Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66e3b4a9-dd8d-3fef-b523-0feddeea24b4.roa
File:                     66e3b4a9-dd8d-3fef-b523-0feddeea24b4.roa (raw, json)
Hash identifier:          niinnjQ28bVbf2L//RVkLLlk8QOidVC+nEnSxcgTP+E=
Subject key identifier:   CB:37:6B:19:00:D4:59:54:0A:1E:3E:10:E7:BA:3D:0F:FE:BE:03:02
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7AA8495F5B1641EFFC0DF00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66e3b4a9-dd8d-3fef-b523-0feddeea24b4.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        35.185.160.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:aa:84:95:f5:b1:64:1e:ff:c0:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=cf0bbcc0-1623-4648-ba1f-4397772f78c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:49:23:8c:09:d9:7a:ce:a3:a1:d3:7f:4d:8e:
                    94:5c:e9:a9:48:e3:90:0c:26:23:61:6f:20:dc:9b:
                    60:b5:59:ad:96:2d:97:e3:fd:c6:7f:91:fe:57:0e:
                    a8:29:f7:f8:90:26:98:b8:41:9c:4b:75:6c:00:18:
                    f8:8e:25:91:86:6f:83:09:5a:ea:3c:05:df:c0:93:
                    3e:ec:7d:55:3c:90:89:30:b6:c5:86:76:75:41:a7:
                    75:a4:d5:08:f6:48:8c:d1:93:51:fc:a3:e9:f2:bb:
                    37:8b:47:4a:2f:3b:ee:6e:08:0c:9c:9c:52:d5:0f:
                    e1:f9:27:54:c4:b2:f5:c6:c4:3b:34:e4:30:73:99:
                    da:59:7e:3f:d2:3a:f5:3d:4e:b1:43:e9:eb:54:2e:
                    17:80:a1:ee:68:fe:61:a2:f4:13:07:f0:c3:1b:02:
                    36:6c:7b:7d:37:49:5d:a0:65:a7:db:5a:02:1b:f7:
                    34:b1:8b:d5:3e:1e:d6:ad:d4:76:eb:4d:c4:5b:04:
                    59:c7:0a:15:11:fc:27:86:3a:dc:9a:21:40:df:a6:
                    67:23:63:8a:05:91:38:f8:7d:10:76:85:76:33:77:
                    b7:b5:30:6b:cd:f2:93:8f:a0:35:72:59:1f:75:37:
                    58:22:e7:a8:10:11:3b:15:6f:1d:0d:47:45:ea:26:
                    26:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:37:6B:19:00:D4:59:54:0A:1E:3E:10:E7:BA:3D:0F:FE:BE:03:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66e3b4a9-dd8d-3fef-b523-0feddeea24b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.185.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:7b:8a:0b:84:d2:12:00:87:c6:19:c1:19:a0:39:d4:f7:f0:
         57:e6:37:00:e0:cd:7f:98:35:3d:35:b8:c7:b7:d3:19:50:90:
         74:e7:05:eb:c2:7b:9e:51:cf:aa:7d:80:e2:7f:c8:b7:7c:fe:
         49:77:99:a2:71:0a:c1:44:5c:e1:42:89:58:ff:4e:31:de:54:
         08:97:61:9c:28:ae:e3:3f:77:77:f4:05:3d:ef:02:f6:a3:e8:
         af:24:32:e4:a3:72:ac:9d:24:45:31:f4:ca:06:9f:2b:a1:b4:
         a8:8e:4d:50:70:ea:62:0d:18:64:f3:e5:73:1a:1c:7a:7e:41:
         46:2e:f3:06:ad:24:24:51:14:db:f8:21:da:49:ae:28:8c:35:
         a4:41:c8:6a:02:d1:43:7f:b1:74:e6:bc:66:34:df:63:de:eb:
         ed:e1:d1:76:88:81:ea:65:15:bc:04:4b:be:6b:49:af:52:c9:
         eb:97:58:6f:84:30:88:08:81:56:e0:87:d0:d2:5b:1c:b7:0a:
         5d:c8:ce:b1:65:8d:18:06:4e:df:d6:38:04:cf:46:fb:c0:e3:
         02:1f:42:91:c7:24:4f:60:d7:41:bc:7a:45:ff:c2:f7:05:8a:
         eb:0b:28:8a:e4:4b:5b:a1:5e:8e:59:0a:2d:32:da:f5:64:f3:
         31:5a:18:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnqoSV9bFkHv/A3wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
Y2YwYmJjYzAtMTYyMy00NjQ4LWJhMWYtNDM5Nzc3MmY3OGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUkjjAnZes6jodN/TY6UXOmpSOOQDCYjYW8g
3JtgtVmtli2X4/3Gf5H+Vw6oKff4kCaYuEGcS3VsABj4jiWRhm+DCVrqPAXfwJM+
7H1VPJCJMLbFhnZ1Qad1pNUI9kiM0ZNR/KPp8rs3i0dKLzvubggMnJxS1Q/h+SdU
xLL1xsQ7NOQwc5naWX4/0jr1PU6xQ+nrVC4XgKHuaP5hovQTB/DDGwI2bHt9N0ld
oGWn21oCG/c0sYvVPh7WrdR2603EWwRZxwoVEfwnhjrcmiFA36ZnI2OKBZE4+H0Q
doV2M3e3tTBrzfKTj6A1clkfdTdYIueoEBE7FW8dDUdF6iYmEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMs3axkA1FlUCh4+EOe6PQ/+vgMCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjZlM2I0YTktZGQ4ZC0z
ZmVmLWI1MjMtMGZlZGRlZWEyNGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI7mgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJB7iguE0hIAh8YZwRmgOdT38FfmNwDgzX+YNT01uMe30xlQkHTnBevC
e55Rz6p9gOJ/yLd8/kl3maJxCsFEXOFCiVj/TjHeVAiXYZworuM/d3f0BT3vAvaj
6K8kMuSjcqydJEUx9MoGnyuhtKiOTVBw6mINGGTz5XMaHHp+QUYu8watJCRRFNv4
IdpJriiMNaRByGoC0UN/sXTmvGY032Pe6+3h0XaIgeplFbwES75rSa9SyeuXWG+E
MIgIgVbgh9DSWxy3Cl3IzrFljRgGTt/WOATPRvvA4wIfQpHHJE9g10G8ekX/wvcF
iusLKIrkS1uhXo5ZCi0y2vVk8zFaGIc=
-----END CERTIFICATE-----
Generated at Sat May 10 14:43:53 2025 by rpki-client