Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76e62cdc-0fc5-39f4-a74f-7fdbe0883e99.roa
File:                     76e62cdc-0fc5-39f4-a74f-7fdbe0883e99.roa (raw, json)
Hash identifier:          aUCHirlKmDscL0tZrurr87Piw6zwOdTlwN4RaFyOJ2k=
Subject key identifier:   28:84:87:06:A4:8B:5E:5A:10:6B:B7:A0:91:C9:E1:6F:BB:99:43:F6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845131AE486A00CB3E09066FB00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76e62cdc-0fc5-39f4-a74f-7fdbe0883e99.roa
Signing time:             Sat 02 Mar 2024 14:00:31 +0000
ROA not before:           Sat 02 Mar 2024 14:00:31 +0000
ROA not after:            Fri 31 May 2024 13:00:31 +0000
asID:                     60117
IP address blocks:        50.114.168.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:13:1a:e4:86:a0:0c:b3:e0:90:66:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  2 14:00:31 2024 GMT
            Not After : May 31 13:00:31 2024 GMT
        Subject: CN=7919e609-272b-4f20-bcc2-c8b616134633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:ec:00:5a:61:92:b9:ff:80:29:05:9e:94:
                    19:08:54:af:77:31:d0:0c:eb:ad:64:fe:ec:e1:45:
                    58:06:b2:88:a0:57:81:02:39:ed:cb:59:25:1b:ca:
                    f1:1c:02:41:40:ec:e2:f1:28:98:e6:13:50:3b:64:
                    ad:3e:ef:32:d7:33:9a:7f:d9:5d:70:66:65:1a:4f:
                    9a:e8:90:58:00:dd:dd:59:38:1b:0f:ed:b8:d0:d7:
                    c1:d2:94:16:f8:71:3e:0e:13:46:b7:b6:e9:13:e0:
                    58:7f:49:dc:12:95:26:d1:a1:fc:c5:97:6a:86:aa:
                    db:a6:aa:49:57:24:0f:be:61:20:18:ca:cc:97:22:
                    4a:9f:20:55:fa:0b:78:8a:73:1a:0b:fe:78:fd:08:
                    b6:20:6e:c8:8e:20:d0:23:96:66:4e:fd:37:d8:11:
                    af:57:94:0e:b6:8f:30:bc:c5:59:11:27:d7:e4:6a:
                    64:70:ed:15:96:38:8c:65:4e:c5:68:c6:bf:09:6d:
                    98:4f:04:4f:76:44:72:f4:fe:2a:bb:43:34:ff:cb:
                    97:0a:1a:32:cc:21:7c:b5:2c:0b:56:86:2f:b8:91:
                    2a:ec:ee:bf:01:b4:72:6e:e9:38:45:d6:17:91:e6:
                    65:70:18:bd:f5:fd:9b:5b:f8:65:b3:f5:8f:6b:b7:
                    61:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:84:87:06:A4:8B:5E:5A:10:6B:B7:A0:91:C9:E1:6F:BB:99:43:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76e62cdc-0fc5-39f4-a74f-7fdbe0883e99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:c8:61:5b:b9:f3:0c:91:58:04:66:25:b7:68:ac:f6:34:4c:
         9a:93:7d:e2:12:dd:c2:ad:f7:5a:09:6b:1f:27:6d:3a:e7:78:
         c4:4a:10:96:b9:71:20:a5:45:e1:2f:50:1d:f9:ab:cb:bb:7c:
         3e:13:bc:8c:e8:05:ce:ad:40:1b:53:5c:dc:28:72:da:7a:fe:
         5f:26:e2:f8:35:bb:d2:05:90:36:d5:75:0c:23:8d:33:f2:47:
         fc:78:14:da:9f:36:28:a8:e0:d4:c7:97:65:40:89:b0:ac:fe:
         34:73:1c:32:a4:ae:1c:9f:05:ea:e9:b1:4c:b4:df:dc:96:43:
         9a:10:73:e4:4a:19:66:35:f0:2c:0a:0f:8a:f1:9f:c8:2f:54:
         a6:4c:fa:d2:43:db:ab:ab:0e:d8:8f:4f:e9:ba:fe:b0:38:92:
         87:32:24:dd:80:5e:fc:27:70:b4:5d:e4:a3:46:19:23:53:90:
         db:ef:d5:5e:bb:17:e5:75:8c:ff:62:fc:6d:58:c4:3a:c2:f3:
         0c:bd:5c:4b:ff:dd:82:5f:43:49:33:3b:da:53:ea:41:f4:cd:
         96:5e:77:93:51:e3:a4:2d:60:ce:d0:25:64:2b:32:0c:28:a1:
         93:3a:53:be:b0:11:37:95:c7:3d:65:ea:81:30:b7:9c:5a:6a:
         2a:70:2d:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUTGuSGoAyz4JBm+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDMwMjE0MDAzMVoXDTI0MDUzMTEzMDAzMVowLzEtMCsGA1UEAxMk
NzkxOWU2MDktMjcyYi00ZjIwLWJjYzItYzhiNjE2MTM0NjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzTsAFphkrn/gCkFnpQZCFSvdzHQDOutZP7s
4UVYBrKIoFeBAjnty1klG8rxHAJBQOzi8SiY5hNQO2StPu8y1zOaf9ldcGZlGk+a
6JBYAN3dWTgbD+240NfB0pQW+HE+DhNGt7bpE+BYf0ncEpUm0aH8xZdqhqrbpqpJ
VyQPvmEgGMrMlyJKnyBV+gt4inMaC/54/Qi2IG7IjiDQI5ZmTv032BGvV5QOto8w
vMVZESfX5GpkcO0VljiMZU7FaMa/CW2YTwRPdkRy9P4qu0M0/8uXChoyzCF8tSwL
VoYvuJEq7O6/AbRybuk4RdYXkeZlcBi99f2bW/hls/WPa7dh7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCiEhwaki15aEGu3oJHJ4W+7mUP2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzZlNjJjZGMtMGZjNS0z
OWY0LWE3NGYtN2ZkYmUwODgzZTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMnKoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEXIYVu58wyRWARmJbdorPY0TJqTfeIS3cKt91oJax8nbTrneMRKEJa5
cSClReEvUB35q8u7fD4TvIzoBc6tQBtTXNwoctp6/l8m4vg1u9IFkDbVdQwjjTPy
R/x4FNqfNiio4NTHl2VAibCs/jRzHDKkrhyfBerpsUy039yWQ5oQc+RKGWY18CwK
D4rxn8gvVKZM+tJD26urDtiPT+m6/rA4kocyJN2AXvwncLRd5KNGGSNTkNvv1V67
F+V1jP9i/G1YxDrC8wy9XEv/3YJfQ0kzO9pT6kH0zZZed5NR46QtYM7QJWQrMgwo
oZM6U76wETeVxz1l6oEwt5xaaipwLSg=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:54:27 2025 by rpki-client