Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/709086af-6f70-3243-a6af-d532468705c6.roa
File:                     709086af-6f70-3243-a6af-d532468705c6.roa (raw, json)
Hash identifier:          2M+GtHSA2XdWWyHEjuriWtfrXAI+6Wrbz5HKsscw2Sc=
Subject key identifier:   F2:60:FF:C2:A6:CC:2E:0B:F7:52:3F:44:0B:35:D1:27:88:BC:8C:54
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7B3A8B57E5BEE05A4E20900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/709086af-6f70-3243-a6af-d532468705c6.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.155.96.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b3:a8:b5:7e:5b:ee:05:a4:e2:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=2a50619f-7c6c-4a93-a4c2-2a564d320a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b9:b5:70:40:03:8b:4a:a9:e5:bf:66:57:61:
                    4f:36:84:c9:dd:49:b2:c2:77:11:40:9c:aa:e2:b6:
                    b5:82:3b:77:1e:7b:52:a9:7a:7a:be:ae:a6:53:b9:
                    0f:f0:d4:e1:f7:d6:52:fe:6b:f9:59:77:43:07:6c:
                    70:75:ba:4c:fd:f4:ab:6a:f8:2d:f8:e6:ee:3a:98:
                    28:4a:d8:6a:d9:9b:ca:d6:c6:61:9f:be:19:5e:08:
                    f3:4a:e0:bb:cd:88:47:a8:4e:c9:b7:ab:dd:19:75:
                    3b:ef:9e:54:2e:52:bd:70:b8:6d:a9:54:85:8a:cb:
                    60:26:a7:35:81:22:88:55:1f:9f:36:c4:4b:2d:57:
                    fa:05:b7:d3:8a:fc:7c:62:91:99:89:29:cc:23:34:
                    be:98:79:d9:8f:a4:be:3d:2e:fa:f6:66:18:63:19:
                    65:07:64:f6:56:42:3d:09:19:4c:04:dc:bc:64:f8:
                    83:b5:4c:84:50:89:cb:0a:2b:1f:7a:1d:a4:5c:90:
                    a3:60:af:12:5f:f1:72:55:e6:f3:eb:6f:2b:c0:6b:
                    28:c0:7b:49:a5:0c:f2:57:ac:4b:e2:4b:25:c6:04:
                    d7:40:5d:0a:38:cb:cd:a4:61:83:c8:74:18:3d:07:
                    f9:18:5c:54:8a:9c:81:10:b4:d1:f7:25:6f:8a:a0:
                    2d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:60:FF:C2:A6:CC:2E:0B:F7:52:3F:44:0B:35:D1:27:88:BC:8C:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/709086af-6f70-3243-a6af-d532468705c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.155.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f7:9a:96:cd:a2:c1:30:cb:8a:68:44:f5:09:0a:92:53:fa:
         eb:0b:ed:27:18:f1:94:b7:77:1a:c6:14:e0:ef:28:01:c7:22:
         c6:88:3c:d2:0d:0f:57:e9:b6:3e:b4:88:77:40:7b:ee:6b:4a:
         5d:a2:d5:ac:7b:79:c6:28:91:62:be:59:61:78:08:f2:9a:4f:
         40:d0:67:ac:9f:2e:16:1f:78:97:7e:25:d5:f2:a7:71:8d:f8:
         0c:01:05:69:28:15:8b:36:74:04:1f:dc:ed:ca:2c:d2:f7:1e:
         8e:72:a8:1c:be:a0:82:d0:4f:2a:df:76:f4:c1:27:1c:30:af:
         86:bc:66:c9:bc:13:52:76:c8:d7:b1:0c:9f:45:6d:f6:19:12:
         86:22:2a:28:09:ec:0f:5a:97:3f:09:b0:a2:d5:d0:34:a4:37:
         0c:95:3a:6a:34:86:88:05:3e:1f:fc:d5:f3:18:2c:91:ba:4e:
         a2:59:3a:b3:f6:26:6c:cf:90:88:9f:c2:b6:9e:6e:46:61:63:
         a8:bd:71:a6:36:9c:18:50:ad:b3:8c:e5:c3:b7:4a:15:bf:02:
         67:70:00:f6:8b:94:9c:71:ef:e2:b7:19:66:82:4e:2a:ab:3c:
         0b:75:39:6a:23:9b:a5:ef:cd:b6:15:81:6f:20:36:15:0e:ab:
         ab:58:2e:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqns6i1flvuBaTiCQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MmE1MDYxOWYtN2M2Yy00YTkzLWE0YzItMmE1NjRkMzIwYTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbm1cEADi0qp5b9mV2FPNoTJ3UmywncRQJyq
4ra1gjt3HntSqXp6vq6mU7kP8NTh99ZS/mv5WXdDB2xwdbpM/fSravgt+ObuOpgo
Sthq2ZvK1sZhn74ZXgjzSuC7zYhHqE7Jt6vdGXU7755ULlK9cLhtqVSFistgJqc1
gSKIVR+fNsRLLVf6BbfTivx8YpGZiSnMIzS+mHnZj6S+PS769mYYYxllB2T2VkI9
CRlMBNy8ZPiDtUyEUInLCisfeh2kXJCjYK8SX/FyVebz628rwGsowHtJpQzyV6xL
4kslxgTXQF0KOMvNpGGDyHQYPQf5GFxUipyBELTR9yVviqAtxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPJg/8KmzC4L91I/RAs10SeIvIxUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzA5MDg2YWYtNmY3MC0z
MjQzLWE2YWYtZDUzMjQ2ODcwNWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaJtgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGD3mpbNosEwy4poRPUJCpJT+usL7ScY8ZS3dxrGFODvKAHHIsaIPNIN
D1fptj60iHdAe+5rSl2i1ax7ecYokWK+WWF4CPKaT0DQZ6yfLhYfeJd+JdXyp3GN
+AwBBWkoFYs2dAQf3O3KLNL3Ho5yqBy+oILQTyrfdvTBJxwwr4a8Zsm8E1J2yNex
DJ9FbfYZEoYiKigJ7A9alz8JsKLV0DSkNwyVOmo0hogFPh/81fMYLJG6TqJZOrP2
JmzPkIifwraebkZhY6i9caY2nBhQrbOM5cO3ShW/AmdwAPaLlJxx7+K3GWaCTiqr
PAt1OWojm6XvzbYVgW8gNhUOq6tYLhg=
-----END CERTIFICATE-----
Generated at Sun May 11 01:31:37 2025 by rpki-client