Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6e6b3902-f056-3ea4-9503-5d7410033243.roa
File:                     6e6b3902-f056-3ea4-9503-5d7410033243.roa (raw, json)
Hash identifier:          iNCHspKw+KtOy29heKigeBV6YXlGPti9hfAX6oOnYig=
Subject key identifier:   8E:09:83:9C:21:FC:A7:9F:5B:C2:9E:D5:6F:7B:15:A9:FF:7D:2B:8A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848CBAFE67A9AE55BF0FE2D6A40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6e6b3902-f056-3ea4-9503-5d7410033243.roa
Signing time:             Thu 06 Feb 2025 19:10:24 +0000
ROA not before:           Thu 06 Feb 2025 19:10:24 +0000
ROA not after:            Wed 07 May 2025 18:10:24 +0000
asID:                     401152
IP address blocks:        50.114.102.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:af:e6:7a:9a:e5:5b:f0:fe:2d:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb  6 19:10:24 2025 GMT
            Not After : May  7 18:10:24 2025 GMT
        Subject: CN=311b9809-da00-4133-8693-1ac71d1c9c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:20:dd:2e:c5:67:dc:6a:0c:62:f8:53:8f:7f:
                    c8:15:6d:3d:34:d0:33:1f:a2:a8:7b:64:9a:37:c7:
                    55:db:9a:66:f7:69:a1:89:dc:b3:17:9c:3f:44:06:
                    dc:49:d9:f4:22:c8:2e:c3:29:e0:24:2b:28:26:60:
                    5b:17:77:6e:51:ca:7c:a0:8f:de:74:df:9a:7e:b3:
                    3e:6f:db:4a:bb:36:af:7b:5e:bc:5f:13:6d:9b:43:
                    2e:e2:e1:84:6f:04:55:b9:26:70:ce:25:50:0a:ad:
                    8d:33:9e:a5:ff:75:10:71:ec:50:65:41:ec:c1:e2:
                    e7:51:6e:c1:54:33:4b:51:32:a7:12:34:b2:36:91:
                    97:34:7c:b7:fc:31:e2:88:cb:3a:3e:1c:fb:f7:d6:
                    51:06:8f:56:97:07:a9:3d:ec:4e:2a:6c:91:78:5c:
                    8d:0c:1a:af:ff:14:2c:56:c2:06:41:1c:6c:d4:61:
                    9a:0a:31:17:57:b7:93:54:ba:4d:ca:fe:60:a7:8e:
                    6c:93:a9:c7:59:72:e0:fc:9e:03:03:c0:47:d7:b1:
                    02:b9:85:aa:3b:b3:45:2a:f3:cc:17:fe:31:cb:ee:
                    ac:2d:ec:6e:16:db:cc:69:6b:36:55:26:60:79:4f:
                    9f:95:67:36:4a:64:8c:31:64:e2:03:93:3b:ba:80:
                    21:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:09:83:9C:21:FC:A7:9F:5B:C2:9E:D5:6F:7B:15:A9:FF:7D:2B:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6e6b3902-f056-3ea4-9503-5d7410033243.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:d1:c4:37:95:4e:86:72:3c:2b:30:14:0d:2d:91:18:cb:a8:
         89:71:e7:07:67:d3:4b:e4:35:c5:6d:f3:74:f8:04:11:f2:ac:
         34:9b:11:a2:66:22:9a:e3:2e:8b:a8:31:a7:3c:6c:d8:62:8e:
         d4:e0:29:52:ae:33:72:a8:83:67:10:18:97:be:65:2f:75:52:
         ef:75:f7:70:d7:e1:9c:0e:b5:cc:41:cd:ae:39:f9:87:c8:cf:
         a1:e0:d0:2f:90:36:59:9f:4f:d6:14:00:3f:29:26:52:ef:24:
         1c:f7:c8:1d:1e:53:62:a7:16:a1:64:6a:45:09:a7:43:08:f0:
         ec:03:0f:2f:56:cb:30:e5:78:44:d2:25:7b:47:94:3b:f5:eb:
         2d:6b:4d:37:c7:f0:6f:92:e8:22:30:1c:17:2b:ff:2d:d4:f7:
         73:86:fc:ba:98:69:7e:a5:21:0c:ab:88:d5:c0:1c:77:e3:99:
         5d:a9:2c:6a:02:ac:65:21:ba:b5:db:66:10:67:0c:78:c2:01:
         d1:76:17:62:e6:06:ae:cf:8f:33:65:12:be:5d:67:9b:ce:1c:
         a6:86:2a:69:fb:fe:a0:48:8e:90:05:34:d4:05:7a:cf:00:b7:
         72:d9:37:72:92:9d:80:6c:be:6a:95:52:16:b1:a9:e7:1c:f4:
         e3:ce:14:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:15:59 2025 by rpki-client