Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7ab10430-8141-37ce-a9ee-c9702971106a.roa
File:                     7ab10430-8141-37ce-a9ee-c9702971106a.roa (raw, json)
Hash identifier:          S/1f3qBnaGAOP8w+l8panjuZ5IxGZ029pEEZUMJ3bxw=
Subject key identifier:   8E:06:88:68:1D:21:BC:C4:FB:F6:65:7A:65:7E:33:5E:21:CC:A5:24
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848530AEFEB3D479DE6E589DA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7ab10430-8141-37ce-a9ee-c9702971106a.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     44477
IP address blocks:        50.114.180.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:ef:eb:3d:47:9d:e6:e5:89:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=c07c4f54-fc08-4e68-b3fc-ed17b5f8fb25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:eb:0e:4b:df:30:1e:aa:2f:7f:91:c0:ac:
                    8a:e4:15:3b:24:79:9f:3d:a2:c0:f0:e8:bf:de:b3:
                    16:93:a6:98:f5:05:fb:1a:08:31:ed:54:fb:a9:32:
                    ad:05:71:57:cf:78:20:b4:d3:df:fd:40:bd:72:27:
                    cf:11:30:a5:26:6e:4c:5d:76:5b:95:71:95:30:a7:
                    2a:38:5b:bc:e9:df:ec:74:d0:c2:70:48:45:4f:24:
                    7c:37:f0:83:26:e0:b0:97:f0:bf:6c:e2:57:ad:d3:
                    f4:43:cd:a8:ee:1b:34:5a:c0:b4:19:25:ba:6e:6e:
                    cc:54:38:1a:11:2c:12:93:c2:be:b0:81:30:a0:c2:
                    39:a4:c5:db:55:71:67:11:4e:41:ab:a2:a9:da:d1:
                    fa:05:8a:86:55:b4:7f:04:fe:34:39:f5:a7:b9:c6:
                    16:4a:5c:be:3c:9e:bf:d5:81:05:e5:19:00:1b:f2:
                    f8:80:4a:3c:db:6e:63:86:bd:1b:43:87:b1:71:6d:
                    96:d2:30:1c:6f:5e:98:8d:f3:c4:b2:e9:7f:f4:82:
                    d0:b8:69:c2:ed:ad:38:74:e2:fb:79:89:26:40:e5:
                    a2:9b:85:db:f1:6e:26:66:59:2d:14:e3:9f:4c:c7:
                    19:67:e9:1f:49:68:b8:0b:22:cc:23:92:d7:8a:f2:
                    b3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:06:88:68:1D:21:BC:C4:FB:F6:65:7A:65:7E:33:5E:21:CC:A5:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7ab10430-8141-37ce-a9ee-c9702971106a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d7:f4:49:3c:41:97:64:19:a7:2d:ee:f7:19:bc:aa:82:c4:
         c3:54:bd:ab:08:db:7a:01:04:92:f1:0e:57:1d:5c:b4:43:18:
         4f:fe:ec:e8:f8:e3:7c:80:51:b7:32:36:92:3d:28:f3:7b:3f:
         70:cb:c8:f1:b7:32:68:1b:75:9f:ff:35:63:82:c3:8f:41:c9:
         7e:98:2f:d2:d2:05:b6:7c:27:7c:99:e8:9c:4d:9f:1b:51:ff:
         72:6b:3e:2c:c0:98:01:af:40:c1:72:b1:72:9f:75:33:0e:47:
         ca:d6:28:1c:53:71:66:5d:f5:10:e4:24:fb:b3:f9:a0:b7:4b:
         50:9d:45:a0:c4:48:f4:dc:d7:82:b1:5b:f4:2a:96:c7:c4:21:
         56:55:fd:f8:f3:96:31:60:1c:f2:4b:f7:8e:f0:b3:d7:45:a3:
         e6:61:bd:1d:09:15:69:3d:12:1c:12:78:d7:38:21:6f:94:ca:
         39:69:fd:af:da:6e:65:21:91:ac:ef:ff:4e:c1:ca:e1:ae:7c:
         ae:bc:aa:38:b9:1a:12:2c:d2:b6:87:6a:0b:7d:3b:2a:cf:06:
         46:cd:86:f6:23:e5:e6:a2:ef:26:94:39:bc:25:0e:71:b6:08:
         f5:5c:f1:7c:63:4c:48:43:25:ab:0a:9f:ea:09:9c:38:93:ad:
         99:e6:07:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:35:41 2025 by rpki-client