Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f500d352-15ab-34b4-8c41-45c454d68338.roa
File:                     f500d352-15ab-34b4-8c41-45c454d68338.roa (raw, json)
Hash identifier:          +pFie2y8VIRFgujQmGAYDuqhZtho3+NN5F+cjxaUKxg=
Subject key identifier:   73:D2:29:EA:EE:28:21:F3:A8:93:20:73:AC:AE:48:89:0E:16:2A:71
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845F2DC26AA6C1BF3270225B300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f500d352-15ab-34b4-8c41-45c454d68338.roa
Signing time:             Tue 21 May 2024 17:35:16 +0000
ROA not before:           Tue 21 May 2024 17:35:16 +0000
ROA not after:            Mon 19 Aug 2024 17:35:16 +0000
asID:                     400866
IP address blocks:        50.114.110.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f2:dc:26:aa:6c:1b:f3:27:02:25:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 21 17:35:16 2024 GMT
            Not After : Aug 19 17:35:16 2024 GMT
        Subject: CN=18e79db0-b81f-4de5-a698-34c1fa992109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:15:51:b1:80:9b:19:19:f8:cb:af:ca:b4:
                    46:81:44:97:14:84:87:3a:52:d3:e8:16:da:d0:a1:
                    dd:f0:e1:45:e7:32:f0:75:dc:84:97:64:b8:e1:47:
                    f4:d0:5d:30:d0:f2:09:aa:c6:f6:e3:95:97:57:0d:
                    6f:61:89:e9:00:ae:cf:9d:11:52:f6:79:de:80:8d:
                    a7:bf:78:6b:2c:34:40:7f:c8:a8:8a:01:68:e1:61:
                    ea:a9:3f:53:82:22:54:ff:6e:02:94:77:97:aa:9f:
                    48:36:21:0f:e7:8f:8d:ee:c3:a7:2e:ae:3f:ac:cd:
                    25:59:b7:ec:47:b4:05:e0:30:23:da:51:44:43:75:
                    05:6d:fe:4e:7b:d5:69:89:17:21:3a:78:38:7b:d6:
                    65:5f:e4:05:4d:b9:53:85:4c:66:89:5c:9c:05:e0:
                    fa:dd:2e:97:cf:3f:3e:08:fb:ea:57:b3:44:07:f9:
                    b1:24:ec:35:c5:e9:8e:f1:f1:2b:8a:30:65:7d:91:
                    3c:a1:2e:5c:60:b8:d7:97:28:03:b8:7d:da:de:85:
                    73:38:ea:91:8c:db:b7:52:d1:11:29:91:e3:44:0a:
                    f0:9a:c1:29:a2:0b:ad:0c:ee:6c:cf:32:27:3d:bc:
                    5a:33:96:1b:c7:a8:07:d3:15:ba:20:24:e9:2e:88:
                    f3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D2:29:EA:EE:28:21:F3:A8:93:20:73:AC:AE:48:89:0E:16:2A:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f500d352-15ab-34b4-8c41-45c454d68338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:57:a8:33:b3:0e:30:37:f5:c6:1d:05:59:45:73:33:29:17:
         78:f7:73:5d:50:80:77:fd:21:01:05:f3:40:55:9e:e6:47:d0:
         68:75:7c:f7:44:cf:c7:ac:2a:d9:02:b6:51:77:2b:71:09:6a:
         d3:94:7f:b9:d3:da:91:d7:52:7f:db:e5:db:c2:8c:0c:af:f3:
         03:af:c0:d5:17:18:7f:c1:b8:a0:4b:76:41:7c:ae:1d:4d:d1:
         d6:8f:f0:9a:e1:ce:3d:30:4b:5a:73:c5:3c:54:61:84:3f:04:
         f9:44:52:e9:41:c1:bb:53:fb:ae:ca:c3:5b:2f:17:4e:08:93:
         85:1b:3b:ba:75:c8:9e:ac:85:f2:f4:42:f5:bf:03:45:8c:f2:
         29:e2:1b:8c:e9:31:c2:9d:5c:da:80:2e:88:dc:39:ad:28:6b:
         19:c9:7e:89:35:f0:e8:ad:97:c4:17:11:b3:3f:02:b3:65:3b:
         c8:cf:b6:48:30:86:f9:36:02:45:56:2a:64:45:a4:80:d8:f5:
         f6:bf:7c:89:a7:44:1e:36:d4:ac:1b:2d:42:26:a5:3e:4b:8d:
         9b:0c:06:3f:d2:55:61:2f:01:e3:bb:d7:f2:2d:e9:7e:8b:f8:
         ca:de:3a:56:1b:23:b1:a0:58:e3:d5:36:33:01:c3:6e:79:db:
         96:d9:4d:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXy3CaqbBvzJwIlswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDUyMTE3MzUxNloXDTI0MDgxOTE3MzUxNlowLzEtMCsGA1UEAxMk
MThlNzlkYjAtYjgxZi00ZGU1LWE2OTgtMzRjMWZhOTkyMTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQUVUbGAmxkZ+MuvyrRGgUSXFISHOlLT6Bba
0KHd8OFF5zLwddyEl2S44Uf00F0w0PIJqsb245WXVw1vYYnpAK7PnRFS9nnegI2n
v3hrLDRAf8ioigFo4WHqqT9TgiJU/24ClHeXqp9INiEP54+N7sOnLq4/rM0lWbfs
R7QF4DAj2lFEQ3UFbf5Oe9VpiRchOng4e9ZlX+QFTblThUxmiVycBeD63S6Xzz8+
CPvqV7NEB/mxJOw1xemO8fErijBlfZE8oS5cYLjXlygDuH3a3oVzOOqRjNu3UtER
KZHjRArwmsEpogutDO5szzInPbxaM5Ybx6gH0xW6ICTpLojzWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHPSKeruKCHzqJMgc6yuSIkOFipxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjUwMGQzNTItMTVhYi0z
NGI0LThjNDEtNDVjNDU0ZDY4MzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAChXqDOzDjA39cYdBVlFczMpF3j3c11QgHf9IQEF80BVnuZH0Gh1fPdE
z8esKtkCtlF3K3EJatOUf7nT2pHXUn/b5dvCjAyv8wOvwNUXGH/BuKBLdkF8rh1N
0daP8Jrhzj0wS1pzxTxUYYQ/BPlEUulBwbtT+67Kw1svF04Ik4UbO7p1yJ6shfL0
QvW/A0WM8iniG4zpMcKdXNqALojcOa0oaxnJfok18Oitl8QXEbM/ArNlO8jPtkgw
hvk2AkVWKmRFpIDY9fa/fImnRB421KwbLUImpT5LjZsMBj/SVWEvAeO71/It6X6L
+MreOlYbI7GgWOPVNjMBw25525bZTds=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:25:24 2025 by rpki-client