Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ea530d3-4bec-30bf-bc08-5f5432cfc7e4.roa
File:                     0ea530d3-4bec-30bf-bc08-5f5432cfc7e4.roa (raw, json)
Hash identifier:          reKWJRorsf8Vgu4JH6jQx0KMJFRvLAHQr6F6CvQJpLI=
Subject key identifier:   8A:4F:B1:3B:F8:22:A8:93:40:7E:24:C9:FD:22:54:D3:6F:17:E9:26
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845F8258AFC4343624064DBD080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ea530d3-4bec-30bf-bc08-5f5432cfc7e4.roa
Signing time:             Thu 23 May 2024 15:02:11 +0000
ROA not before:           Thu 23 May 2024 15:02:11 +0000
ROA not after:            Wed 21 Aug 2024 15:02:11 +0000
asID:                     9009
IP address blocks:        50.114.70.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f8:25:8a:fc:43:43:62:40:64:db:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 23 15:02:11 2024 GMT
            Not After : Aug 21 15:02:11 2024 GMT
        Subject: CN=41b3d683-7b2d-49f3-a8e0-81719e8ed6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:49:cf:20:35:7f:27:70:7a:c3:b7:f5:68:
                    b9:60:70:2e:ae:42:54:7d:1e:62:23:e1:a9:90:c7:
                    4c:3a:00:b5:fa:46:42:d4:b2:c6:7f:65:d8:b6:cc:
                    ce:88:35:f4:36:88:90:33:da:61:eb:2a:01:be:66:
                    19:51:8f:d7:b7:ed:09:ed:bf:fa:58:02:4e:97:2e:
                    e6:0f:f3:57:27:53:50:55:e7:33:7c:01:82:39:8e:
                    a2:ca:43:1d:b1:6a:07:1d:cf:50:3d:ad:2b:7e:ff:
                    01:44:3e:07:a4:aa:00:1d:8e:21:72:a7:00:93:bb:
                    69:4b:d7:0f:54:c4:26:ce:95:c6:57:51:a1:2b:86:
                    1b:fb:6a:55:3b:b9:64:b5:63:3a:53:64:48:b5:a5:
                    82:05:ed:3e:b4:4c:f4:00:bd:b2:86:3a:cd:77:a9:
                    b0:59:62:19:52:17:6a:ba:25:20:ba:e9:30:61:0f:
                    33:40:86:c7:95:d4:9d:eb:f9:0c:16:9b:1b:c8:24:
                    2f:fd:fa:8d:5f:f7:9c:32:a8:fc:58:75:08:fe:25:
                    23:21:1b:6f:f0:83:33:e6:70:a0:a6:bc:2a:1a:0f:
                    90:8d:66:1e:0e:d7:ae:4f:63:15:f3:43:26:d9:47:
                    cc:75:5b:83:6f:57:60:60:20:42:e7:f0:79:01:43:
                    68:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4F:B1:3B:F8:22:A8:93:40:7E:24:C9:FD:22:54:D3:6F:17:E9:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ea530d3-4bec-30bf-bc08-5f5432cfc7e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:6d:69:5a:00:08:4e:72:00:00:79:3b:e3:a3:50:4a:96:3c:
         6b:88:ed:4e:01:cf:18:3b:0d:57:04:de:29:9f:79:75:7c:ad:
         1b:51:ad:12:45:98:30:1f:7d:90:53:01:9a:10:50:39:f7:e0:
         51:24:70:5d:4e:46:40:7a:d6:0c:af:a2:66:c8:55:45:e2:a2:
         16:07:21:a5:68:23:bc:e9:7f:f6:b9:63:4a:8f:2c:c3:6e:ad:
         de:de:62:3a:df:17:38:49:f1:22:b3:89:38:f7:8d:01:75:ef:
         ad:40:3a:ad:33:5f:23:bd:d1:11:b3:d1:70:b1:f7:6c:2b:7a:
         f2:c5:9d:11:56:5a:bd:7a:57:c0:7d:62:55:95:82:6c:40:5d:
         31:13:3c:da:a8:0f:58:48:30:75:a7:03:b4:7e:40:89:5f:65:
         a3:74:66:20:96:83:d6:5b:2d:75:8f:3b:09:ce:0d:08:b9:ac:
         8a:b2:36:e0:d2:e3:fb:93:14:94:6f:f2:52:54:f1:7a:89:45:
         ca:40:ca:b8:f3:02:d2:a4:23:88:c1:3d:8a:f1:1e:f2:1a:a2:
         27:80:22:2b:1d:1d:74:b1:8c:31:a3:b2:b2:2b:28:2c:99:93:
         27:58:8a:f1:37:dc:f7:bf:60:94:6f:e5:6c:4d:08:fd:5e:64:
         ea:39:80:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----