Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8a6059b2-80a0-3d3c-8d61-8e98e5d64586.roa
File:                     8a6059b2-80a0-3d3c-8d61-8e98e5d64586.roa (raw, json)
Hash identifier:          YL/pjKeOMrtIQhx5De/CLBvgBfFQsyuJrXm1EC2yZQY=
Subject key identifier:   0F:CF:C7:06:55:CC:C8:8E:65:60:65:D9:34:03:52:8C:1F:6F:B7:B3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842727C88EE063C2EA04E858780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8a6059b2-80a0-3d3c-8d61-8e98e5d64586.roa
Signing time:             Wed 05 Jul 2023 15:38:20 +0000
ROA not before:           Wed 05 Jul 2023 15:38:20 +0000
ROA not after:            Tue 03 Oct 2023 15:38:20 +0000
asID:                     834
IP address blocks:        50.114.54.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:72:7c:88:ee:06:3c:2e:a0:4e:85:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  5 15:38:20 2023 GMT
            Not After : Oct  3 15:38:20 2023 GMT
        Subject: CN=844c4893-b54d-4fe4-a8d4-931c7a1a7e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:eb:56:aa:e9:07:f9:0d:80:ce:6c:69:90:a2:
                    ae:18:5a:38:73:63:ea:66:d0:82:b6:28:e1:7b:b8:
                    76:33:d8:f7:3c:39:c7:91:70:94:40:5f:84:40:fd:
                    a9:f2:d6:61:6d:12:df:81:d5:91:a3:af:31:46:30:
                    42:a4:16:04:12:3c:ab:8f:7b:2c:ea:fa:98:f0:9b:
                    67:d7:2a:1a:a4:07:c6:13:ce:9c:18:9f:50:bf:da:
                    f4:60:e6:ec:3c:30:d8:97:42:d6:35:12:c0:24:6e:
                    c9:2f:72:20:53:28:5d:a9:3f:6b:14:7c:f0:95:6e:
                    29:4d:5e:50:dd:b9:a7:2d:1e:e7:62:ee:3f:67:92:
                    42:f5:65:99:d0:fe:8d:b9:be:e3:ef:aa:f5:78:a1:
                    f4:93:bf:5d:6f:e1:0b:4c:d9:64:fb:56:9c:38:d3:
                    94:90:ec:3d:5a:df:b2:35:31:af:1b:7b:c8:c8:f6:
                    f7:ce:cc:0a:45:7d:f8:2f:1d:ed:9e:97:16:39:7b:
                    b5:3c:b5:42:cf:a6:6a:f9:71:3f:7a:11:30:30:b0:
                    62:8a:ab:6a:75:13:c1:d4:38:61:31:d9:6c:6c:ce:
                    ff:63:f5:cd:9b:9e:79:2b:7d:51:6e:1d:08:e6:ad:
                    db:a4:79:7a:47:39:ff:0f:f9:0d:d5:ef:03:3a:39:
                    71:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CF:C7:06:55:CC:C8:8E:65:60:65:D9:34:03:52:8C:1F:6F:B7:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8a6059b2-80a0-3d3c-8d61-8e98e5d64586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:df:52:fc:fe:d9:18:6c:f1:51:f7:3e:8a:3a:7c:33:f6:97:
         b4:e3:ae:4b:b3:67:db:99:4f:65:79:6d:e6:1a:6f:2b:9f:94:
         38:0e:a9:4f:f8:e8:4f:65:ca:29:c3:cd:b6:7a:e3:13:a0:eb:
         06:7d:c6:be:b5:3e:11:a7:0e:0b:0f:37:f3:34:20:da:be:44:
         0e:91:2d:6c:a6:28:65:22:88:64:11:ec:b5:0f:2b:66:ae:63:
         28:5e:2c:c2:2b:bb:3e:ab:d1:d1:19:26:84:7f:e2:ee:d7:e5:
         02:9a:a3:e8:24:7b:5b:62:04:ee:66:a8:05:32:ef:c5:4e:3b:
         bd:f4:38:69:11:1c:54:8d:01:69:cc:bc:6f:1f:fc:61:31:35:
         36:a2:e6:64:8c:09:16:64:f6:57:67:86:96:04:64:fa:7c:fc:
         10:30:d9:61:66:9a:c1:95:5c:d7:55:b3:a1:7e:bd:bb:07:54:
         0e:bf:af:a3:e1:e2:96:3a:a8:fd:e5:05:d1:b0:c8:54:56:33:
         42:94:4b:ed:9d:90:88:6a:f8:3b:80:58:8c:c4:11:33:7f:04:
         72:a3:09:b4:fa:56:38:ea:84:53:46:a1:ac:91:7d:d1:8b:28:
         f6:00:e8:b3:3a:c6:57:d5:c2:62:a4:db:8e:4b:00:43:4e:5d:
         05:8a:0e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:44:08 2025 by rpki-client