Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/30dea2ed-eea6-3fae-a79e-eb3af4b508ce.roa
File:                     30dea2ed-eea6-3fae-a79e-eb3af4b508ce.roa (raw, json)
Hash identifier:          pRif5Vdd9LyV4gH5vCbSfXKcbnF4muOwEM+tOsvhttU=
Subject key identifier:   A3:25:A3:37:37:4E:BD:CE:EA:92:1B:41:6C:71:91:56:F1:15:B5:57
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7BB58926AA5F3C23493E480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/30dea2ed-eea6-3fae-a79e-eb3af4b508ce.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        35.230.240.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bb:58:92:6a:a5:f3:c2:34:93:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=66e0f5c6-038e-4bc1-a016-6db103e501b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:ae:87:55:e6:19:bc:10:c5:63:ee:4e:35:
                    55:c4:b7:f1:9a:d5:c7:24:ea:0d:0e:9d:a3:0b:d5:
                    1b:2d:58:d8:5f:63:76:2e:dd:c9:eb:27:c3:81:09:
                    2f:88:72:db:36:2b:47:97:d5:34:17:3f:bd:ef:b0:
                    e3:d1:1b:2d:98:a9:74:4e:5c:dc:03:2b:e2:b5:ae:
                    d2:f5:04:ad:2d:da:20:8e:47:ac:c3:9c:cc:6a:8f:
                    37:87:e6:8f:a7:8d:84:74:8f:41:19:99:c6:77:2f:
                    0e:4c:10:4d:e1:6b:9c:a5:36:25:a4:95:95:b9:15:
                    6e:d2:fd:75:1e:1b:d8:fe:00:e1:0d:84:38:78:20:
                    fb:2d:4a:cd:0f:c4:40:e9:81:0c:71:75:df:c1:b4:
                    aa:d6:97:75:11:cf:5c:46:7e:e3:a9:95:ea:47:79:
                    d3:c4:d0:7d:1d:4a:2b:79:de:18:6b:b5:76:1c:78:
                    56:7a:d4:e1:3f:72:b4:63:43:fa:7a:f2:b8:50:ed:
                    29:bd:1b:55:64:b5:76:aa:1f:53:6d:e4:e4:02:fb:
                    5d:7e:f7:a8:36:d4:d8:ca:ca:11:85:26:85:2f:4d:
                    fb:dc:44:a0:ba:50:1f:c6:59:94:1e:1f:f5:e9:e4:
                    78:d5:2f:bd:25:16:d8:68:8b:58:fe:76:2e:e6:f4:
                    08:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:25:A3:37:37:4E:BD:CE:EA:92:1B:41:6C:71:91:56:F1:15:B5:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/30dea2ed-eea6-3fae-a79e-eb3af4b508ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.230.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:9c:45:cd:13:55:61:8a:e2:2b:ee:37:24:bd:92:de:8b:83:
         8e:4f:62:6a:e2:25:d4:94:07:6c:ae:c9:9c:af:da:7f:f9:87:
         8b:6b:83:a0:df:40:ce:77:32:72:39:a0:11:7f:03:71:50:8e:
         73:48:cb:3a:77:8a:e0:bb:fe:39:28:c0:97:41:dc:9e:9c:7d:
         4f:e2:a4:98:41:69:95:d7:d6:3e:d8:74:f6:c0:0d:2a:37:54:
         b7:b4:38:49:a6:49:c8:69:14:64:d7:16:ee:55:4b:28:51:95:
         66:db:96:32:a0:a7:4c:fa:df:68:a5:88:ed:7c:b1:a6:07:86:
         5f:b7:e3:09:62:69:86:ca:94:96:84:7e:74:c2:21:c5:aa:e9:
         ee:10:ed:68:46:44:6d:3a:54:ba:14:54:f3:09:a9:01:6a:2f:
         b7:9c:f2:f2:d2:2a:6c:22:64:ea:98:93:ac:5d:69:bf:e7:10:
         ce:9c:0c:88:ec:84:d1:c9:0c:80:d3:01:fe:17:76:8f:97:e9:
         5e:c9:a3:8c:86:2a:52:f8:df:dd:57:d1:3d:4e:04:73:7d:b9:
         25:6a:53:58:8c:ad:56:09:f6:f2:6e:40:59:cd:68:5a:d1:61:
         c7:ec:ab:71:eb:14:8f:9a:8a:44:ba:4a:39:d6:c7:6d:c3:b9:
         ad:8f:66:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnu1iSaqXzwjST5IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NjZlMGY1YzYtMDM4ZS00YmMxLWEwMTYtNmRiMTAzZTUwMWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvauh1XmGbwQxWPuTjVVxLfxmtXHJOoNDp2j
C9UbLVjYX2N2Lt3J6yfDgQkviHLbNitHl9U0Fz+977Dj0RstmKl0TlzcAyvita7S
9QStLdogjkesw5zMao83h+aPp42EdI9BGZnGdy8OTBBN4WucpTYlpJWVuRVu0v11
HhvY/gDhDYQ4eCD7LUrND8RA6YEMcXXfwbSq1pd1Ec9cRn7jqZXqR3nTxNB9HUor
ed4Ya7V2HHhWetThP3K0Y0P6evK4UO0pvRtVZLV2qh9TbeTkAvtdfveoNtTYysoR
hSaFL0373ESgulAfxlmUHh/16eR41S+9JRbYaItY/nYu5vQImQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKMlozc3Tr3O6pIbQWxxkVbxFbVXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzBkZWEyZWQtZWVhNi0z
ZmFlLWE3OWUtZWIzYWY0YjUwOGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+bwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGycRc0TVWGK4ivuNyS9kt6Lg45PYmriJdSUB2yuyZyv2n/5h4trg6Df
QM53MnI5oBF/A3FQjnNIyzp3iuC7/jkowJdB3J6cfU/ipJhBaZXX1j7YdPbADSo3
VLe0OEmmSchpFGTXFu5VSyhRlWbbljKgp0z632iliO18saYHhl+34wliaYbKlJaE
fnTCIcWq6e4Q7WhGRG06VLoUVPMJqQFqL7ec8vLSKmwiZOqYk6xdab/nEM6cDIjs
hNHJDIDTAf4Xdo+X6V7Jo4yGKlL4391X0T1OBHN9uSVqU1iMrVYJ9vJuQFnNaFrR
Ycfsq3HrFI+aikS6SjnWx23Dua2PZvY=
-----END CERTIFICATE-----
Generated at Sat May 10 14:35:53 2025 by rpki-client