Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6927acc6-900d-3805-a334-4928acc15015.roa
File:                     6927acc6-900d-3805-a334-4928acc15015.roa (raw, json)
Hash identifier:          aHhO9YrEQBQ4jPekX/6lQn527Aoyes4AC3r6r3f5Rd0=
Subject key identifier:   54:A3:48:29:6E:E9:93:A1:13:DF:87:B5:8B:65:1E:51:55:ED:A4:69
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583E3D45E107765F93199D290500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6927acc6-900d-3805-a334-4928acc15015.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     7018
IP address blocks:        23.26.207.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:3d:45:e1:07:76:5f:93:19:9d:29:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=55034cd0-23a5-4066-8100-007390bc8aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:14:a7:c9:08:3f:4a:97:40:d1:10:e2:fb:3d:
                    2b:91:72:f6:4b:f4:69:c6:54:4c:08:89:cc:57:f7:
                    40:13:01:c2:27:20:0b:97:dd:90:64:dd:4c:5d:6d:
                    10:cf:3a:fe:41:9f:88:6e:90:7f:ed:26:79:d1:17:
                    17:b7:20:d6:fa:ab:be:a2:70:30:a1:ed:96:89:d6:
                    b5:fd:11:47:35:9b:66:cc:14:2d:43:95:53:7f:4c:
                    97:13:26:76:dd:41:eb:79:b8:10:07:4d:60:b9:8c:
                    3c:0b:51:3c:cc:38:44:fd:65:01:5e:90:6b:8f:93:
                    e1:3f:b2:41:67:43:f3:e0:9a:54:99:0d:8f:e6:f3:
                    fd:0e:34:fb:b1:ad:c6:25:48:1e:b4:b0:bf:4a:13:
                    ee:22:f1:0a:4b:9f:b1:d0:7c:ba:57:cc:98:27:ae:
                    3d:b6:f1:ab:4f:d3:12:0a:0d:88:60:cb:bb:04:e6:
                    0e:89:62:a3:89:c5:ce:78:0c:66:28:fa:16:e6:f4:
                    91:16:57:24:26:11:2c:6a:6f:20:c8:6e:87:5b:0a:
                    cb:06:65:a0:24:37:35:db:3b:04:15:ac:39:2e:b7:
                    fb:00:00:7f:18:33:b4:1c:21:83:a8:08:16:d4:52:
                    bb:8f:13:ab:85:4d:e6:f6:60:e1:f1:63:0f:9c:46:
                    f4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A3:48:29:6E:E9:93:A1:13:DF:87:B5:8B:65:1E:51:55:ED:A4:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6927acc6-900d-3805-a334-4928acc15015.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:69:89:38:d4:a5:f1:25:00:76:94:88:35:e5:34:0f:d9:e0:
         a7:d4:c9:48:39:cc:db:71:17:dc:b3:84:55:75:aa:40:e9:57:
         fc:c9:61:52:a1:e2:09:97:0b:e3:e9:be:85:9b:ba:ab:90:64:
         1f:25:21:b9:52:98:31:02:6b:5b:3c:f9:18:23:34:d9:25:5a:
         80:77:c6:a7:39:0d:e6:28:fe:31:13:21:57:b0:8d:57:21:01:
         ca:79:1a:98:44:fd:83:5e:e2:21:d0:cc:c4:58:70:6b:cf:ab:
         c4:97:15:e7:52:a9:2a:dd:92:58:6e:71:9c:15:c8:7d:5b:ef:
         38:1f:a3:e8:5f:40:e5:9c:0c:75:9b:d6:cd:44:66:d0:4b:66:
         f1:86:30:48:7e:93:c7:d4:66:07:b6:30:af:ae:60:95:a5:a6:
         a2:24:ed:af:78:1f:60:b0:a2:62:72:b6:63:c0:e8:70:55:20:
         a2:cf:7d:73:30:1e:37:73:d2:0d:31:0b:51:92:b7:a2:90:82:
         aa:9e:08:0b:98:56:9a:d5:27:f5:9f:4e:4b:00:9b:f8:6b:7a:
         3b:41:ff:88:8e:31:14:ec:5a:53:a7:c4:62:c3:47:d5:9d:61:
         d6:03:2d:7e:12:e2:be:3d:ac:a1:89:64:86:62:43:7e:bf:b5:
         d4:27:e9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:23:43 2025 by rpki-client