Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a6c1f09-861a-30e7-88a9-3ce014e46e32.roa
File:                     1a6c1f09-861a-30e7-88a9-3ce014e46e32.roa (raw, json)
Hash identifier:          cetJivMGgtve/fwsxdeWnnbB7nlfMDFDGQFeVVVtdFc=
Subject key identifier:   65:C7:81:2A:17:6C:0E:C5:2C:AC:88:36:E5:45:DD:54:48:87:D1:94
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A0D2CCD8A1133D45B834400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a6c1f09-861a-30e7-88a9-3ce014e46e32.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     19527
IP address blocks:        35.206.5.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0d:2c:cd:8a:11:33:d4:5b:83:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=5011ba27-8951-45af-928d-73aac12bda7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:34:75:bb:3a:b0:08:8c:79:da:dd:e6:a0:7a:
                    37:4c:a4:05:58:45:3d:77:c7:cd:bc:58:76:db:40:
                    29:3b:06:2f:be:ef:c7:dc:80:2e:2d:bf:4d:74:37:
                    cb:3d:9c:b9:a7:1b:e9:fa:fb:a2:c1:cd:b2:3d:e0:
                    44:4f:62:d9:3b:0a:93:99:ef:b8:d7:58:2b:69:e8:
                    bb:f0:8e:3c:0e:dd:92:bf:aa:d8:f1:77:e8:2e:49:
                    be:25:5d:0c:cb:e2:7e:63:55:d0:59:fc:17:22:75:
                    92:e7:ad:4b:37:25:1c:5c:92:25:9b:9f:b9:96:11:
                    53:82:54:d4:15:d3:e2:d0:8b:ac:d3:d9:81:d4:9f:
                    a5:55:ae:28:51:5a:54:7e:af:08:e9:9f:a0:5c:a1:
                    e8:7b:3d:9a:fd:4e:50:8e:38:62:69:14:1d:e3:36:
                    98:8b:d2:f0:09:52:f1:f8:15:4e:9f:36:32:cb:d4:
                    aa:aa:09:8c:0a:4d:4a:b3:d0:94:a5:36:18:4f:5b:
                    f1:53:af:20:22:92:98:37:1e:96:7a:9e:ee:9a:7d:
                    08:ab:18:c5:b6:00:da:e3:15:26:a6:50:cb:b8:05:
                    24:0a:3d:27:b5:d1:80:c4:dc:e7:ed:74:4f:67:6e:
                    a5:19:7a:57:15:e8:09:c8:43:26:d8:4b:32:e0:59:
                    43:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C7:81:2A:17:6C:0E:C5:2C:AC:88:36:E5:45:DD:54:48:87:D1:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a6c1f09-861a-30e7-88a9-3ce014e46e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.206.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:df:d9:ef:de:e4:cc:46:c4:a7:b2:e0:8a:3d:0b:bb:1f:5b:
         e2:74:09:29:7f:c6:e0:51:70:95:75:03:f0:78:aa:26:bd:bc:
         a7:da:f2:46:aa:52:53:d4:d6:fc:fd:0e:41:be:35:88:bc:83:
         53:a4:b4:1f:e3:e7:15:55:88:89:79:b4:e2:b7:0e:11:62:3f:
         a6:b9:fa:80:9d:5d:c4:3c:f6:f2:e4:66:6d:78:33:2c:a0:3c:
         0d:c8:5a:f7:17:7b:0a:b1:cd:e4:39:1f:5e:ee:5f:6f:28:1c:
         ea:7f:36:7c:ed:a6:04:a4:1b:61:96:06:5a:7c:f2:de:c5:9e:
         c6:29:25:7a:0e:4f:3c:b0:8c:18:5b:0f:2f:0b:63:3b:da:fc:
         73:f9:14:91:b7:7c:9b:68:53:8d:52:47:8a:e3:bb:89:66:4b:
         8c:e6:66:8b:2f:de:26:5f:2c:53:31:f9:c4:d9:70:23:bc:ce:
         69:00:bd:eb:e3:f7:82:5e:ac:f1:f6:b4:cd:3a:0a:45:30:69:
         4e:7a:29:1e:84:a9:6f:67:05:02:13:15:e1:27:41:00:37:54:
         2f:17:ec:45:0e:93:09:f8:2a:88:49:33:9e:6c:76:e6:56:10:
         47:9e:73:a0:5f:6c:6b:49:18:ef:5f:64:d4:c2:64:f3:be:f0:
         7e:b6:49:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKDSzNihEz1FuDRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NTAxMWJhMjctODk1MS00NWFmLTkyOGQtNzNhYWMxMmJkYTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TR1uzqwCIx52t3moHo3TKQFWEU9d8fNvFh2
20ApOwYvvu/H3IAuLb9NdDfLPZy5pxvp+vuiwc2yPeBET2LZOwqTme+411graei7
8I48Dt2Sv6rY8XfoLkm+JV0My+J+Y1XQWfwXInWS561LNyUcXJIlm5+5lhFTglTU
FdPi0Ius09mB1J+lVa4oUVpUfq8I6Z+gXKHoez2a/U5QjjhiaRQd4zaYi9LwCVLx
+BVOnzYyy9SqqgmMCk1Ks9CUpTYYT1vxU68gIpKYNx6Wep7umn0IqxjFtgDa4xUm
plDLuAUkCj0ntdGAxNzn7XRPZ26lGXpXFegJyEMm2Esy4FlDIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGXHgSoXbA7FLKyINuVF3VRIh9GUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWE2YzFmMDktODYxYS0z
MGU3LTg4YTktM2NlMDE0ZTQ2ZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI84FMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjf2e/e5MxGxKey4Io9C7sfW+J0CSl/xuBRcJV1A/B4qia9vKfa8kaq
UlPU1vz9DkG+NYi8g1OktB/j5xVViIl5tOK3DhFiP6a5+oCdXcQ89vLkZm14Myyg
PA3IWvcXewqxzeQ5H17uX28oHOp/NnztpgSkG2GWBlp88t7FnsYpJXoOTzywjBhb
Dy8LYzva/HP5FJG3fJtoU41SR4rju4lmS4zmZosv3iZfLFMx+cTZcCO8zmkAvevj
94JerPH2tM06CkUwaU56KR6EqW9nBQITFeEnQQA3VC8X7EUOkwn4KohJM55sduZW
EEeec6BfbGtJGO9fZNTCZPO+8H62SXM=
-----END CERTIFICATE-----
Generated at Sat May 10 11:34:32 2025 by rpki-client