Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ea2f85b-15d5-3a3b-bcb3-90f87b6364a1.roa
File:                     3ea2f85b-15d5-3a3b-bcb3-90f87b6364a1.roa (raw, json)
Hash identifier:          MH2AwPJgLJJMUjmje1Z0BH09jlAyrIRYZ8tQfxleXqQ=
Subject key identifier:   58:3D:80:02:B3:53:AB:F9:8A:AE:39:7C:BB:79:A8:D2:AB:24:43:32
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E44701661244D7C9EFB5B3C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ea2f85b-15d5-3a3b-bcb3-90f87b6364a1.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Wed 09 Aug 2023 15:32:21 +0000
asID:                     400509
IP address blocks:        50.114.60.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:01:66:12:44:d7:c9:ef:b5:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug  9 15:32:21 2023 GMT
        Subject: CN=98e5cad0-7895-414c-be83-531b1a135000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:a0:91:ce:d3:c7:38:bb:3f:26:5b:a0:7f:
                    dc:73:46:91:b7:7d:be:8f:88:a7:ab:70:8c:ab:12:
                    88:77:20:c9:d8:7e:6c:c2:ba:89:98:2a:c4:0c:f4:
                    0b:c5:7d:04:7c:39:89:3b:91:8b:5a:e1:c9:7f:22:
                    3e:19:e4:fc:23:9c:ff:3b:f5:86:54:9a:ac:15:ad:
                    1d:43:e6:9c:ba:35:db:d3:c4:84:7c:ab:58:70:0f:
                    ef:e0:06:1d:bc:3a:20:e9:20:50:46:86:11:1b:59:
                    f4:1d:77:ad:9a:8c:24:ee:97:a9:77:df:55:ad:c9:
                    19:56:6b:d9:47:ea:51:c9:de:37:22:72:8c:7f:a1:
                    1a:d2:c5:e9:88:6b:12:a9:23:48:9a:ad:f0:ad:79:
                    eb:71:26:3a:1f:59:b1:a2:a3:4d:1a:6d:68:e2:7d:
                    ca:af:29:d9:e8:79:1d:9b:84:59:31:83:53:93:68:
                    13:df:c2:5d:36:c9:48:1e:f3:a1:b7:75:72:ef:58:
                    c2:08:03:91:9a:fe:4e:64:33:74:74:e0:3d:6b:4b:
                    c0:9e:3c:06:c5:39:4d:39:89:22:96:08:6d:ee:a5:
                    f1:33:c9:72:dd:82:10:f2:69:d7:70:1d:a7:56:33:
                    88:9a:0f:5f:9a:95:d1:eb:bb:cd:50:8d:11:bc:3c:
                    d6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3D:80:02:B3:53:AB:F9:8A:AE:39:7C:BB:79:A8:D2:AB:24:43:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ea2f85b-15d5-3a3b-bcb3-90f87b6364a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:0d:44:bc:aa:05:d7:6e:78:dc:a6:9b:f0:30:5b:4b:d2:eb:
         5d:f9:d3:b2:47:12:19:14:06:3b:7c:75:d8:e5:a2:6d:06:2d:
         b6:dc:3b:c8:66:8a:3c:e8:f0:ef:78:09:8b:7f:3a:b8:8e:2f:
         39:83:47:cf:9e:51:c1:7d:a2:78:d5:79:ee:6e:5d:41:e9:c8:
         0c:71:9a:0c:82:2b:44:79:0f:1e:a0:36:f2:47:99:f8:e1:06:
         f4:1a:f0:37:69:a1:d5:ca:5d:27:a8:64:b5:92:0c:bd:23:54:
         cd:65:d9:11:b1:46:40:61:65:dd:54:bf:48:91:f6:81:9e:f1:
         37:2e:10:fa:2e:7f:e7:8d:a8:2b:5b:af:2d:4e:e7:84:62:23:
         99:b5:86:d1:e2:37:d2:3f:85:d9:33:68:12:53:09:28:e9:69:
         eb:18:34:85:92:0e:e5:82:b1:fe:7a:08:e8:d7:0d:56:d5:21:
         9f:e4:76:80:67:cf:ab:f3:fc:da:92:10:e6:a3:86:58:b6:35:
         1f:db:22:45:34:88:8c:a4:dc:c3:0b:9e:03:35:1b:21:88:ed:
         b3:cf:98:dc:e6:3e:20:04:3c:8f:d6:bc:cd:84:06:95:40:01:
         17:b5:e1:8c:98:df:d4:86:ff:57:b7:35:b4:fd:06:b9:28:7b:
         12:a9:8f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:07:13 2024 by rpki-client on console-fra.rpki-client.org