Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d5e85fe1-aed4-3076-a4db-3caede378a56.roa
File:                     d5e85fe1-aed4-3076-a4db-3caede378a56.roa (raw, json)
Hash identifier:          0Fs3UY1ppTVtWVQN4AV3fl5q3BKSAojnyKS2aAZjU78=
Subject key identifier:   F0:C3:22:0D:3B:A9:CA:2B:35:31:50:90:0E:44:54:C5:0E:C3:16:C2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847C543BD8AD1F0DCC6A4484F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d5e85fe1-aed4-3076-a4db-3caede378a56.roa
Signing time:             Mon 04 Nov 2024 19:10:41 +0000
ROA not before:           Mon 04 Nov 2024 19:10:41 +0000
ROA not after:            Sun 02 Feb 2025 19:10:41 +0000
asID:                     11798
IP address blocks:        50.114.110.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c5:43:bd:8a:d1:f0:dc:c6:a4:48:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  4 19:10:41 2024 GMT
            Not After : Feb  2 19:10:41 2025 GMT
        Subject: CN=4f2bf30f-1cd6-47e3-ad41-f29b776167f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cc:2b:33:cb:12:1e:45:ce:aa:75:2d:d3:ab:
                    65:f8:0f:16:c7:91:b6:34:aa:c6:68:7f:c1:ff:83:
                    d5:e3:ac:a6:1c:94:1c:c4:cf:83:6b:bb:8e:9f:fd:
                    6d:16:69:66:78:e9:a4:9d:fc:a1:00:25:58:8e:20:
                    61:95:2b:e4:29:92:d3:73:f1:66:88:f3:49:e4:27:
                    cf:f6:3d:31:d4:86:d2:c7:d5:8f:d3:40:ed:65:fd:
                    23:99:17:98:59:b4:6b:f2:d6:c3:f7:e2:8b:52:ef:
                    10:d3:11:a3:96:f2:4b:49:97:ac:63:b4:1c:1b:11:
                    92:f9:69:1c:25:1b:6a:74:a1:45:bb:52:ad:51:6f:
                    28:61:e5:6b:7e:54:15:96:33:0a:be:41:09:ec:59:
                    da:3e:f3:98:4d:68:67:59:43:d4:95:17:85:d2:9e:
                    14:64:2e:46:92:ff:08:7b:10:14:a4:a0:79:13:33:
                    25:81:a9:fe:00:c2:9d:24:be:e7:38:1a:8c:ea:da:
                    d2:6c:60:01:b2:8b:81:e7:69:c0:fe:17:c7:04:77:
                    fc:9c:e2:6f:ef:b9:b4:6d:16:a9:8f:ca:57:86:63:
                    31:da:9a:7f:4e:0b:60:34:cc:2e:1b:b2:5b:af:e9:
                    fd:64:83:80:99:b2:c2:cc:ab:26:94:db:3d:c7:51:
                    84:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C3:22:0D:3B:A9:CA:2B:35:31:50:90:0E:44:54:C5:0E:C3:16:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d5e85fe1-aed4-3076-a4db-3caede378a56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:43:03:f6:da:9a:8a:b5:5a:f3:0c:9c:a1:12:6b:f2:75:b6:
         21:3e:87:c1:6c:53:39:86:a9:aa:8f:b4:43:cd:a0:92:4a:46:
         97:dc:9e:86:aa:56:6e:f4:ba:21:44:00:70:50:9d:c9:2a:66:
         e3:e0:fc:ee:e8:e3:7a:b4:99:de:68:85:b4:54:8f:94:32:69:
         9f:ed:ce:86:1b:e3:91:69:26:74:a8:a1:62:6b:8a:3f:8a:15:
         eb:2c:12:f7:d0:02:60:44:14:fd:bc:43:38:5c:37:b2:07:6a:
         1b:93:99:2f:b5:d9:89:ef:63:35:91:f8:dd:f5:72:b1:3b:62:
         89:03:00:13:de:57:55:b9:28:9a:7e:1f:f1:56:cf:a0:7b:90:
         11:7b:d0:66:99:cc:ff:56:dc:f0:9b:c4:e9:5e:ec:a7:9d:e5:
         36:c3:e7:7c:21:1e:c6:57:8f:a8:4f:ae:1b:1d:6e:0f:55:51:
         89:37:03:d8:65:e8:c8:2c:b2:19:70:fe:24:68:92:60:48:5c:
         b9:8f:00:91:0a:e1:74:b3:9b:17:50:39:17:e3:61:2a:bc:ad:
         ed:86:62:a0:b2:43:e7:94:7f:32:c3:4e:02:a8:c4:bb:68:6b:
         0a:6d:a9:52:0d:0c:cc:53:c6:df:34:cb:35:f5:04:c8:96:00:
         a9:0e:f8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:00:24 2025 by rpki-client