Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/72c39ade-670d-3d42-85b1-d0c7bc0e57f3.roa
File:                     72c39ade-670d-3d42-85b1-d0c7bc0e57f3.roa (raw, json)
Hash identifier:          JYi1DgfdDb+/SMw+p4eERl9SuSuBgSwiPWUJ7smrCU8=
Subject key identifier:   6C:64:6D:B9:B2:EB:E7:4A:11:D5:EE:5B:82:64:C5:27:EA:22:CB:3A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584055D3F13513B464850D72EF40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/72c39ade-670d-3d42-85b1-d0c7bc0e57f3.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Thu 27 Mar 2025 04:00:00 +0000
asID:                     206092
IP address blocks:        23.26.222.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:55:d3:f1:35:13:b4:64:85:0d:72:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Mar 27 04:00:00 2025 GMT
        Subject: CN=7a652d2b-adc2-4684-9606-7ff9edfe56d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:88:ee:4b:dd:a8:4d:35:0b:50:f3:78:7b:34:
                    ee:c9:4b:2b:47:c0:20:d2:aa:c2:85:41:07:a7:92:
                    44:8a:c3:58:a2:da:10:18:07:22:4c:43:d7:a1:a0:
                    e6:f7:7a:79:64:17:c6:fe:83:90:8c:0b:39:53:66:
                    54:27:41:4f:af:c9:b5:15:75:21:72:83:75:a2:db:
                    d2:70:02:a2:50:43:c0:c8:b3:e2:85:2f:8b:25:db:
                    03:59:43:70:29:23:d1:62:c3:4e:bf:5f:dd:70:84:
                    61:26:fa:b5:cc:e1:33:fa:5b:c7:1b:42:13:cc:fe:
                    f8:7f:e6:dc:3c:97:b9:13:9e:f8:a3:c9:cf:6d:90:
                    ee:19:ee:c0:78:8d:15:fa:88:1e:4e:46:fc:7b:e8:
                    c4:68:26:73:5e:58:61:5a:be:41:c0:ae:7f:a7:a6:
                    45:e1:52:33:71:0a:af:d8:cf:f6:e9:5c:36:09:e2:
                    66:75:4c:6b:68:c2:23:e5:63:25:bf:fa:15:38:33:
                    ec:f7:5a:f2:e6:62:c5:83:66:db:85:58:e6:b7:91:
                    b4:e7:47:ba:7c:92:95:56:ea:56:82:4b:47:00:39:
                    7f:36:b2:d3:16:18:70:67:37:d9:62:20:7d:9f:1d:
                    79:2e:41:17:09:48:39:aa:cf:b9:47:07:c8:39:da:
                    ab:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:64:6D:B9:B2:EB:E7:4A:11:D5:EE:5B:82:64:C5:27:EA:22:CB:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/72c39ade-670d-3d42-85b1-d0c7bc0e57f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:f3:2a:d0:1e:ee:e0:fc:1d:3c:b6:07:40:8d:e1:c1:8d:9f:
         10:1c:81:1a:22:89:0f:08:5c:1f:93:93:26:50:4c:bb:6a:5d:
         b8:c6:3b:94:dd:bc:2e:ae:d3:91:3f:23:16:31:b3:22:8b:90:
         c9:c0:d8:bd:23:df:fd:af:d2:ac:94:65:28:90:36:26:7b:28:
         e3:da:47:bf:15:10:de:a8:76:bc:cc:1c:0e:40:bb:bd:33:ce:
         5b:43:b0:cc:d6:a3:0a:58:b0:26:af:9e:ab:45:64:fe:4f:7f:
         f0:05:9c:ca:8e:65:9d:19:66:4b:df:77:7a:1a:08:47:df:24:
         61:e1:ab:4c:ce:46:5e:ac:11:16:5d:e2:d5:6a:77:5c:ad:9f:
         c3:19:73:58:67:2c:3a:28:e9:3e:01:a8:33:a0:37:9d:86:f4:
         4d:8f:83:c0:fe:aa:14:d0:ea:ae:b1:02:03:4b:0d:b1:ac:9d:
         67:02:d2:5e:c5:ee:ed:00:11:3d:fb:01:15:8a:f7:b0:64:cf:
         3d:fc:90:47:a0:a3:6a:fb:c6:9a:11:d5:c1:51:43:ed:b2:3e:
         03:2c:86:5e:14:ee:b7:0a:c2:4c:7a:b7:cf:1b:57:e4:a6:ae:
         5b:62:4f:d6:67:a5:9a:17:8f:92:6a:47:fe:2c:aa:56:00:d7:
         12:42:4e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:22:19 2025 by rpki-client