Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6a996cf-8826-3b53-ab5d-19282b4b687d.roa
File:                     f6a996cf-8826-3b53-ab5d-19282b4b687d.roa (raw, json)
Hash identifier:          dVITjGfREF0fvHZUSkzdzyttPxB6lxYTur03d29k4UM=
Subject key identifier:   0C:D7:66:AB:84:95:F9:33:C5:8D:14:79:7A:15:86:FE:F6:F9:CD:20
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858474420A843CA97A5FDAC0AC900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6a996cf-8826-3b53-ab5d-19282b4b687d.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     834
IP address blocks:        50.114.29.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:a8:43:ca:97:a5:fd:ac:0a:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=058961f9-11c2-4b70-88ea-c5227536d945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c9:9a:13:be:fa:fe:fe:3e:0d:38:fd:0d:a4:
                    dc:95:88:e5:6d:98:91:c5:6e:67:8c:27:83:ae:13:
                    9d:c3:bf:ed:02:b5:7e:d5:c3:24:47:9b:9d:b7:95:
                    98:d2:41:58:21:86:90:95:0e:17:24:c6:f0:93:1c:
                    28:a8:f6:89:70:99:2d:ae:12:69:b4:75:0a:06:45:
                    f6:5e:43:55:ec:0f:52:12:32:16:b3:8e:7d:09:8d:
                    51:f7:72:4a:21:00:30:53:1e:1d:e8:31:00:1e:4c:
                    da:8f:cb:39:24:39:4d:e0:5d:ee:ab:31:b9:06:7d:
                    ac:cd:0c:e6:94:76:60:b6:f8:b2:c6:fa:26:10:bf:
                    22:59:42:ec:de:90:bf:91:7c:3f:64:cb:0e:44:f0:
                    16:52:a9:e6:44:45:c9:da:64:a2:0f:df:ec:e8:b4:
                    fd:2a:e5:7b:4f:dc:a8:39:5d:98:0c:25:e7:55:1f:
                    61:2d:c2:22:47:d7:8a:2d:1e:9c:4e:81:ac:5c:9e:
                    3b:f2:9b:cc:67:e4:ef:21:46:69:9f:f4:ca:24:02:
                    e9:4b:be:d6:19:21:19:0c:d9:7f:90:6c:79:bc:00:
                    67:79:10:26:0a:f8:88:ac:da:4b:af:ef:df:d0:8d:
                    df:e6:1d:d8:f9:81:27:14:fe:3e:9d:50:6a:61:98:
                    06:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D7:66:AB:84:95:F9:33:C5:8D:14:79:7A:15:86:FE:F6:F9:CD:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6a996cf-8826-3b53-ab5d-19282b4b687d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:44:9a:18:28:49:a6:37:f4:47:11:52:7f:f9:ae:cb:af:32:
         86:99:90:73:9d:e8:cc:88:d4:a0:8d:15:9d:54:48:52:1e:87:
         31:33:58:6c:c4:3d:1c:a1:da:e5:38:be:68:89:52:59:b2:f0:
         3e:a3:f3:83:8a:df:1a:e6:05:36:74:d5:25:f5:a2:54:5c:a8:
         00:c4:99:60:dd:0f:3e:42:8e:2d:30:4e:1e:2d:b0:87:bd:46:
         2d:cf:f0:82:80:9a:b3:6a:72:a3:77:d7:62:02:04:2e:65:c7:
         32:6d:4d:2a:8e:ef:47:cf:63:8c:8c:95:a2:13:77:99:46:c5:
         05:ec:5f:9e:9a:cb:fc:8b:cb:20:41:bc:c1:31:72:3b:f5:4b:
         1d:27:ac:e9:0b:46:05:64:b8:37:07:0d:10:76:00:e2:de:49:
         e9:13:15:d4:3f:ad:26:23:29:df:8b:44:d2:76:dd:27:42:69:
         69:d1:ee:05:2d:5d:c0:08:d9:b6:ee:73:9e:aa:dd:65:39:8c:
         f3:05:be:4b:7f:2a:cf:a0:78:c6:97:aa:75:96:40:15:8f:20:
         14:59:1a:7e:b4:8a:49:e2:92:2a:c5:b7:bb:a8:8c:a6:fa:75:
         01:32:af:c3:34:43:7f:6c:19:2d:ce:46:10:7e:2f:c4:c1:44:
         b5:24:88:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:09:32 2025 by rpki-client