Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ff1a8ff-1236-3399-8e6e-2873b47a27cc.roa
File:                     6ff1a8ff-1236-3399-8e6e-2873b47a27cc.roa (raw, json)
Hash identifier:          0yceLdIIcWEb3v2braO9gXw+nsfBKe4I4Wd44vSgYDs=
Subject key identifier:   62:38:6A:51:E8:A3:76:86:D4:00:E7:E7:C1:EA:DC:7C:F6:0F:25:BF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858482CB3AEF63E0BE6D633E955C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ff1a8ff-1236-3399-8e6e-2873b47a27cc.roa
Signing time:             Wed 11 Dec 2024 20:24:30 +0000
ROA not before:           Wed 11 Dec 2024 20:24:30 +0000
ROA not after:            Tue 11 Mar 2025 19:24:30 +0000
asID:                     401152
IP address blocks:        50.114.12.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:b3:ae:f6:3e:0b:e6:d6:33:e9:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 11 20:24:30 2024 GMT
            Not After : Mar 11 19:24:30 2025 GMT
        Subject: CN=fda49f34-e6ce-4a9d-af59-09583db2d97d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4c:48:b4:a8:52:07:6d:1f:b9:b7:af:9a:dc:
                    56:ac:83:fa:34:f9:b2:d8:bb:ea:f0:aa:8f:22:8f:
                    90:c3:45:67:e8:1e:a2:87:da:4e:87:8c:c8:4c:56:
                    cd:65:e1:f4:2e:90:c1:80:30:ef:ed:71:e5:82:a0:
                    51:bb:6e:35:c9:78:07:b3:72:79:67:0b:a1:f4:0c:
                    df:36:b2:68:cb:b6:9d:cf:da:9e:e9:ef:b9:e5:56:
                    02:70:c6:3c:a6:ee:15:01:52:7d:2f:20:cf:76:4f:
                    f3:1e:e2:4e:b5:ee:a0:7d:a4:ea:aa:3e:bf:f8:bb:
                    0f:f4:33:d8:b7:71:6a:a5:82:1f:0e:24:48:11:87:
                    5b:52:e9:04:00:3f:c5:11:1c:4c:3d:c3:bf:21:69:
                    3e:d9:1a:ad:2a:8e:b2:81:05:25:01:81:a7:2a:4f:
                    89:dc:48:b6:ae:b1:68:e9:4f:11:6f:a0:cc:0b:0b:
                    20:97:ef:e2:27:e9:84:0c:69:17:6a:6f:28:20:54:
                    ce:aa:fd:21:f4:07:de:95:ff:06:de:28:92:58:8d:
                    87:a2:48:f8:bf:95:f3:d4:02:24:c1:17:96:40:8c:
                    bc:59:10:86:5b:37:9a:8a:27:08:bd:74:ad:29:53:
                    2d:22:ca:92:10:e2:4e:67:45:d5:d1:c7:4c:04:3f:
                    33:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:38:6A:51:E8:A3:76:86:D4:00:E7:E7:C1:EA:DC:7C:F6:0F:25:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ff1a8ff-1236-3399-8e6e-2873b47a27cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:fb:55:b3:7e:b1:07:06:98:1e:d6:14:f7:07:a9:51:e4:1c:
         42:e2:4a:43:7c:37:d4:52:75:98:cc:bc:22:7c:8f:d1:42:36:
         ef:55:b0:55:92:13:38:82:e6:82:0e:80:ad:0c:84:ec:2b:31:
         85:8c:52:56:80:95:0a:ec:66:54:bc:57:2c:6f:84:b2:1c:38:
         e3:ec:69:e4:a4:23:14:39:8b:ad:01:af:41:12:70:6d:50:8e:
         d1:2c:bf:fe:f4:30:3a:92:cf:87:32:db:e7:bc:65:3d:22:5f:
         09:23:6b:9c:5f:7c:d9:12:a5:79:31:27:45:8e:e2:ef:e6:c2:
         17:6b:2f:f6:96:f5:ca:1e:a0:8c:10:c9:a8:a2:5a:c5:17:88:
         3d:88:42:92:42:c7:3e:c7:d0:97:dd:f8:62:8c:92:95:67:6d:
         65:90:5d:76:cc:34:70:71:0c:86:26:5d:52:fc:29:af:56:7f:
         95:78:9e:36:2e:f4:71:44:3d:95:fe:54:73:9b:31:76:8e:47:
         7b:2b:18:4d:6e:92:b8:8c:e4:0e:b6:39:b8:d6:1c:9d:1d:f8:
         dd:fa:f8:05:83:41:12:6e:db:a2:d8:ef:d1:59:44:df:9c:cd:
         df:cf:de:89:d3:3f:34:de:33:e5:eb:c8:9a:e0:8e:4c:22:f5:
         c6:75:6c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:04:45 2025 by rpki-client