Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9728b909-738b-301d-9b1c-6943047c258a.roa
File:                     9728b909-738b-301d-9b1c-6943047c258a.roa (raw, json)
Hash identifier:          YnR5Kljxgca2cnQwx54jFYlDhJX5d9uSbFRRBf3hND8=
Subject key identifier:   F8:AB:E9:4A:28:DB:82:D2:33:1C:4E:21:FC:B0:08:35:D8:30:93:07
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858437083149F5BE722EC921E6780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9728b909-738b-301d-9b1c-6943047c258a.roa
Signing time:             Wed 04 Oct 2023 15:26:51 +0000
ROA not before:           Wed 04 Oct 2023 15:26:51 +0000
ROA not after:            Tue 02 Jan 2024 16:26:51 +0000
asID:                     16276
IP address blocks:        50.114.205.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:70:83:14:9f:5b:e7:22:ec:92:1e:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  4 15:26:51 2023 GMT
            Not After : Jan  2 16:26:51 2024 GMT
        Subject: CN=baea0d02-f343-4b4b-9cbf-6b6bf71b3acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:51:80:07:91:b0:12:41:4c:c8:f7:bb:fb:9c:
                    1c:03:0d:ee:71:65:82:97:41:25:07:c9:13:a0:fe:
                    30:87:a1:89:26:14:12:9d:e1:a4:78:c7:96:8d:16:
                    63:8f:42:ed:1b:54:1c:c9:9c:18:15:67:0d:34:84:
                    9d:c0:5d:3e:b8:00:a9:7f:31:e7:c7:28:47:4c:1d:
                    39:0a:0e:ef:b8:26:ce:0d:19:48:1d:d4:77:92:73:
                    63:d6:ab:0e:2f:d8:0c:f2:16:7d:fb:91:39:4b:79:
                    f4:bd:6e:ef:2f:e6:46:66:a4:28:7b:c3:80:93:69:
                    05:7a:55:13:73:43:48:7a:2c:c6:de:5f:10:67:92:
                    d7:2f:41:cb:02:ad:12:e8:d9:df:15:f0:0c:a3:6e:
                    28:99:4f:c9:f2:b8:86:70:6b:e6:00:9a:d9:07:b6:
                    64:49:c9:62:d2:c5:42:66:55:ae:75:01:ea:1b:e1:
                    5e:b4:f6:d9:b2:cd:59:53:8f:b2:a9:51:d9:4a:93:
                    59:0a:2e:b8:70:de:c5:a8:ff:a9:ec:e6:87:77:c8:
                    8f:51:ad:72:0f:34:0d:9c:8e:bf:47:20:69:a7:13:
                    63:e8:f2:83:90:a0:7d:f5:a7:2b:df:d9:42:1c:5a:
                    11:2d:25:2f:14:db:ce:19:e9:b3:2b:56:89:dc:ec:
                    18:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AB:E9:4A:28:DB:82:D2:33:1C:4E:21:FC:B0:08:35:D8:30:93:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9728b909-738b-301d-9b1c-6943047c258a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:6c:f6:ca:47:b5:9e:f4:aa:85:e7:f9:2c:48:42:1e:d8:31:
         a7:4e:ef:bf:6a:e5:d8:85:36:1a:7a:c0:7c:21:00:95:f5:ca:
         42:b2:16:e8:d8:44:41:98:8d:2c:3c:89:fb:f3:2e:be:4d:6c:
         7d:01:64:02:51:31:02:4a:69:9e:1d:6d:e4:1e:f9:7f:f0:ca:
         8a:b4:5a:23:cb:c7:5e:c3:b8:3d:ee:0b:cd:dc:19:4c:6d:52:
         70:b9:b7:a1:54:ea:5e:74:a8:ad:bb:3a:cc:6f:13:12:3b:df:
         07:27:1e:17:a6:72:f8:7c:40:18:d3:e4:29:bb:3f:40:4b:78:
         5e:db:2b:a1:04:f1:a5:71:d3:c6:bb:af:3a:0c:ef:9a:a7:94:
         84:12:12:9c:8e:e7:77:e6:08:ed:8a:df:66:95:b6:c3:dc:c4:
         d1:be:9a:65:24:43:d2:f9:51:56:69:56:86:2d:82:31:1b:81:
         6d:5e:ad:4f:e6:a1:7d:ba:a3:2c:1f:dd:8d:b6:a8:14:6c:32:
         60:d7:e2:15:43:f2:f7:ef:ae:53:ab:4b:7d:c4:c5:08:fd:e8:
         c5:0d:f4:76:80:9f:2a:1a:2e:1e:28:47:19:3b:5c:5c:00:7e:
         5f:83:0a:38:ff:6d:32:be:d0:b0:bd:34:2f:d3:58:9c:1f:21:
         03:3e:30:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:48:18 2025 by rpki-client