Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d85d2a0-de99-32e4-9ba3-29978c0155f8.roa
File:                     0d85d2a0-de99-32e4-9ba3-29978c0155f8.roa (raw, json)
Hash identifier:          U11QOXuMZuCI16Oijr5xvnacLHiaLERy/C3SGJAVw6k=
Subject key identifier:   C7:97:D1:ED:71:A2:28:2E:19:3F:D8:21:99:6F:8D:F3:24:BA:96:0D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285842B0659F870766E0D7EC45A500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d85d2a0-de99-32e4-9ba3-29978c0155f8.roa
Signing time:             Wed 26 Jul 2023 12:00:00 +0000
ROA not before:           Wed 26 Jul 2023 12:00:00 +0000
ROA not after:            Mon 29 Jul 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.101.64.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b0:65:9f:87:07:66:e0:d7:ec:45:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 26 12:00:00 2023 GMT
            Not After : Jul 29 04:00:00 2024 GMT
        Subject: CN=54998d9f-61c0-4daf-9f96-ad9537efe4b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:28:6a:86:10:38:f3:fb:ac:a5:b5:83:de:44:
                    f5:18:9f:6a:a8:14:a7:b2:5d:98:b2:f8:2d:63:d7:
                    d8:ed:37:39:92:60:b1:56:a3:24:c2:df:b4:d6:ac:
                    aa:a7:a8:c5:a5:f5:84:07:5a:53:5c:1f:8b:67:16:
                    0d:26:bb:61:8e:a1:30:30:99:df:39:3d:ce:09:bf:
                    ab:74:5a:b4:43:3f:00:dd:ba:87:89:16:35:b8:de:
                    df:ab:73:a4:fa:11:5f:54:39:45:27:80:43:b6:73:
                    ba:0c:c6:30:f4:2b:1e:4c:42:c5:bf:79:31:e9:e8:
                    e8:19:38:ec:b1:3a:75:9d:9e:55:01:38:4b:22:a4:
                    53:dd:5a:cc:55:d5:eb:26:56:f8:b6:82:f6:d6:e8:
                    1d:63:5f:41:91:fc:97:e1:9b:25:6c:5e:92:4f:2b:
                    4d:81:fa:9e:ff:df:b7:06:9e:9d:c2:f5:8d:bf:48:
                    b0:79:4a:3a:34:cf:72:21:a9:d5:a5:3e:f9:6e:c2:
                    81:55:cf:d0:ec:7a:aa:06:b7:f7:c8:d6:e9:9b:6e:
                    5f:37:5b:47:45:cd:d7:07:00:f4:5d:11:41:c3:b9:
                    3e:17:dd:71:8d:7d:cb:ad:c5:8e:b0:84:64:96:37:
                    ff:4f:e8:ff:00:89:4a:91:39:80:53:ba:b6:46:91:
                    ec:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:97:D1:ED:71:A2:28:2E:19:3F:D8:21:99:6F:8D:F3:24:BA:96:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d85d2a0-de99-32e4-9ba3-29978c0155f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.101.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:a1:1c:60:b1:ea:cf:bd:bc:f7:a7:95:e2:9a:54:4d:a2:0d:
         75:12:8f:30:de:19:de:26:b5:b6:0c:7a:02:8f:88:ca:9f:93:
         90:e1:c8:ea:82:c4:ae:79:a4:8c:14:b3:6e:5f:50:b5:53:1c:
         04:91:60:2a:0e:a6:09:c1:28:30:11:0a:ff:51:a4:73:e9:28:
         41:66:68:5a:c2:48:12:e4:d1:e9:a7:a8:63:8d:06:f1:98:6d:
         8d:a6:8d:f4:bc:6a:47:ad:4b:43:f0:9d:ba:86:6f:aa:69:45:
         f0:fb:df:7b:17:37:41:a8:f2:fb:8f:ba:6b:f6:33:b6:73:3d:
         e7:dd:4e:c1:1b:d9:a8:0d:8e:e9:24:79:cd:39:c3:89:e5:0c:
         35:82:25:d5:e0:c1:8a:c4:34:8e:04:52:36:5b:ac:e0:97:9d:
         41:f3:7d:8d:e4:8d:b3:ba:2f:1b:9e:75:f9:26:d5:47:a3:bc:
         01:45:4e:36:80:50:0c:0d:d3:69:7d:ad:7e:fc:28:a2:44:60:
         df:65:0f:dd:63:53:e0:91:e4:51:a3:fe:38:80:74:2c:6b:ad:
         07:e6:12:b7:ee:68:64:0f:a8:97:a2:9f:a8:42:9d:cd:34:3e:
         36:ff:91:91:78:a5:9c:b7:95:3c:56:fe:d7:2d:a3:f4:7b:bc:
         fa:78:5a:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKwZZ+HB2bg1+xFpQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDcyNjEyMDAwMFoXDTI0MDcyOTA0MDAwMFowLzEtMCsGA1UEAxMk
NTQ5OThkOWYtNjFjMC00ZGFmLTlmOTYtYWQ5NTM3ZWZlNGIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvihqhhA48/uspbWD3kT1GJ9qqBSnsl2Ysvgt
Y9fY7Tc5kmCxVqMkwt+01qyqp6jFpfWEB1pTXB+LZxYNJrthjqEwMJnfOT3OCb+r
dFq0Qz8A3bqHiRY1uN7fq3Ok+hFfVDlFJ4BDtnO6DMYw9CseTELFv3kx6ejoGTjs
sTp1nZ5VAThLIqRT3VrMVdXrJlb4toL21ugdY19BkfyX4ZslbF6STytNgfqe/9+3
Bp6dwvWNv0iweUo6NM9yIanVpT75bsKBVc/Q7HqqBrf3yNbpm25fN1tHRc3XBwD0
XRFBw7k+F91xjX3LrcWOsIRkljf/T+j/AIlKkTmAU7q2RpHsnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMeX0e1xoiguGT/YIZlvjfMkupYNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGQ4NWQyYTAtZGU5OS0z
MmU0LTliYTMtMjk5NzhjMDE1NWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGImVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGKhHGCx6s+9vPenleKaVE2iDXUSjzDeGd4mtbYMegKPiMqfk5DhyOqC
xK55pIwUs25fULVTHASRYCoOpgnBKDARCv9RpHPpKEFmaFrCSBLk0emnqGONBvGY
bY2mjfS8aketS0PwnbqGb6ppRfD733sXN0Go8vuPumv2M7ZzPefdTsEb2agNjukk
ec05w4nlDDWCJdXgwYrENI4EUjZbrOCXnUHzfY3kjbO6Lxuedfkm1UejvAFFTjaA
UAwN02l9rX78KKJEYN9lD91jU+CR5FGj/jiAdCxrrQfmErfuaGQPqJein6hCnc00
Pjb/kZF4pZy3lTxW/tcto/R7vPp4WsY=
-----END CERTIFICATE-----
Generated at Sat May 10 14:57:37 2025 by rpki-client