Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a94cdef-6067-3b20-af38-d926ba4ae1c4.roa
File:                     7a94cdef-6067-3b20-af38-d926ba4ae1c4.roa (raw, json)
Hash identifier:          UcpT037fG9acy6D04MTiGOVqA+ZsywI/sZHZ7hAmw/g=
Subject key identifier:   39:F4:E9:EB:3C:0A:2F:38:C3:B7:DD:52:BD:6D:4E:BE:0B:6E:4B:90
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583D79F50DD370A9BCA8259E5580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a94cdef-6067-3b20-af38-d926ba4ae1c4.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Sun 07 Jul 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        35.219.193.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:f5:0d:d3:70:a9:bc:a8:25:9e:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Jul  7 04:00:00 2024 GMT
        Subject: CN=6dcbfb98-a71e-49e1-b652-7aced849dcf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:0b:53:49:78:11:e7:0f:04:e1:44:40:f1:
                    61:6b:96:66:5f:10:79:97:2f:a6:c3:5a:56:69:ee:
                    65:72:cb:6a:65:85:13:12:39:84:76:a3:5f:64:22:
                    56:99:5f:5b:fa:c1:e9:19:85:cf:64:a5:ce:75:cc:
                    83:10:c2:79:db:59:fa:0e:f2:5a:d1:cf:9a:67:e4:
                    a7:cb:9c:0d:65:93:33:5d:4c:b1:dc:51:4a:31:81:
                    cf:79:82:12:ad:eb:7f:a9:35:65:92:fd:1a:01:f5:
                    6d:b5:51:26:a8:dd:63:41:e6:01:8c:e6:4c:28:21:
                    16:37:42:0d:18:e9:c8:ba:6c:01:67:01:58:15:37:
                    45:6a:57:0e:07:69:80:25:4c:f3:01:c4:6f:c9:f4:
                    c9:2c:42:be:0e:3e:de:7a:15:c2:8f:db:7a:a0:eb:
                    8e:e9:e4:f4:04:58:65:4b:dd:3e:ea:b4:79:8f:32:
                    bc:58:5b:6c:79:d0:63:b8:28:ee:c9:3d:02:03:d5:
                    de:e2:df:84:2e:29:2e:74:5b:8a:79:fd:72:ec:3c:
                    cd:8b:e6:0e:a0:cd:a5:18:d4:0e:97:f6:a1:e5:5c:
                    5a:19:e7:b0:46:e0:6c:c8:05:25:95:ae:a4:e5:e4:
                    66:9b:8b:e8:79:9b:3e:78:10:a4:05:a1:be:b2:94:
                    ec:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F4:E9:EB:3C:0A:2F:38:C3:B7:DD:52:BD:6D:4E:BE:0B:6E:4B:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a94cdef-6067-3b20-af38-d926ba4ae1c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.219.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:d1:e7:c2:91:b8:68:f5:f0:fa:dd:0e:76:89:c5:c0:e8:b0:
         58:de:fa:1a:b8:ad:71:16:12:c3:8f:78:b5:8f:d6:4c:ef:f0:
         4f:a0:7e:d0:33:54:d1:64:77:a3:7a:e6:ea:32:c1:7c:30:7e:
         fa:a6:44:0c:d6:de:46:b1:dd:bb:5c:d2:27:ee:57:b4:93:e4:
         f4:67:55:7b:0b:70:ff:d5:ef:03:46:78:6a:b1:a3:c7:79:7d:
         68:d1:12:6e:db:73:4d:eb:22:67:eb:c2:d4:0f:8f:06:e9:d2:
         a1:73:6b:cb:c8:58:8d:83:26:a1:33:c2:21:ae:d0:f3:76:e9:
         23:b2:fe:76:d5:e1:73:bd:6c:a7:9a:c5:95:d5:8b:cd:d0:c3:
         62:9d:4f:7c:2c:6e:fe:4c:59:d9:22:72:91:17:51:51:1b:73:
         5a:e8:5b:ff:e9:40:99:63:b7:e8:cd:b1:75:79:6a:11:54:05:
         87:11:df:28:44:04:74:e0:0f:a3:b5:38:a4:bd:f7:21:39:f4:
         5d:47:86:18:79:9d:b1:0c:f8:ed:40:6c:4d:21:07:a2:32:99:
         dd:b9:44:e4:32:d4:68:41:1a:c2:66:86:07:46:3f:6e:d3:ca:
         f3:5f:0b:16:da:f3:16:6b:39:6d:69:31:ee:b4:72:9e:31:5a:
         88:a5:34:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD159Q3TcKm8qCWeVYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIyMDQwNTA0MDAwMFoXDTI0MDcwNzA0MDAwMFowLzEtMCsGA1UEAxMk
NmRjYmZiOTgtYTcxZS00OWUxLWI2NTItN2FjZWQ4NDlkY2Y0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn0LU0l4EecPBOFEQPFha5ZmXxB5ly+mw1pW
ae5lcstqZYUTEjmEdqNfZCJWmV9b+sHpGYXPZKXOdcyDEMJ521n6DvJa0c+aZ+Sn
y5wNZZMzXUyx3FFKMYHPeYISret/qTVlkv0aAfVttVEmqN1jQeYBjOZMKCEWN0IN
GOnIumwBZwFYFTdFalcOB2mAJUzzAcRvyfTJLEK+Dj7eehXCj9t6oOuO6eT0BFhl
S90+6rR5jzK8WFtsedBjuCjuyT0CA9Xe4t+ELikudFuKef1y7DzNi+YOoM2lGNQO
l/ah5VxaGeewRuBsyAUlla6k5eRmm4voeZs+eBCkBaG+spTsNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDn06es8Ci84w7fdUr1tTr4LbkuQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2E5NGNkZWYtNjA2Ny0z
YjIwLWFmMzgtZDkyNmJhNGFlMWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI9vBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABzR58KRuGj18PrdDnaJxcDosFje+hq4rXEWEsOPeLWP1kzv8E+gftAz
VNFkd6N65uoywXwwfvqmRAzW3kax3btc0ifuV7ST5PRnVXsLcP/V7wNGeGqxo8d5
fWjREm7bc03rImfrwtQPjwbp0qFza8vIWI2DJqEzwiGu0PN26SOy/nbV4XO9bKea
xZXVi83Qw2KdT3wsbv5MWdkicpEXUVEbc1roW//pQJljt+jNsXV5ahFUBYcR3yhE
BHTgD6O1OKS99yE59F1Hhhh5nbEM+O1AbE0hB6Iymd25ROQy1GhBGsJmhgdGP27T
yvNfCxba8xZrOW1pMe60cp4xWoilNCg=
-----END CERTIFICATE-----
Generated at Sat May 10 14:40:05 2025 by rpki-client