Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb9b1883-5261-3859-952b-4e2a4e9d5870.roa
File:                     fb9b1883-5261-3859-952b-4e2a4e9d5870.roa (raw, json)
Hash identifier:          nfWHWPluSfgCMpNlhFnH4xQWYlOQhChKLfrFv6mJtOs=
Subject key identifier:   38:35:F5:EC:9E:C7:27:19:72:B8:5F:CA:76:70:D3:70:7A:97:75:CE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858489075FDE60DE3FEDDD1491E38
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb9b1883-5261-3859-952b-4e2a4e9d5870.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     25846
IP address blocks:        50.114.40.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:75:fd:e6:0d:e3:fe:dd:d1:49:1e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=f5b2f8c2-249f-4257-8370-a87cb1aad259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:56:63:4d:c6:31:3a:40:4d:4b:fa:d8:d6:d7:
                    b9:20:e9:66:9b:7e:58:89:59:18:04:94:3b:6f:19:
                    ba:71:c9:3e:4a:78:c6:76:78:61:5c:71:b9:c7:8d:
                    50:cb:f0:3a:a8:cb:1b:7c:f3:0c:da:a6:e4:c4:a8:
                    26:93:55:72:31:d4:8d:fb:69:4c:d9:3d:da:a2:a2:
                    98:09:66:60:97:f0:e0:d4:ca:78:e0:06:01:99:75:
                    f8:94:5f:69:35:12:dd:a7:d4:82:b1:17:f0:d5:23:
                    c7:bb:47:6a:d0:d1:46:bc:02:3c:80:f4:29:6d:a8:
                    b7:10:5c:af:38:65:c3:55:04:b5:87:52:83:79:49:
                    1b:bc:d0:68:8d:4c:88:e7:b4:7a:85:a6:cd:81:70:
                    cf:e4:0e:64:53:58:41:b7:20:29:fa:cc:f1:98:26:
                    bd:72:9e:5c:df:ec:d1:85:39:4c:c0:1a:df:5c:3f:
                    91:32:8e:3a:8f:ea:db:26:3b:c8:f3:6d:16:5e:0c:
                    db:a0:62:7a:53:81:5d:1a:75:ac:6f:84:2d:35:c5:
                    69:1d:68:84:d2:d7:8b:1a:17:b5:0e:89:1d:0c:74:
                    0d:dc:67:ff:01:b8:3a:3f:86:8e:9b:d1:33:ea:f5:
                    47:c9:fd:2b:d1:5b:99:ec:b6:90:54:6c:e1:76:ba:
                    df:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:35:F5:EC:9E:C7:27:19:72:B8:5F:CA:76:70:D3:70:7A:97:75:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb9b1883-5261-3859-952b-4e2a4e9d5870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b4:9a:12:35:35:28:29:76:be:c4:39:39:c3:08:3b:ff:0b:
         05:61:2b:fd:fe:b6:24:16:0f:d8:ee:13:16:68:0b:74:96:58:
         36:ce:08:50:ce:0c:cb:80:9e:34:8e:29:e9:6d:34:b4:b6:f1:
         f4:63:45:74:b7:74:c4:30:4c:28:81:e1:f2:7b:32:aa:49:87:
         b7:3d:02:58:38:68:e6:74:98:59:45:58:9e:2a:c0:78:9f:85:
         6f:34:41:7b:5a:93:9d:4c:71:2a:b6:5c:e8:fd:d5:bb:79:1e:
         75:9e:58:70:db:19:b3:79:80:a5:39:b4:e0:6f:b0:b7:83:83:
         1c:60:11:63:da:63:26:e1:cf:eb:f5:bd:42:3c:83:ea:03:55:
         0a:f0:f9:8d:54:39:d8:94:b2:1b:1e:06:97:80:46:7c:9f:6e:
         7b:4d:b7:0e:48:c0:29:ce:40:7e:af:80:74:fd:6e:f7:a6:69:
         8c:f7:c3:8d:ea:ad:e2:f3:cd:50:ba:1a:b6:62:92:90:07:61:
         e5:e8:11:af:c3:17:4e:cd:b9:bf:f9:b4:c4:da:a2:aa:48:92:
         73:d3:de:9d:d8:18:5a:60:92:e3:0e:09:5f:0a:40:51:6e:1a:
         53:f2:b2:48:fc:9b:eb:34:b4:4d:07:b3:04:16:43:ae:96:73:
         fa:2e:22:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----