Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4082c0c5-cc1a-3969-a0a0-cb7f9de3e1dd.roa
File:                     4082c0c5-cc1a-3969-a0a0-cb7f9de3e1dd.roa (raw, json)
Hash identifier:          dRXrXy7CZV8vxrLP3jvn+8b5ZAnqGoZD9PuqstYeEnA=
Subject key identifier:   5D:95:24:4E:2B:E1:72:55:2B:58:33:2E:48:19:4D:F7:19:33:FE:4D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285839B8E2923E8B1CDB806FADA700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4082c0c5-cc1a-3969-a0a0-cb7f9de3e1dd.roa
Signing time:             Mon 26 Apr 2021 04:00:00 +0000
ROA not before:           Mon 26 Apr 2021 04:00:00 +0000
ROA not after:            Sat 29 Jul 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.151.64.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:b8:e2:92:3e:8b:1c:db:80:6f:ad:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 04:00:00 2021 GMT
            Not After : Jul 29 04:00:00 2023 GMT
        Subject: CN=7a1c0317-663f-4541-b299-674ff34cdb8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:06:61:01:0e:93:ec:45:ce:65:86:41:c2:ea:
                    39:55:9a:35:6d:ec:cb:a3:a5:d9:b2:00:d3:2c:95:
                    59:a7:c2:ff:b3:47:06:d1:00:53:68:29:dc:9a:68:
                    b5:31:f4:48:4b:9d:5f:9f:8d:b2:bf:ae:96:65:45:
                    ff:20:db:ad:50:46:2f:2f:b5:17:a0:6b:4f:1c:3a:
                    17:c0:d7:71:2b:10:16:2f:dc:2b:f0:66:17:9d:94:
                    80:b2:29:33:6b:e6:65:74:e8:78:1f:71:6c:07:f4:
                    a3:32:e4:de:33:44:6a:3b:d8:77:f1:f2:e9:16:50:
                    fc:4e:db:18:05:68:7c:28:d2:ae:e5:f3:5f:a1:90:
                    5d:e8:c7:3c:59:9e:8e:94:7e:1d:d5:ec:88:74:6c:
                    98:f1:36:ae:bd:78:3c:1d:b8:b0:05:c1:03:92:92:
                    f7:1e:b5:b9:c6:29:25:57:a8:82:db:1e:02:42:c8:
                    9f:a1:5d:7a:13:da:a2:bb:93:f4:df:25:1b:8c:63:
                    ab:89:6c:77:3f:a5:3f:a8:f3:68:75:06:03:02:98:
                    fc:43:be:7d:82:e6:2c:ea:42:fe:e2:db:a6:50:0d:
                    f4:1a:12:90:78:8c:e7:7f:36:a1:9e:dd:a1:54:de:
                    a7:67:3c:cc:34:11:69:15:fc:50:ad:a4:0f:12:e0:
                    5c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:95:24:4E:2B:E1:72:55:2B:58:33:2E:48:19:4D:F7:19:33:FE:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4082c0c5-cc1a-3969-a0a0-cb7f9de3e1dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.151.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:6d:dd:36:f3:14:a7:cc:cc:34:9b:9d:2b:af:7b:94:6d:fe:
         bc:a8:19:8a:3b:72:d4:89:0b:03:0c:e2:a4:ca:65:58:28:02:
         16:84:e2:c1:a1:4e:81:87:1f:84:7f:ba:67:b7:11:2d:40:18:
         6c:7b:b1:33:9a:26:e7:de:cd:1b:af:5a:56:e4:9f:b7:b6:f5:
         2a:b1:fb:7f:33:a6:95:17:a8:2b:ae:53:b8:e8:25:db:c1:b2:
         e7:51:2d:84:42:cf:1d:3c:d7:04:aa:fd:8d:8a:e2:5a:9f:e2:
         cb:9f:65:de:7b:6e:9a:80:15:1c:af:bc:c4:95:8b:e2:b7:21:
         01:f6:c4:11:84:67:69:49:a5:0c:02:f1:2e:c3:70:a1:7c:76:
         ab:65:fd:ba:fa:28:91:9f:de:cc:d4:26:49:8b:46:78:b2:ce:
         ea:11:eb:c2:66:5d:3d:48:64:c8:f6:fd:0b:4c:5a:21:8f:04:
         3d:39:1e:d5:b8:19:8e:7e:e4:79:01:39:b6:19:eb:0e:e8:41:
         ad:b0:61:aa:03:8d:31:27:59:6b:03:ee:6d:d0:e5:b1:81:58:
         18:b7:0f:11:2c:61:ef:fc:36:fa:19:68:03:85:03:cd:2c:f5:
         27:21:22:13:23:fe:1f:d0:5a:e6:a3:ae:9a:0d:de:b9:55:15:
         91:ef:93:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDm44pI+ixzbgG+tpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDQyNjA0MDAwMFoXDTIzMDcyOTA0MDAwMFowLzEtMCsGA1UEAxMk
N2ExYzAzMTctNjYzZi00NTQxLWIyOTktNjc0ZmYzNGNkYjhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQZhAQ6T7EXOZYZBwuo5VZo1bezLo6XZsgDT
LJVZp8L/s0cG0QBTaCncmmi1MfRIS51fn42yv66WZUX/INutUEYvL7UXoGtPHDoX
wNdxKxAWL9wr8GYXnZSAsikza+ZldOh4H3FsB/SjMuTeM0RqO9h38fLpFlD8TtsY
BWh8KNKu5fNfoZBd6Mc8WZ6OlH4d1eyIdGyY8TauvXg8HbiwBcEDkpL3HrW5xikl
V6iC2x4CQsifoV16E9qiu5P03yUbjGOriWx3P6U/qPNodQYDApj8Q759guYs6kL+
4tumUA30GhKQeIznfzahnt2hVN6nZzzMNBFpFfxQraQPEuBcGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF2VJE4r4XJVK1gzLkgZTfcZM/5NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDA4MmMwYzUtY2MxYS0z
OTY5LWEwYTAtY2I3ZjlkZTNlMWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIpdAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFt3TbzFKfMzDSbnSuve5Rt/ryoGYo7ctSJCwMM4qTKZVgoAhaE4sGh
ToGHH4R/ume3ES1AGGx7sTOaJufezRuvWlbkn7e29Sqx+38zppUXqCuuU7joJdvB
sudRLYRCzx081wSq/Y2K4lqf4sufZd57bpqAFRyvvMSVi+K3IQH2xBGEZ2lJpQwC
8S7DcKF8dqtl/br6KJGf3szUJkmLRniyzuoR68JmXT1IZMj2/QtMWiGPBD05HtW4
GY5+5HkBObYZ6w7oQa2wYaoDjTEnWWsD7m3Q5bGBWBi3DxEsYe/8NvoZaAOFA80s
9SchIhMj/h/QWuajrpoN3rlVFZHvkzo=
-----END CERTIFICATE-----
Generated at Sat May 10 14:39:11 2025 by rpki-client