Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d0a3924-f39a-3e51-900d-8bea8335b58a.roa
File:                     7d0a3924-f39a-3e51-900d-8bea8335b58a.roa (raw, json)
Hash identifier:          bQemT/YZq22vC0sC/M0EWtWjXk6WluQLy0lKgrP69kg=
Subject key identifier:   64:92:37:F0:FA:91:03:13:F2:5E:F9:AE:70:33:F4:E0:7A:87:FF:A5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285846EDF2A565EF15EEE508F4DC00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d0a3924-f39a-3e51-900d-8bea8335b58a.roa
Signing time:             Mon 19 Aug 2024 16:08:30 +0000
ROA not before:           Mon 19 Aug 2024 16:08:30 +0000
ROA not after:            Sun 17 Nov 2024 17:08:30 +0000
asID:                     834
IP address blocks:        50.114.242.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ed:f2:a5:65:ef:15:ee:e5:08:f4:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 19 16:08:30 2024 GMT
            Not After : Nov 17 17:08:30 2024 GMT
        Subject: CN=c9f062ce-2946-483a-8f33-16b3a0bd2b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:ae:c0:fa:e4:de:9b:c3:ce:69:1f:3a:ea:
                    7a:57:c9:0d:e7:09:1e:ca:86:31:7e:c0:c2:2b:d8:
                    ee:c4:c1:de:f0:97:4a:14:d1:e8:6e:2b:ce:e1:be:
                    33:a6:eb:9e:dc:c8:4c:fc:c5:c0:00:82:c7:51:c2:
                    2a:88:10:a1:5a:17:f8:9b:c1:38:70:6f:1a:a7:46:
                    cd:2a:81:6f:5f:de:0a:b2:d3:94:ae:18:9c:9f:26:
                    e4:11:3a:ae:1e:87:8a:87:8e:59:4c:40:8b:43:63:
                    b7:82:9a:5a:88:60:4b:97:39:80:8f:08:7e:3b:16:
                    8c:5e:ca:4d:ec:65:94:9e:7a:ac:9c:27:56:20:71:
                    e2:bd:1e:58:f1:60:e0:b7:ba:e1:f3:b4:3a:0a:d5:
                    c2:3e:be:e1:cd:a2:ec:d9:83:82:41:30:a1:94:e3:
                    9d:17:fb:21:4f:b2:f4:49:06:01:ba:9d:11:60:9e:
                    2e:2b:6f:3a:14:7d:bf:6d:7c:23:2f:e5:4d:36:92:
                    5d:86:18:69:e6:1b:a1:ee:83:c9:da:ff:b9:a5:e6:
                    18:89:56:38:f1:37:be:b4:2c:43:97:05:d5:45:00:
                    06:5f:ad:2a:7c:1a:94:e4:bb:e4:d5:3d:07:cd:0e:
                    37:fe:97:bc:7c:ea:21:91:1f:ba:e8:b2:1f:05:ae:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:92:37:F0:FA:91:03:13:F2:5E:F9:AE:70:33:F4:E0:7A:87:FF:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d0a3924-f39a-3e51-900d-8bea8335b58a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:20:20:8e:5f:c4:22:89:45:85:2b:54:af:e8:1d:f0:95:a1:
         91:6f:6d:b4:2b:b9:02:eb:89:a9:68:00:cd:3a:82:a6:d2:97:
         3d:6f:cf:a3:86:74:14:7e:a2:10:a5:8b:a7:db:7a:4f:5d:cf:
         7c:a6:01:d3:f2:45:24:25:ce:2c:75:58:0e:19:5a:b8:97:a8:
         12:42:06:82:90:e8:d1:fc:f1:54:8d:11:9e:29:f0:e1:03:f0:
         80:63:ea:de:08:0e:26:34:08:99:89:bc:45:94:1a:9e:33:07:
         0c:98:b9:4f:e8:49:1f:6d:38:5e:83:b6:57:0a:a7:53:d6:e8:
         47:0b:86:33:43:b0:07:8d:df:1a:98:91:e8:e2:e4:b8:54:6f:
         68:9a:24:8f:de:f4:7d:32:f8:5a:56:d2:1e:7a:c5:4a:99:e7:
         ce:6b:4b:2f:7c:40:c4:4e:b7:9d:7c:ba:a8:51:f9:ac:bc:86:
         b8:f7:2d:c3:68:b2:f8:57:b1:98:8e:78:1a:1e:4b:c2:56:27:
         47:62:6c:a1:09:41:07:82:1c:29:f0:08:35:02:90:4b:34:ac:
         6c:c4:d5:3e:68:be:0b:8f:57:a3:24:9e:be:db:d1:d2:50:16:
         3d:00:fc:41:c1:33:13:eb:00:9b:af:f9:10:cf:95:14:07:0f:
         81:8c:8f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:16:21 2025 by rpki-client