Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0326ae22-272b-3493-8092-46509abe3dcd.roa
File:                     0326ae22-272b-3493-8092-46509abe3dcd.roa (raw, json)
Hash identifier:          ZSocaJOi+uh/YtJc3HHuJLI32I34M3lsVdcLSr8BbsE=
Subject key identifier:   ED:65:C9:49:B6:DE:BF:4D:C4:FB:A4:8D:A7:70:00:F6:62:F6:9E:6C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309F1E8140C9877B14154B580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0326ae22-272b-3493-8092-46509abe3dcd.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        104.198.48.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f1:e8:14:0c:98:77:b1:41:54:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=cb5da81b-0c9a-4a4c-8534-a149712dd197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:81:a0:f5:f8:7a:59:95:6c:a1:2e:44:8d:6b:
                    bb:4a:6b:91:b3:6b:25:73:1e:56:ce:1e:1f:46:d3:
                    72:0c:a0:74:2a:57:4d:37:57:53:d4:03:19:b3:77:
                    ee:2d:da:10:03:80:7a:a8:ad:f1:47:59:f8:db:df:
                    5e:27:2e:8f:eb:8d:34:c8:c1:72:b8:b1:d5:b8:00:
                    22:01:02:30:31:ca:fa:38:5f:99:20:53:67:ee:df:
                    f5:c8:d6:1e:9f:c6:16:c9:cf:8e:0a:b1:11:38:2a:
                    b6:ab:fe:fd:13:d7:52:21:5b:fb:25:69:fa:51:c5:
                    a4:b6:7a:dc:c6:b7:61:b6:bc:c5:c4:99:78:78:ce:
                    0f:70:39:9e:b0:66:85:86:08:4a:57:d8:3e:6a:26:
                    09:21:ff:83:8a:cb:2a:db:bb:f6:98:86:c2:ac:89:
                    5d:ec:9a:17:1d:22:df:c6:2c:83:f6:ef:34:c5:5b:
                    9f:ab:5a:52:46:db:d6:d2:9a:ca:4f:35:89:8a:5f:
                    ef:9a:c0:9f:2c:15:d4:c8:81:6d:99:d9:e4:b6:b7:
                    2b:0c:81:6f:aa:fe:e1:8e:e7:b6:71:d6:6f:40:2b:
                    65:28:f5:bf:2d:f8:be:89:3b:27:06:8e:48:58:4b:
                    a0:75:9e:6f:40:da:90:a9:1e:c1:8b:cd:5e:a1:c7:
                    e5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:65:C9:49:B6:DE:BF:4D:C4:FB:A4:8D:A7:70:00:F6:62:F6:9E:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0326ae22-272b-3493-8092-46509abe3dcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.198.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:7e:2f:cd:22:53:b9:87:50:8a:b4:90:db:89:1d:42:7d:76:
         20:b5:16:2c:40:5a:ad:5c:2d:12:b3:2d:84:eb:a5:71:81:ea:
         c4:bd:2c:77:0e:a6:d2:7e:c3:1e:9b:b9:b3:65:65:fc:91:ce:
         68:12:d8:ba:76:4a:97:59:38:f7:3d:2a:08:d7:37:2c:26:77:
         4a:35:6a:3a:3d:d6:ce:9f:8d:c3:37:83:6b:56:fb:fc:e1:b7:
         87:88:34:5a:ff:5b:ef:ee:e2:74:e1:1b:4c:c1:30:14:19:dd:
         7c:93:5d:54:5c:d7:2e:86:8e:70:51:e8:03:e8:d1:b1:2b:0c:
         1a:1a:16:2e:85:ef:8c:0c:e2:c5:e7:23:76:d9:45:2e:a1:2d:
         ee:0a:2f:82:a7:b1:fd:f2:da:16:54:93:63:e5:db:98:c6:27:
         92:eb:68:1e:bb:05:2d:78:a2:48:4c:98:7c:d3:50:cf:f9:7c:
         7a:f4:24:ac:fe:fc:90:99:51:75:08:29:ad:ff:03:c9:dc:43:
         06:ac:29:d4:b9:1a:a2:f2:62:62:2f:bc:c4:90:94:44:5a:2a:
         b0:6d:ab:9a:cd:35:84:75:27:6f:03:bb:99:a5:3d:bc:c8:a9:
         af:3d:f8:8f:ed:8a:9a:95:ae:8e:1f:b6:b9:4b:23:fc:d2:0f:
         c8:b0:d8:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ8egUDJh3sUFUtYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
Y2I1ZGE4MWItMGM5YS00YTRjLTg1MzQtYTE0OTcxMmRkMTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoGg9fh6WZVsoS5EjWu7SmuRs2slcx5Wzh4f
RtNyDKB0KldNN1dT1AMZs3fuLdoQA4B6qK3xR1n4299eJy6P6400yMFyuLHVuAAi
AQIwMcr6OF+ZIFNn7t/1yNYen8YWyc+OCrEROCq2q/79E9dSIVv7JWn6UcWktnrc
xrdhtrzFxJl4eM4PcDmesGaFhghKV9g+aiYJIf+Dissq27v2mIbCrIld7JoXHSLf
xiyD9u80xVufq1pSRtvW0prKTzWJil/vmsCfLBXUyIFtmdnktrcrDIFvqv7hjue2
cdZvQCtlKPW/Lfi+iTsnBo5IWEugdZ5vQNqQqR7Bi81eocflUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1lyUm23r9NxPukjadwAPZi9p5sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDMyNmFlMjItMjcyYi0z
NDkzLTgwOTItNDY1MDlhYmUzZGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMYwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACl+L80iU7mHUIq0kNuJHUJ9diC1FixAWq1cLRKzLYTrpXGB6sS9LHcO
ptJ+wx6bubNlZfyRzmgS2Lp2SpdZOPc9KgjXNywmd0o1ajo91s6fjcM3g2tW+/zh
t4eINFr/W+/u4nThG0zBMBQZ3XyTXVRc1y6GjnBR6APo0bErDBoaFi6F74wM4sXn
I3bZRS6hLe4KL4Knsf3y2hZUk2Pl25jGJ5LraB67BS14okhMmHzTUM/5fHr0JKz+
/JCZUXUIKa3/A8ncQwasKdS5GqLyYmIvvMSQlERaKrBtq5rNNYR1J28Du5mlPbzI
qa89+I/tipqVro4ftrlLI/zSD8iw2Ms=
-----END CERTIFICATE-----
Generated at Mon May 12 16:19:49 2025 by rpki-client