Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a46d1caa-778d-3004-927b-641d583f9309.roa
File:                     a46d1caa-778d-3004-927b-641d583f9309.roa (raw, json)
Hash identifier:          AOdOsv8NeIi3v4pd2fuy8vOl8nIvqayLwU4NQ7rOmyM=
Subject key identifier:   D6:EF:75:64:F3:42:AE:BD:45:CD:1E:F4:54:03:47:2A:DB:9C:62:46
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858412C682B3513C9D8034FAD7880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a46d1caa-778d-3004-927b-641d583f9309.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Thu 12 Jun 2025 04:00:00 +0000
asID:                     399976
IP address blocks:        50.114.12.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:2c:68:2b:35:13:c9:d8:03:4f:ad:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jun 12 04:00:00 2025 GMT
        Subject: CN=486099a6-c1eb-4d95-8a95-881f0198c263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:fd:09:ef:9c:53:03:56:a5:96:36:71:70:
                    d4:74:fd:46:56:7f:17:c7:28:26:7e:5a:da:4b:9c:
                    8b:1c:4b:e0:75:7b:bb:f0:2f:fa:2c:ff:02:8a:0a:
                    7a:13:17:91:b1:d5:bd:33:17:d0:ff:da:f5:bb:de:
                    0f:cd:d3:5c:22:61:85:d0:ca:f2:44:1b:5a:b1:a8:
                    1e:de:5f:f1:b2:8f:23:b1:36:7f:3a:8d:64:38:96:
                    11:76:cd:63:72:07:11:7d:e7:a3:16:79:dd:97:bb:
                    71:e3:40:6f:1b:8d:a1:80:3a:db:30:1d:09:88:e3:
                    44:1e:27:24:80:b0:e9:9a:cb:41:a9:2c:8c:ca:5a:
                    0c:95:04:89:6e:e2:1c:c4:01:75:3b:1b:7e:5a:a9:
                    fc:6c:a7:8c:e8:c0:ee:2f:ab:00:cd:1e:97:6f:5b:
                    9e:50:aa:a1:8c:2f:3d:bb:ec:e7:ba:1d:4d:3e:81:
                    2a:2a:bd:a0:f6:d8:14:db:75:09:a5:45:44:fb:cc:
                    a9:97:cc:2e:f4:8e:84:f5:5d:18:43:52:60:43:f5:
                    e5:fa:6e:5f:a6:76:dd:c3:d1:4e:da:5d:87:c3:64:
                    af:e9:61:99:63:54:a1:15:c7:ac:40:18:4a:dc:a4:
                    74:e0:a8:69:d5:c8:8e:af:fa:62:68:9d:c4:a3:20:
                    d3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EF:75:64:F3:42:AE:BD:45:CD:1E:F4:54:03:47:2A:DB:9C:62:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a46d1caa-778d-3004-927b-641d583f9309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:bd:1d:68:77:50:2d:bc:9e:41:26:8b:14:f0:9f:3e:8c:e2:
         50:fe:a0:c9:de:9f:4c:99:8f:41:62:e6:58:4c:2d:8f:d9:1f:
         0a:e7:5a:a7:33:8d:22:15:11:c7:30:5f:b1:fb:c7:71:b8:56:
         06:92:8b:c4:7f:47:3d:a7:92:65:5a:95:1f:b9:e7:cd:42:5d:
         14:a7:dd:0e:1b:22:34:54:3c:80:0a:2c:6b:4f:85:6b:7e:51:
         71:2d:d0:65:2c:1e:ea:dd:46:72:f0:da:92:39:e7:af:4b:3f:
         43:8c:70:7c:4b:71:82:31:3d:fc:36:fb:32:fc:5c:15:e7:6e:
         28:8f:19:19:46:98:60:b8:79:86:42:cd:f7:07:f3:b9:92:a7:
         10:32:49:69:86:b5:82:10:a5:9c:32:7c:ca:0f:b8:a2:de:01:
         68:50:1c:92:a5:04:a3:2c:40:c6:e2:90:07:41:f3:da:4c:ca:
         47:0a:25:3b:29:93:93:ea:ed:7e:70:bb:60:13:73:09:e2:e3:
         53:db:db:56:8d:56:71:71:8f:84:c9:dc:a4:4e:df:cd:4c:e9:
         f8:f2:60:9a:7e:96:e1:4b:99:90:1e:2b:fb:da:6f:94:86:a8:
         78:f9:69:93:c4:3a:da:1f:b8:d6:80:5b:dc:7b:af:b0:ae:b1:
         01:8d:33:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:20:49 2025 by rpki-client