Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cfbcd5f6-06df-35e4-8c1b-ce1b602b7c02.roa
File:                     cfbcd5f6-06df-35e4-8c1b-ce1b602b7c02.roa (raw, json)
Hash identifier:          AWX+FeFJcHv31pmM7+yZjcuDxCMllzH7dOXf/yyVYds=
Subject key identifier:   93:0B:6C:F7:A9:A1:93:2E:49:B5:47:B2:57:A3:D1:D2:9B:87:71:FC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847A400EFDD8690D7F35E7A6580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cfbcd5f6-06df-35e4-8c1b-ce1b602b7c02.roa
Signing time:             Wed 23 Oct 2024 21:14:24 +0000
ROA not before:           Wed 23 Oct 2024 21:14:24 +0000
ROA not after:            Tue 21 Jan 2025 22:14:24 +0000
asID:                     11798
IP address blocks:        50.114.23.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a4:00:ef:dd:86:90:d7:f3:5e:7a:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 23 21:14:24 2024 GMT
            Not After : Jan 21 22:14:24 2025 GMT
        Subject: CN=6b02b0e5-6898-4e1d-ad0e-cb4c4eb81a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1e:a9:75:18:7e:e9:88:90:2d:e5:61:24:8f:
                    3d:42:1b:e6:61:b2:c7:95:27:93:ee:2b:32:c0:74:
                    d6:37:6b:57:76:d9:69:81:eb:a0:17:f3:d5:41:7a:
                    63:13:f6:72:5c:97:13:ac:37:dd:6b:b2:45:f0:74:
                    6a:9f:66:d2:e2:7a:36:ca:2e:3a:6f:c2:65:ce:ae:
                    d3:a2:f8:e2:43:2b:78:cd:1e:02:79:07:1b:6a:eb:
                    22:45:11:bc:2c:10:02:ed:84:06:c1:4c:5d:6a:85:
                    1e:08:43:5f:cf:8d:0e:fd:e0:16:1d:58:f0:4c:04:
                    9b:7c:a6:fb:cb:a3:db:74:01:35:ef:08:62:38:79:
                    cb:94:63:8a:3b:97:84:e7:6d:ce:72:93:a3:09:29:
                    bc:78:60:98:ba:ab:16:d2:76:4b:9f:62:25:14:39:
                    97:97:c1:5e:d0:5c:57:85:d5:bb:c3:8b:a6:44:aa:
                    e6:72:7e:58:0b:2e:f4:30:6d:ac:fd:58:15:59:92:
                    53:ed:33:95:fa:2c:74:52:11:68:f6:bd:99:9b:d8:
                    97:cb:3a:2f:92:4e:13:35:df:eb:35:ad:a1:92:ac:
                    48:86:33:2d:c6:44:47:44:ad:b6:52:59:7f:b1:85:
                    c4:2c:98:57:b7:7b:75:ff:49:12:03:a7:f6:b3:e7:
                    3d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0B:6C:F7:A9:A1:93:2E:49:B5:47:B2:57:A3:D1:D2:9B:87:71:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cfbcd5f6-06df-35e4-8c1b-ce1b602b7c02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:31:02:7a:b4:0d:91:e0:4e:bd:27:06:98:14:64:27:5c:fe:
         49:43:25:bb:bb:2c:ea:c2:7f:96:d1:9d:fc:f7:ac:a9:86:e1:
         51:26:79:61:a7:bd:ac:c8:91:ee:f9:de:b0:85:2a:df:3c:a8:
         bc:39:15:20:45:36:5c:0a:49:14:85:69:49:83:6f:74:d6:0e:
         78:6a:7a:4b:ac:b7:fd:18:44:41:b0:5d:3d:5a:8e:77:b0:de:
         cb:6a:b8:b0:1b:92:03:98:91:d1:3f:47:47:12:81:78:85:fc:
         8a:f4:3b:03:d2:b2:19:52:bc:34:5f:dc:79:a3:53:b6:31:0a:
         35:4a:e5:60:a8:fe:d8:86:fb:2c:64:96:3d:6d:29:89:7b:b2:
         2a:8f:8a:ce:c2:c3:1b:63:80:9d:b2:8d:2b:3e:c7:ed:cf:6a:
         1e:08:56:a4:cd:59:1a:63:6f:e8:d3:87:f3:66:6b:d1:d4:7f:
         cd:2c:4b:cf:86:aa:2f:eb:cd:90:1d:e7:32:32:df:7a:f8:ee:
         89:8f:de:c0:12:2f:3c:39:93:7e:70:a9:da:58:e1:ad:85:e3:
         89:2f:bf:3d:aa:9c:6a:e4:ac:34:f7:f8:4f:ed:24:24:f9:10:
         b1:cf:a3:ef:a0:b3:d7:aa:39:02:eb:31:a6:a4:e5:52:b9:5e:
         fa:bc:d2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----