Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0909687a-3ec8-31c1-973a-9ff158404c13.roa
File:                     0909687a-3ec8-31c1-973a-9ff158404c13.roa (raw, json)
Hash identifier:          lzEHODGDiLznlDGkr9+W46afBC9ha6eYVEgZY3Z12N8=
Subject key identifier:   F4:94:A5:83:77:9F:57:F2:F4:98:A8:DC:4F:3C:C2:5C:64:8A:01:0D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285842B06583F33D2A737B439FC960
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0909687a-3ec8-31c1-973a-9ff158404c13.roa
Signing time:             Wed 26 Jul 2023 12:00:00 +0000
ROA not before:           Wed 26 Jul 2023 12:00:00 +0000
ROA not after:            Mon 29 Jul 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.197.224.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b0:65:83:f3:3d:2a:73:7b:43:9f:c9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 26 12:00:00 2023 GMT
            Not After : Jul 29 04:00:00 2024 GMT
        Subject: CN=cc465602-e98f-49a9-8a36-fb0bfc850bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6d:48:1a:8b:2f:82:98:57:6b:eb:77:07:8c:
                    71:3a:1d:eb:55:dd:70:80:2c:70:af:18:2d:aa:3e:
                    75:5b:1d:db:e2:f1:9e:c6:4b:da:5a:f3:2a:83:ad:
                    9f:99:2c:59:81:64:ed:9e:b2:79:e5:f0:fa:93:07:
                    7c:a2:da:9e:4a:dd:81:24:e7:b4:4a:68:1f:95:a8:
                    37:b4:81:7d:23:ab:ad:71:71:f4:cc:18:01:08:f9:
                    42:1c:a4:fe:27:24:8b:52:40:5e:97:50:78:51:2b:
                    77:09:5d:51:5c:82:7e:27:c9:83:b1:d7:22:6f:9c:
                    1e:db:14:30:cc:38:f5:0a:e9:17:8f:ed:1c:3f:57:
                    92:29:7e:9f:06:7d:1f:de:74:23:e1:a1:7b:11:1f:
                    4e:c1:08:1c:fc:f6:39:bf:b5:ef:23:a6:0c:7e:c4:
                    27:88:ad:6b:86:63:45:d4:34:cb:ce:91:0b:44:74:
                    cc:f4:81:a3:91:14:68:f2:13:12:00:23:df:a6:11:
                    00:d7:7e:44:7a:92:ad:87:de:46:00:c8:a5:a7:91:
                    34:83:a9:0b:67:b7:34:43:e2:69:24:99:48:b1:43:
                    fb:c3:57:cf:bb:a0:fd:16:0b:56:63:66:27:c1:42:
                    d0:6a:98:25:c0:7d:e2:84:20:e8:89:5c:63:6b:5a:
                    49:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:94:A5:83:77:9F:57:F2:F4:98:A8:DC:4F:3C:C2:5C:64:8A:01:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0909687a-3ec8-31c1-973a-9ff158404c13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.197.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c2:8c:eb:c5:83:63:8b:77:63:6f:76:0f:3f:10:bc:3d:e1:
         a4:4b:2b:25:2e:d0:9a:91:51:07:fc:75:1b:f0:8f:bf:c4:32:
         82:1f:f0:18:47:3c:76:64:3f:d9:69:09:57:46:e7:e6:44:90:
         69:11:bf:a3:61:b0:82:40:75:a1:bd:bd:82:b5:cd:0d:59:53:
         5d:ef:dd:45:22:37:3d:c3:57:b0:00:03:04:d2:20:61:a0:57:
         7a:84:52:44:45:29:91:e8:6d:2b:b9:d8:2d:38:c6:63:9b:48:
         83:dd:26:dd:93:d2:32:66:8c:83:f4:32:be:aa:32:cb:37:ec:
         4c:38:62:ad:c3:0a:89:5a:c6:5d:e1:68:53:4d:8e:0a:ec:c8:
         86:a6:78:6f:75:5d:c1:6e:b4:9c:d3:2b:51:52:98:1f:cb:16:
         af:e8:c1:d9:8a:a1:8f:56:b9:c2:04:8b:44:c9:9e:20:7d:75:
         0d:e1:a1:8b:b9:cf:ca:d2:19:79:34:79:b9:9f:7f:2e:cc:7d:
         ee:35:69:de:21:64:d5:39:76:52:7e:f1:d3:de:94:12:8f:fb:
         da:c1:91:f4:88:36:8b:2f:1b:5a:e6:b7:2c:86:96:0a:c2:9d:
         73:4b:f0:86:93:9c:cd:33:be:0d:ab:9e:e6:b5:b3:4c:e6:0f:
         ac:ca:4b:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKwZYPzPSpze0OfyWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDcyNjEyMDAwMFoXDTI0MDcyOTA0MDAwMFowLzEtMCsGA1UEAxMk
Y2M0NjU2MDItZTk4Zi00OWE5LThhMzYtZmIwYmZjODUwYmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr21IGosvgphXa+t3B4xxOh3rVd1wgCxwrxgt
qj51Wx3b4vGexkvaWvMqg62fmSxZgWTtnrJ55fD6kwd8otqeSt2BJOe0Smgflag3
tIF9I6utcXH0zBgBCPlCHKT+JySLUkBel1B4USt3CV1RXIJ+J8mDsdcib5we2xQw
zDj1CukXj+0cP1eSKX6fBn0f3nQj4aF7ER9OwQgc/PY5v7XvI6YMfsQniK1rhmNF
1DTLzpELRHTM9IGjkRRo8hMSACPfphEA135EepKth95GAMilp5E0g6kLZ7c0Q+Jp
JJlIsUP7w1fPu6D9FgtWY2YnwULQapglwH3ihCDoiVxja1pJDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPSUpYN3n1fy9Jio3E88wlxkigENMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDkwOTY4N2EtM2VjOC0z
MWMxLTk3M2EtOWZmMTU4NDA0YzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI8XgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHCjOvFg2OLd2Nvdg8/ELw94aRLKyUu0JqRUQf8dRvwj7/EMoIf8BhH
PHZkP9lpCVdG5+ZEkGkRv6NhsIJAdaG9vYK1zQ1ZU13v3UUiNz3DV7AAAwTSIGGg
V3qEUkRFKZHobSu52C04xmObSIPdJt2T0jJmjIP0Mr6qMss37Ew4Yq3DColaxl3h
aFNNjgrsyIameG91XcFutJzTK1FSmB/LFq/owdmKoY9WucIEi0TJniB9dQ3hoYu5
z8rSGXk0ebmffy7Mfe41ad4hZNU5dlJ+8dPelBKP+9rBkfSINosvG1rmtyyGlgrC
nXNL8IaTnM0zvg2rnua1s0zmD6zKS9E=
-----END CERTIFICATE-----
Generated at Sun May 11 04:00:00 2025 by rpki-client