +0000
ROA not after:            Fri 08 Sep 2023 17:40:20 +0000
asID:                     834
IP address blocks:        23.26.93.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:2c:ed:fb:bc:90:ab:48:5b:76:45:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 10 17:40:20 2023 GMT
            Not After : Sep  8 17:40:20 2023 GMT
        Subject: CN=1c03b06a-896d-4135-a2f3-c042a1e0c450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ac:4c:ab:2c:d4:aa:da:71:0d:52:f7:e8:49:
                    ca:1c:0d:dd:2c:36:34:da:04:93:7d:86:f4:cb:ea:
                    10:56:aa:86:61:06:f0:c7:b7:94:69:50:cc:44:5f:
                    fd:5f:e5:cb:50:e9:75:53:87:ad:bf:2b:01:e4:e8:
                    8d:03:14:66:80:ef:b8:40:6c:8e:70:44:dd:31:8b:
                    51:a9:2b:c6:db:87:ae:c0:9b:be:98:18:b7:bb:56:
                    6c:61:15:30:88:5d:72:4c:d4:78:66:76:79:7b:6a:
                    78:f4:5c:77:f9:ff:5f:41:08:52:81:36:6a:f8:b5:
                    8e:62:86:61:df:85:b1:30:76:cd:05:f7:3d:7a:9c:
                    74:a6:13:0b:00:92:dd:e1:07:fb:cd:91:62:3f:c7:
                    dc:20:69:27:2b:2f:b2:4c:62:40:d5:eb:19:43:48:
                    9c:f8:b9:e8:ea:5a:ef:75:88:1c:de:d6:15:2a:05:
                    60:53:02:3a:97:73:58:ad:46:22:75:3a:08:0d:a6:
                    e3:5a:8f:58:0d:e2:4b:3d:b8:15:70:66:14:21:76:
                    fe:ad:5d:ce:8c:9c:e8:78:db:9c:60:00:59:4e:d3:
                    6e:0d:0e:a6:49:d9:ff:6e:97:5c:6e:c0:2a:a9:ee:
                    7d:4b:ed:e2:96:1e:bf:a2:39:01:84:6a:68:3c:8b:
                    c9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4F:F4:51:B3:4D:94:F2:89:CA:DE:4A:9F:63:AE:BA:65:F2:0D:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/61fcf7b6-4cbb-3d46-926d-868a1b0270f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:38:67:c8:d4:0e:96:83:07:13:a8:cc:f5:d0:df:9f:4a:f9:
         a0:ec:03:da:5b:9b:06:e8:3c:19:57:31:3f:79:dc:73:e9:09:
         1e:89:6c:ac:f5:ba:0e:41:bc:3a:d9:34:07:32:77:dc:a4:2d:
         56:f7:5b:14:00:c4:b6:e6:87:52:6b:c8:ff:b8:1e:a7:12:c0:
         f9:87:0d:60:80:93:dd:84:51:58:33:4d:a9:13:52:43:1f:8a:
         65:af:31:80:84:67:f6:e3:ad:dd:06:ed:4b:f0:c4:63:33:45:
         e7:a0:4b:92:0f:74:2e:8e:70:05:35:bd:7f:bf:f2:75:09:c2:
         87:d9:55:6e:64:7f:68:2d:9c:70:9b:6f:05:e3:72:84:0a:5d:
         e2:64:5f:48:38:ae:15:f8:66:82:37:20:7e:e2:3b:3e:a7:b6:
         fe:c9:3d:af:4b:95:2f:3f:89:6e:77:32:ec:82:c7:8c:52:a9:
         40:96:ba:d3:29:34:a4:1b:99:83:d3:70:bb:81:f9:58:f2:d4:
         72:8a:aa:a1:9d:ce:0b:74:ee:d2:62:eb:22:ba:8a:e8:9e:18:
         52:76:9a:9e:da:61:33:c2:50:0e:9c:86:34:7c:47:43:f0:99:
         be:89:28:f5:b5:68:1e:ef:f5:d7:0a:d5:b9:cb:4b:65:c7:57:
         23:ee:89:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEIs7fu8kKtIW3ZFBgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDYxMDE3NDAyMFoXDTIzMDkwODE3NDAyMFowLzEtMCsGA1UEAxMk
MWMwM2IwNmEtODk2ZC00MTM1LWEyZjMtYzA0MmExZTBjNDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaxMqyzUqtpxDVL36EnKHA3dLDY02gSTfYb0
y+oQVqqGYQbwx7eUaVDMRF/9X+XLUOl1U4etvysB5OiNAxRmgO+4QGyOcETdMYtR
qSvG24euwJu+mBi3u1ZsYRUwiF1yTNR4ZnZ5e2p49Fx3+f9fQQhSgTZq+LWOYoZh
34WxMHbNBfc9epx0phMLAJLd4Qf7zZFiP8fcIGknKy+yTGJA1esZQ0ic+Lno6lrv
dYgc3tYVKgVgUwI6l3NYrUYidToIDabjWo9YDeJLPbgVcGYUIXb+rV3OjJzoeNuc
YABZTtNuDQ6mSdn/bpdcbsAqqe59S+3ilh6/ojkBhGpoPIvJwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEZP9FGzTZTyicreSp9jrrpl8g2YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjFmY2Y3YjYtNGNiYi0z
ZDQ2LTkyNmQtODY4YTFiMDI3MGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxpdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEo4Z8jUDpaDBxOozPXQ359K+aDsA9pbmwboPBlXMT953HPpCR6JbKz1
ug5BvDrZNAcyd9ykLVb3WxQAxLbmh1JryP+4HqcSwPmHDWCAk92EUVgzTakTUkMf
imWvMYCEZ/bjrd0G7UvwxGMzReegS5IPdC6OcAU1vX+/8nUJwofZVW5kf2gtnHCb
bwXjcoQKXeJkX0g4rhX4ZoI3IH7iOz6ntv7JPa9LlS8/iW53MuyCx4xSqUCWutMp
NKQbmYPTcLuB+Vjy1HKKqqGdzgt07tJi6yK6iuieGFJ2mp7aYTPCUA6chjR8R0Pw
mb6JKPW1aB7v9dcK1bnLS2XHVyPuiQw=
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:59:15 2025 by rpki-client