Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0334b57b-73d7-39b1-8604-9b87094746cb.roa
File:                     0334b57b-73d7-39b1-8604-9b87094746cb.roa (raw, json)
Hash identifier:          LPG1xrtLROZCWzwDVbaCRmgvLWeGJAnr3F/JW3nbDns=
Subject key identifier:   5F:74:D3:32:F9:E8:93:9D:8B:40:11:FB:5E:86:A5:AC:CF:6A:40:DE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A1521DFF560021E17DB4900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0334b57b-73d7-39b1-8604-9b87094746cb.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        173.255.116.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:15:21:df:f5:60:02:1e:17:db:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=631b7557-e8af-476b-b2bf-9cc952c29081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b3:d2:c1:ab:c7:b5:c1:4c:09:4e:13:05:17:
                    ac:b9:e8:17:4d:2c:ca:f1:ed:93:87:03:cb:dd:cc:
                    a2:a6:0d:36:10:15:d2:e8:38:00:11:dd:49:60:6c:
                    3e:59:06:00:18:44:28:6c:4c:67:b0:27:78:f5:cc:
                    03:5b:62:73:52:a8:3f:90:8f:57:a3:71:ee:48:31:
                    00:6e:2f:bb:94:fb:11:69:ff:7e:c0:9a:b3:59:c6:
                    63:c3:4e:8d:3d:62:cd:b0:54:61:a6:f4:c4:08:5c:
                    6d:79:de:49:26:d4:ff:79:38:27:7e:37:4d:77:58:
                    92:c0:f2:44:fe:a6:07:26:39:bf:d5:5a:26:d5:1b:
                    53:0c:aa:64:87:8d:6c:36:8a:23:f0:44:98:4b:77:
                    12:bd:a2:99:bc:26:ab:87:50:33:60:b5:77:5f:38:
                    8d:c8:dd:f8:3f:39:4c:20:f4:b5:32:66:c3:71:5a:
                    c5:a5:df:d0:0c:28:c7:0b:3e:6a:0f:57:87:b5:20:
                    68:b7:a7:7c:d4:82:e2:ed:5d:18:8c:32:ec:56:49:
                    2e:1d:cb:4b:ff:46:e1:2e:a4:ec:1c:dd:04:a0:0f:
                    ae:80:dd:ff:f4:96:ef:57:1a:fa:57:68:fe:f1:b4:
                    f0:5e:50:be:c2:85:50:dc:40:01:45:01:8c:7e:ed:
                    36:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:74:D3:32:F9:E8:93:9D:8B:40:11:FB:5E:86:A5:AC:CF:6A:40:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0334b57b-73d7-39b1-8604-9b87094746cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.255.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:9a:fc:b7:d4:14:ad:55:99:6c:eb:52:33:ec:91:b2:20:40:
         ac:ad:5e:6c:5e:0e:b6:f4:1e:0a:36:35:13:1f:2f:90:36:c0:
         81:e0:5c:d5:de:2e:97:b7:d9:99:93:ea:8d:4c:9b:34:6d:d4:
         bd:ac:c6:bc:76:df:fa:56:df:d0:20:24:4a:d2:29:b6:05:90:
         ec:78:49:2f:11:16:45:02:b0:e4:59:43:e8:0c:0b:2e:1c:98:
         dd:37:3d:4e:94:62:4b:ac:7d:f1:cb:8c:18:64:76:63:31:69:
         68:68:62:58:b4:c4:97:1e:25:f1:98:92:75:83:e1:30:6d:d8:
         c1:e6:a8:5c:90:dd:7a:6e:e1:09:c5:73:81:b9:fb:f8:f5:40:
         03:43:49:4a:b9:1a:f6:6c:4e:6c:9c:6e:3f:84:0a:57:84:10:
         01:ec:ce:00:f2:a3:b4:35:3e:76:02:bb:df:ef:71:da:8c:85:
         b9:8c:f0:70:0b:91:88:33:be:19:d6:85:d1:0a:b2:70:a6:48:
         17:6a:a5:55:cd:fb:4e:b3:bc:58:fe:39:29:85:c6:12:12:7e:
         c1:23:9c:ec:63:ed:8c:d0:cc:17:8d:84:ea:d4:ee:07:22:2a:
         bc:1c:41:07:fe:a0:a2:2d:27:98:67:44:5e:ee:89:98:7c:91:
         2b:84:78:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKFSHf9WACHhfbSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NjMxYjc1NTctZThhZi00NzZiLWIyYmYtOWNjOTUyYzI5MDgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07PSwavHtcFMCU4TBResuegXTSzK8e2ThwPL
3cyipg02EBXS6DgAEd1JYGw+WQYAGEQobExnsCd49cwDW2JzUqg/kI9Xo3HuSDEA
bi+7lPsRaf9+wJqzWcZjw06NPWLNsFRhpvTECFxted5JJtT/eTgnfjdNd1iSwPJE
/qYHJjm/1Vom1RtTDKpkh41sNooj8ESYS3cSvaKZvCarh1AzYLV3XziNyN34PzlM
IPS1MmbDcVrFpd/QDCjHCz5qD1eHtSBot6d81ILi7V0YjDLsVkkuHctL/0bhLqTs
HN0EoA+ugN3/9JbvVxr6V2j+8bTwXlC+woVQ3EABRQGMfu02GwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF900zL56JOdi0AR+16GpazPakDeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDMzNGI1N2ItNzNkNy0z
OWIxLTg2MDQtOWI4NzA5NDc0NmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArf90MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACCa/LfUFK1VmWzrUjPskbIgQKytXmxeDrb0Hgo2NRMfL5A2wIHgXNXe
Lpe32ZmT6o1MmzRt1L2sxrx23/pW39AgJErSKbYFkOx4SS8RFkUCsORZQ+gMCy4c
mN03PU6UYkusffHLjBhkdmMxaWhoYli0xJceJfGYknWD4TBt2MHmqFyQ3Xpu4QnF
c4G5+/j1QANDSUq5GvZsTmycbj+ECleEEAHszgDyo7Q1PnYCu9/vcdqMhbmM8HAL
kYgzvhnWhdEKsnCmSBdqpVXN+06zvFj+OSmFxhISfsEjnOxj7YzQzBeNhOrU7gci
KrwcQQf+oKItJ5hnRF7uiZh8kSuEeLo=
-----END CERTIFICATE-----
Generated at Sat May 10 19:50:19 2025 by rpki-client