Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/26d1f88e-8817-3f37-b87a-67096e151305.roa
File:                     26d1f88e-8817-3f37-b87a-67096e151305.roa (raw, json)
Hash identifier:          giif7DBbB5K3rDJUiKVNseBKe0t+1VgV24cjm5lmfC4=
Subject key identifier:   4B:AE:97:48:37:5C:B6:48:83:B8:18:D8:F0:87:9C:E7:1D:5D:B8:19
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7B3CEC7EC9F615CE4110450
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/26d1f88e-8817-3f37-b87a-67096e151305.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        35.194.128.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b3:ce:c7:ec:9f:61:5c:e4:11:04:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=2741401a-35e5-45b5-9916-c3ab46484193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c6:0f:64:b7:a7:89:cd:ba:57:7e:69:69:59:
                    c1:be:27:e0:d3:d2:be:f1:46:cd:db:1b:bc:8c:b8:
                    e4:0b:ec:d1:fc:91:b1:1b:cf:6e:e9:ef:6c:77:95:
                    80:fc:9e:c4:76:02:56:40:fa:2a:eb:a7:45:34:da:
                    52:5f:a1:42:5e:d1:48:00:98:b0:23:91:b2:cf:f2:
                    dd:7e:5d:35:05:30:60:23:b6:01:1f:ef:b4:54:66:
                    a5:d0:ee:16:fe:ce:fb:bf:7e:38:bd:55:90:9e:4a:
                    eb:c6:82:a0:ce:a3:56:af:e7:e7:42:b3:ec:8c:f6:
                    a3:d1:61:b2:ec:5d:81:11:38:e5:28:44:ed:52:f2:
                    bf:64:bb:76:21:48:ef:53:8d:d3:99:9a:d4:fa:63:
                    39:76:64:7a:0e:8f:7e:a8:fb:e9:c5:df:b9:12:56:
                    f0:90:b8:0a:c0:1c:96:20:3c:c5:04:4c:9e:d5:37:
                    1a:b3:d0:80:50:2c:36:7d:5e:3e:8f:6a:bc:1c:34:
                    95:28:db:ff:31:8a:37:8c:76:f0:da:ca:40:c7:1d:
                    d6:3d:fc:2a:41:30:64:74:83:95:cf:47:b0:e1:49:
                    0b:0e:1e:3a:0e:54:10:6f:1b:c4:a4:c1:af:0d:03:
                    02:a5:29:40:68:04:e4:85:b4:dc:79:6c:6e:ca:86:
                    be:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AE:97:48:37:5C:B6:48:83:B8:18:D8:F0:87:9C:E7:1D:5D:B8:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/26d1f88e-8817-3f37-b87a-67096e151305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.194.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:b5:9b:41:b6:05:f7:af:6e:d9:bd:e5:30:34:05:15:3e:74:
         6f:3d:ce:b4:75:f7:22:1f:43:ee:09:14:2b:da:b1:f1:0b:67:
         56:d3:ee:62:7e:6e:87:81:31:6e:a6:6e:bd:6d:75:59:e4:7c:
         c1:b4:0b:a7:be:d1:30:e0:05:bc:61:3a:c8:53:a7:0a:ea:0e:
         61:60:67:0a:ce:59:bf:cd:34:a0:cc:82:fb:92:32:7a:95:5a:
         c0:73:b6:61:18:39:f4:dc:25:2b:72:43:21:76:f6:a5:8f:69:
         c4:5c:30:40:56:7d:e6:30:07:78:5e:7b:ef:f6:d6:36:eb:0a:
         b5:ef:ed:e2:6c:86:e3:44:2c:6c:54:de:3c:67:95:c8:c9:32:
         d8:2e:82:a7:95:87:8d:d6:d0:29:43:86:12:77:40:7e:83:6b:
         15:af:68:28:c6:c7:e9:55:f6:7d:b2:72:6d:33:78:cd:37:a4:
         d1:df:17:80:09:53:df:e5:bf:d4:ad:4d:8c:1a:be:6e:92:42:
         e1:ab:50:ef:97:df:52:2c:43:1a:4a:38:36:35:86:3b:1c:01:
         6a:57:46:0a:6b:0d:43:f3:7b:88:50:47:64:a0:5e:8c:b2:96:
         2a:fa:be:1b:3d:03:34:df:5b:c7:7e:36:44:1b:26:bb:21:2b:
         d3:c2:10:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqns87H7J9hXOQRBFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
Mjc0MTQwMWEtMzVlNS00NWI1LTk5MTYtYzNhYjQ2NDg0MTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8YPZLenic26V35paVnBvifg09K+8UbN2xu8
jLjkC+zR/JGxG89u6e9sd5WA/J7EdgJWQPoq66dFNNpSX6FCXtFIAJiwI5Gyz/Ld
fl01BTBgI7YBH++0VGal0O4W/s77v344vVWQnkrrxoKgzqNWr+fnQrPsjPaj0WGy
7F2BETjlKETtUvK/ZLt2IUjvU43TmZrU+mM5dmR6Do9+qPvpxd+5ElbwkLgKwByW
IDzFBEye1Tcas9CAUCw2fV4+j2q8HDSVKNv/MYo3jHbw2spAxx3WPfwqQTBkdIOV
z0ew4UkLDh46DlQQbxvEpMGvDQMCpSlAaATkhbTceWxuyoa+5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEuul0g3XLZIg7gY2PCHnOcdXbgZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjZkMWY4OGUtODgxNy0z
ZjM3LWI4N2EtNjcwOTZlMTUxMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8KAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJK1m0G2Bfevbtm95TA0BRU+dG89zrR19yIfQ+4JFCvasfELZ1bT7mJ+
boeBMW6mbr1tdVnkfMG0C6e+0TDgBbxhOshTpwrqDmFgZwrOWb/NNKDMgvuSMnqV
WsBztmEYOfTcJStyQyF29qWPacRcMEBWfeYwB3hee+/21jbrCrXv7eJshuNELGxU
3jxnlcjJMtgugqeVh43W0ClDhhJ3QH6DaxWvaCjGx+lV9n2ycm0zeM03pNHfF4AJ
U9/lv9StTYwavm6SQuGrUO+X31IsQxpKODY1hjscAWpXRgprDUPze4hQR2SgXoyy
lir6vhs9AzTfW8d+NkQbJrshK9PCEII=
-----END CERTIFICATE-----
Generated at Sat May 10 15:02:13 2025 by rpki-client