Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3dc5033d-c6c3-3fc0-b77f-aae06f5f8a7b.roa
File:                     3dc5033d-c6c3-3fc0-b77f-aae06f5f8a7b.roa (raw, json)
Hash identifier:          iVNda/yb2pNBdVsaXxJsrCsOzZj9CbEBw58cXuxM0a4=
Subject key identifier:   CB:D0:0C:56:1C:C3:23:61:6A:DF:7B:94:A7:AC:E2:37:AE:5E:E7:60
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285846330ACB0884326CB7D7F62580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3dc5033d-c6c3-3fc0-b77f-aae06f5f8a7b.roa
Signing time:             Thu 13 Jun 2024 17:20:59 +0000
ROA not before:           Thu 13 Jun 2024 17:20:59 +0000
ROA not after:            Wed 11 Sep 2024 17:20:59 +0000
asID:                     834
IP address blocks:        50.114.220.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:33:0a:cb:08:84:32:6c:b7:d7:f6:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 13 17:20:59 2024 GMT
            Not After : Sep 11 17:20:59 2024 GMT
        Subject: CN=68c14f4e-3f74-42aa-bf16-006b9b28c71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b5:a3:40:7f:17:1c:f3:f5:26:9b:16:d4:9a:
                    ba:94:be:4f:56:24:6f:da:6d:53:8e:fc:e9:fc:4f:
                    44:ba:50:a1:03:6f:ec:a7:ba:c9:05:fd:f8:ca:a4:
                    55:9e:8b:cb:c3:f3:91:1c:b5:e7:0a:65:37:d1:e7:
                    55:43:04:a3:af:17:1e:a5:ee:0a:eb:80:98:46:8d:
                    8a:4a:ab:8a:c8:f8:43:b4:8c:4c:31:71:08:05:9f:
                    47:51:76:10:89:46:07:5b:77:ae:e1:aa:20:01:10:
                    e0:cd:9e:53:dd:c1:0c:09:7d:db:e9:68:a8:3e:33:
                    5e:1c:77:81:0b:85:3b:59:d6:dc:18:a8:e2:5a:41:
                    44:c9:5c:aa:3b:a7:45:ab:b3:0f:dc:a0:19:8f:59:
                    65:fa:e6:cf:36:c5:30:2c:ca:29:f6:51:8b:16:cd:
                    ca:1c:e4:d0:6d:73:b6:f6:bb:1b:9c:6d:c9:eb:7f:
                    14:25:fb:8e:93:73:6e:0d:d5:08:53:14:bb:f7:e4:
                    6f:fc:9f:68:5e:0e:89:c1:8f:b1:dc:fe:d9:5b:db:
                    c9:19:a0:a2:0d:f3:4b:1e:b0:7e:8b:28:af:f9:f8:
                    21:1b:e8:36:6d:3c:e5:28:56:4c:3a:20:09:49:46:
                    22:8c:f6:78:ea:20:3b:45:38:c9:25:9b:6d:52:93:
                    29:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D0:0C:56:1C:C3:23:61:6A:DF:7B:94:A7:AC:E2:37:AE:5E:E7:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3dc5033d-c6c3-3fc0-b77f-aae06f5f8a7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:3d:87:ac:60:51:b9:6e:a3:82:a6:16:d4:d9:aa:30:4e:bc:
         c4:93:54:18:7e:f7:e8:94:cd:13:64:3e:90:9a:39:54:06:e3:
         67:ea:75:9a:28:87:2c:e4:42:0f:dc:9e:38:7f:76:d6:45:b0:
         1a:7c:f3:91:c4:4f:b3:61:e7:c5:66:28:87:76:d2:84:8a:b6:
         e4:6c:58:6c:9f:60:d1:87:85:68:fb:e7:01:fb:0f:ee:4e:3e:
         ef:2d:bb:c6:af:3f:e7:fd:57:d6:74:f3:d3:43:5e:8f:e0:0d:
         7d:74:13:89:14:fb:27:22:26:f1:61:f7:00:0d:e6:43:6c:48:
         0b:68:9e:0c:ab:0f:2f:73:c7:b5:0d:f9:39:95:95:9d:07:40:
         d0:8d:f6:51:0b:af:61:bc:ab:22:44:89:b1:fa:63:e4:fe:c8:
         f0:a9:50:ef:14:36:76:35:b0:05:5b:14:04:2b:23:be:a8:65:
         76:dc:b9:67:de:44:aa:e0:15:dc:cc:c1:24:75:7b:45:33:54:
         22:f5:9f:2b:7d:d3:5d:e4:02:8d:7c:1b:0e:25:2c:1e:24:ab:
         0c:af:e6:67:6e:78:29:7e:6e:ca:a4:7b:ec:47:28:41:04:bd:
         e9:b6:98:2f:09:08:d5:76:17:0e:18:27:fd:5f:17:ec:f7:34:
         26:b9:25:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:31:37 2025 by rpki-client