Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4bd50eff-8ca9-3c82-9df4-1d869094fd1b.roa
File:                     4bd50eff-8ca9-3c82-9df4-1d869094fd1b.roa (raw, json)
Hash identifier:          SRYSoZ3YYscTec4Bks7cPbiY8USk2+5hoIfUYzFNYpw=
Subject key identifier:   1A:B9:71:7C:12:87:89:DE:DD:4A:54:A7:E2:5A:D9:DD:FA:64:71:B2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285842B0652BF0702804AE06C98A00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4bd50eff-8ca9-3c82-9df4-1d869094fd1b.roa
Signing time:             Wed 26 Jul 2023 12:00:00 +0000
ROA not before:           Wed 26 Jul 2023 12:00:00 +0000
ROA not after:            Mon 29 Jul 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.242.192.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b0:65:2b:f0:70:28:04:ae:06:c9:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 26 12:00:00 2023 GMT
            Not After : Jul 29 04:00:00 2024 GMT
        Subject: CN=80d8ba0d-c579-450b-b3fe-7fd0234dfa74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c8:c3:7c:69:65:1b:af:c2:26:31:c6:0d:8b:
                    ab:9c:5c:fc:65:2c:36:a9:9f:a1:fb:25:91:41:f7:
                    01:4b:67:61:0a:44:72:b3:5b:5e:97:c5:ef:e9:16:
                    ab:40:8b:23:eb:dc:ee:f9:89:2b:94:55:18:f7:0b:
                    6d:75:9f:35:94:f9:35:0e:90:b7:60:65:3c:bd:ca:
                    7e:74:02:63:74:f4:fe:c8:6b:c0:b9:28:50:e1:bb:
                    85:24:23:b1:d3:4d:8f:26:9f:e4:86:28:71:fc:06:
                    10:6a:f3:08:84:8e:85:cc:83:32:40:df:f3:11:98:
                    9b:d3:38:8a:07:a3:6e:3e:9e:bb:27:a4:9b:a8:7a:
                    60:1b:39:42:14:45:c8:eb:4c:ec:57:3c:f0:b5:4c:
                    a9:e3:a0:98:09:4b:6a:cf:2d:db:ec:13:1e:89:6c:
                    bd:f6:0a:e2:3f:f7:ab:77:a1:cf:73:9c:c3:fd:aa:
                    ab:94:c2:91:de:40:2f:73:b6:34:7b:f9:34:fa:3f:
                    17:e6:aa:c3:28:36:28:93:3f:2d:e6:a3:fe:ad:d7:
                    6e:9e:5c:56:d0:38:60:29:50:de:d3:51:8b:d7:e4:
                    7f:28:1a:70:71:c2:6f:b6:ce:e7:a7:07:58:f8:07:
                    c6:d0:a4:f0:a2:7f:7f:db:9d:69:36:62:3e:c1:4c:
                    9d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B9:71:7C:12:87:89:DE:DD:4A:54:A7:E2:5A:D9:DD:FA:64:71:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4bd50eff-8ca9-3c82-9df4-1d869094fd1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.242.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f5:cc:a0:b5:94:a8:e1:f5:aa:e3:8e:7c:db:bf:25:ec:00:
         2f:e0:08:04:75:3f:eb:a4:0c:df:35:d3:6e:a5:b8:ba:9c:25:
         4e:84:9f:4d:48:26:31:4f:bd:57:0a:0f:13:90:aa:b0:39:cf:
         53:54:52:ba:e1:0e:45:38:5b:55:07:95:15:5e:6d:d7:65:b7:
         ba:93:4d:9e:3d:66:00:56:b0:5a:30:56:0b:9a:2c:aa:f5:d5:
         d4:f4:d4:3d:ea:4a:0f:71:be:9c:d8:d1:ba:2a:33:1a:c2:36:
         09:de:2f:0e:21:a1:50:a8:06:35:22:be:c3:7f:47:8e:dc:d8:
         b9:0e:c6:2d:d5:5c:3a:56:cf:15:b1:4a:4d:ca:ef:71:f1:0f:
         ea:53:78:04:fe:95:20:38:2b:39:9a:80:d2:b5:8a:c5:a4:5a:
         41:4a:6d:48:88:e4:29:83:6e:53:b7:15:7d:44:ed:f0:4f:df:
         53:3a:d9:b7:bd:bf:54:7c:7a:9d:c2:11:56:1f:9e:22:0d:d6:
         45:ab:b7:6e:48:4a:41:4e:7a:d5:75:16:c2:33:72:b1:40:02:
         6e:f8:15:b5:cb:03:4d:54:c5:ef:21:01:96:1d:69:4f:77:b0:
         57:8d:bb:05:38:38:23:f7:38:4b:f5:6c:76:da:c0:3a:fb:af:
         55:4d:e7:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKwZSvwcCgErgbJigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDcyNjEyMDAwMFoXDTI0MDcyOTA0MDAwMFowLzEtMCsGA1UEAxMk
ODBkOGJhMGQtYzU3OS00NTBiLWIzZmUtN2ZkMDIzNGRmYTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18jDfGllG6/CJjHGDYurnFz8ZSw2qZ+h+yWR
QfcBS2dhCkRys1tel8Xv6RarQIsj69zu+YkrlFUY9wttdZ81lPk1DpC3YGU8vcp+
dAJjdPT+yGvAuShQ4buFJCOx002PJp/khihx/AYQavMIhI6FzIMyQN/zEZib0ziK
B6NuPp67J6SbqHpgGzlCFEXI60zsVzzwtUyp46CYCUtqzy3b7BMeiWy99griP/er
d6HPc5zD/aqrlMKR3kAvc7Y0e/k0+j8X5qrDKDYokz8t5qP+rddunlxW0DhgKVDe
01GL1+R/KBpwccJvts7npwdY+AfG0KTwon9/251pNmI+wUydjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBq5cXwSh4ne3UpUp+Ja2d36ZHGyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGJkNTBlZmYtOGNhOS0z
YzgyLTlkZjQtMWQ4NjkwOTRmZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI/LAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAED1zKC1lKjh9arjjnzbvyXsAC/gCAR1P+ukDN81026luLqcJU6En01I
JjFPvVcKDxOQqrA5z1NUUrrhDkU4W1UHlRVebddlt7qTTZ49ZgBWsFowVguaLKr1
1dT01D3qSg9xvpzY0boqMxrCNgneLw4hoVCoBjUivsN/R47c2LkOxi3VXDpWzxWx
Sk3K73HxD+pTeAT+lSA4KzmagNK1isWkWkFKbUiI5CmDblO3FX1E7fBP31M62be9
v1R8ep3CEVYfniIN1kWrt25ISkFOetV1FsIzcrFAAm74FbXLA01Uxe8hAZYdaU93
sFeNuwU4OCP3OEv1bHbawDr7r1VN56U=
-----END CERTIFICATE-----
Generated at Sat May 10 13:06:11 2025 by rpki-client