Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/65afeac3-a33c-39b5-91a6-7f743cbe8cad.roa
File:                     65afeac3-a33c-39b5-91a6-7f743cbe8cad.roa (raw, json)
Hash identifier:          Rerbm+0KkX6GsDg5uC4amPWy++fVL97bdGgV4R1OAuw=
Subject key identifier:   19:1C:98:85:49:C4:CB:3E:A5:88:DD:DE:FA:CB:2F:C2:02:DB:27:06
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842A7B3259E88019797FD8A5B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/65afeac3-a33c-39b5-91a6-7f743cbe8cad.roa
Signing time:             Mon 24 Jul 2023 17:06:13 +0000
ROA not before:           Mon 24 Jul 2023 17:06:13 +0000
ROA not after:            Sun 22 Oct 2023 17:06:13 +0000
asID:                     132335
IP address blocks:        50.114.17.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a7:b3:25:9e:88:01:97:97:fd:8a:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 24 17:06:13 2023 GMT
            Not After : Oct 22 17:06:13 2023 GMT
        Subject: CN=c3203a73-7b31-4e19-82e5-981d4d94764a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:6d:7d:05:88:ee:43:0e:0b:68:dc:bf:07:
                    3f:bd:12:03:53:c9:e4:42:08:35:d5:c1:c6:3e:ed:
                    43:6b:aa:0b:a1:e5:d3:ce:a3:12:57:18:1c:8b:a4:
                    21:15:0f:e8:bc:f3:b5:39:e6:99:26:bf:77:8b:46:
                    50:ff:c1:62:80:19:f6:31:39:e0:50:b2:c3:ce:d5:
                    11:77:90:75:9f:a2:73:a5:47:31:ce:df:df:70:c1:
                    9e:05:e5:14:ca:7e:e3:5a:11:53:af:ed:45:c6:78:
                    06:60:d7:5d:a2:d7:e8:4d:b0:5c:20:21:44:99:57:
                    b6:52:70:a6:7d:a9:ac:0b:90:6b:0a:49:db:9c:d8:
                    ab:96:6b:e9:0d:f6:6b:9a:43:57:ce:b2:44:02:3f:
                    cb:b2:51:52:58:05:90:89:7c:1a:f0:26:20:d6:42:
                    75:b1:ed:1b:0a:cc:5e:e7:47:a1:60:cd:d4:29:f3:
                    4d:44:33:81:7a:d6:cc:2c:4f:a4:12:a8:81:67:6f:
                    46:b9:f0:95:ed:fa:e2:f8:bf:1e:bd:b6:27:2e:61:
                    14:3b:32:06:63:f0:3a:b2:d7:f6:91:23:92:4a:70:
                    ab:4b:5f:d3:aa:f7:ed:3e:6a:10:10:aa:7e:da:e3:
                    d7:0a:4a:97:a7:6f:06:28:2f:85:4f:61:18:d7:ee:
                    9d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1C:98:85:49:C4:CB:3E:A5:88:DD:DE:FA:CB:2F:C2:02:DB:27:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/65afeac3-a33c-39b5-91a6-7f743cbe8cad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:51:e4:c5:6a:20:0a:7c:f0:d5:80:50:8d:07:fb:de:06:58:
         38:de:07:c2:67:57:b2:67:95:15:4b:4d:b2:ff:fd:a1:7c:18:
         29:eb:e7:fc:62:3f:40:f6:4a:8f:0d:cb:00:54:e5:c1:b5:b7:
         ac:49:40:70:0c:94:c5:59:ed:24:15:5d:40:b7:d2:9a:b7:ef:
         37:11:ca:01:bf:30:39:f4:21:88:96:39:21:16:ef:9f:f0:b6:
         00:46:9e:c5:fd:72:e7:1d:4d:ee:87:be:ec:0a:df:6d:9d:85:
         58:f4:4f:c3:d9:a0:3a:81:bd:e2:c3:56:4a:82:d9:07:21:c8:
         15:f1:f6:66:04:51:29:58:48:f8:c0:fa:ab:ee:9b:84:d1:02:
         d1:29:e7:b3:32:8a:e6:c6:1b:83:fc:e2:9e:22:c4:46:71:25:
         79:ce:60:74:c9:d7:60:2d:4f:44:95:57:e5:bd:6a:1f:b3:1c:
         b4:78:1a:54:5d:35:85:61:c3:0d:3b:79:92:a8:9f:94:d7:98:
         24:0c:16:80:d0:cd:24:8c:ad:de:7e:56:f0:64:8f:43:5f:e0:
         1d:44:87:20:b6:e8:de:fb:07:dd:cd:5f:af:c1:25:f5:59:f9:
         81:70:97:c4:f6:11:7f:ec:26:bd:dd:0d:f9:d6:2e:87:66:43:
         91:19:51:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:31:40 2025 by rpki-client