Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fe6fe51-6d71-3065-87ef-7d5770edf6f3.roa
File:                     5fe6fe51-6d71-3065-87ef-7d5770edf6f3.roa (raw, json)
Hash identifier:          zG4NAIhF/vrQzB6tyr6tv/YW67Q297u7xj7iSIm+hm8=
Subject key identifier:   88:C2:36:89:5F:6D:25:19:C5:6A:9B:87:E0:25:F6:C1:E9:00:DB:24
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583B9705B7BBFF8C99B0E409A7B0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fe6fe51-6d71-3065-87ef-7d5770edf6f3.roa
Signing time:             Thu 14 Oct 2021 04:00:00 +0000
ROA not before:           Thu 14 Oct 2021 04:00:00 +0000
ROA not after:            Tue 16 Jan 2024 05:00:00 +0000
asID:                     396982
IP address blocks:        34.165.64.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:97:05:b7:bb:ff:8c:99:b0:e4:09:a7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 14 04:00:00 2021 GMT
            Not After : Jan 16 05:00:00 2024 GMT
        Subject: CN=c2107f52-07c9-4b5b-8d29-c08913785552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:21:55:5f:bd:54:5b:67:98:05:ee:0d:5f:d3:
                    5c:5d:e7:86:9c:ed:bc:e3:b7:6a:e5:94:99:95:c3:
                    82:1e:a2:81:56:44:f0:3e:fa:a7:ae:de:bf:ce:7b:
                    56:11:06:b5:64:ef:e8:2c:2a:58:bf:28:2e:58:49:
                    c1:8f:ba:60:9e:47:86:dd:94:6c:c9:b4:68:4e:fa:
                    21:43:b9:0c:54:31:72:30:12:15:fe:f0:56:53:bf:
                    ac:fc:88:90:1c:7b:34:43:2e:47:ff:ee:cb:64:81:
                    83:26:7b:a8:ee:be:63:d2:ca:df:29:ee:91:8b:49:
                    09:27:24:09:8c:20:d9:30:17:e6:b6:0c:03:1d:59:
                    af:75:7f:99:ff:a9:2e:84:cb:ae:79:f4:26:2a:35:
                    44:09:52:cc:2a:cf:b7:36:34:1a:a7:fb:02:af:e2:
                    e8:a2:88:82:31:11:f7:9d:c7:62:be:34:39:ee:a0:
                    bd:56:d5:cf:e9:16:e0:c8:e8:f8:6b:af:f1:33:c2:
                    b0:da:f9:2d:37:b4:1d:fd:a3:57:06:85:89:12:26:
                    bc:ab:d5:3b:c1:f1:05:87:75:80:e1:df:a0:fa:a3:
                    bd:38:59:f5:1c:83:2f:56:41:4c:8b:ba:ab:2f:29:
                    33:b9:b2:b5:53:3a:83:97:1d:b7:7d:85:12:8c:66:
                    7c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C2:36:89:5F:6D:25:19:C5:6A:9B:87:E0:25:F6:C1:E9:00:DB:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fe6fe51-6d71-3065-87ef-7d5770edf6f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.165.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:5c:c8:04:98:52:ae:43:75:31:78:ae:9e:68:e6:50:a1:d3:
         88:d5:ef:55:83:5e:c8:3b:55:fa:7e:34:55:0e:03:95:ec:e7:
         0c:cd:a7:6e:25:c5:19:a0:85:b7:82:7f:93:f5:8e:d0:f5:47:
         5c:7a:87:eb:70:7e:e1:f1:40:80:b9:4f:28:32:f7:c9:09:cd:
         95:de:17:fc:24:4c:b8:21:8e:33:71:ab:d9:c0:ed:c2:9b:5f:
         a3:04:4b:84:60:e9:a4:fe:e8:d0:11:8f:12:27:7c:ca:ba:3b:
         25:3b:a7:3a:ff:78:89:00:90:f1:bd:47:00:f6:7d:38:da:60:
         b8:01:54:65:22:5f:4d:ad:5f:64:e3:fd:9f:40:9a:06:f5:57:
         aa:a6:54:85:71:17:bb:9d:4f:b2:4d:68:6d:08:a8:fa:ef:01:
         e3:f2:6a:67:65:db:db:b3:e2:59:3f:e7:1e:be:69:02:96:c7:
         f5:6c:09:9d:77:2e:74:b9:a6:8c:eb:5d:fd:76:dc:16:c7:98:
         d3:a4:71:d1:c0:15:dd:59:f3:d0:0e:e8:5d:2d:2d:aa:85:60:
         9a:77:c3:75:b8:2b:c1:bc:c8:a6:f9:e7:b3:f5:54:cb:a6:6a:
         b9:bf:08:1e:3c:3b:ca:83:a9:5c:06:0c:b9:e5:e1:61:42:96:
         67:31:d9:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDuXBbe7/4yZsOQJp7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMTAxNDA0MDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
YzIxMDdmNTItMDdjOS00YjViLThkMjktYzA4OTEzNzg1NTUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliFVX71UW2eYBe4NX9NcXeeGnO2847dq5ZSZ
lcOCHqKBVkTwPvqnrt6/zntWEQa1ZO/oLCpYvyguWEnBj7pgnkeG3ZRsybRoTvoh
Q7kMVDFyMBIV/vBWU7+s/IiQHHs0Qy5H/+7LZIGDJnuo7r5j0srfKe6Ri0kJJyQJ
jCDZMBfmtgwDHVmvdX+Z/6kuhMuuefQmKjVECVLMKs+3NjQap/sCr+LoooiCMRH3
ncdivjQ57qC9VtXP6RbgyOj4a6/xM8Kw2vktN7Qd/aNXBoWJEia8q9U7wfEFh3WA
4d+g+qO9OFn1HIMvVkFMi7qrLykzubK1UzqDlx23fYUSjGZ8jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIjCNolfbSUZxWqbh+Al9sHpANskMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWZlNmZlNTEtNmQ3MS0z
MDY1LTg3ZWYtN2Q1NzcwZWRmNmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIqVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABFcyASYUq5DdTF4rp5o5lCh04jV71WDXsg7Vfp+NFUOA5Xs5wzNp24l
xRmghbeCf5P1jtD1R1x6h+twfuHxQIC5Tygy98kJzZXeF/wkTLghjjNxq9nA7cKb
X6MES4Rg6aT+6NARjxInfMq6OyU7pzr/eIkAkPG9RwD2fTjaYLgBVGUiX02tX2Tj
/Z9Amgb1V6qmVIVxF7udT7JNaG0IqPrvAePyamdl29uz4lk/5x6+aQKWx/VsCZ13
LnS5pozrXf123BbHmNOkcdHAFd1Z89AO6F0tLaqFYJp3w3W4K8G8yKb557P1VMum
arm/CB48O8qDqVwGDLnl4WFClmcx2Z4=
-----END CERTIFICATE-----
Generated at Sun May 11 04:03:53 2025 by rpki-client