Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7eb4e945-077a-3464-89a0-e48f3cee80f7.roa
File:                     7eb4e945-077a-3464-89a0-e48f3cee80f7.roa (raw, json)
Hash identifier:          BO333/1M2f/N0VsPcrktjBabZX229FJ1u8WImr3v62o=
Subject key identifier:   FF:E5:9C:09:C5:0A:28:48:97:43:AF:8C:92:FC:03:0F:A0:0A:B3:BE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A15262D7AE50846982A6080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7eb4e945-077a-3464-89a0-e48f3cee80f7.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        34.98.150.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:15:26:2d:7a:e5:08:46:98:2a:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=12b94e8b-a288-4107-8121-8533cb8fccff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:22:c0:f1:de:86:60:ce:0f:96:d0:da:55:a8:
                    0e:dc:47:23:dc:98:ec:75:44:3c:e4:47:c8:db:3a:
                    e3:d6:1e:08:91:4d:84:f6:8d:fc:52:56:a0:f7:5b:
                    ac:38:73:ea:4a:b0:21:b2:e1:5f:6c:fc:a6:13:bd:
                    67:da:86:e5:69:5a:6a:6d:f4:fe:c8:44:f7:c3:90:
                    37:dc:a6:ca:80:74:29:67:e9:4e:3b:23:e5:ca:67:
                    ae:fe:81:0e:22:c6:4f:03:44:dd:41:7d:b5:03:71:
                    01:f8:28:ba:5c:48:94:a3:6f:87:42:83:a6:77:3a:
                    fd:7a:73:28:36:58:1c:1c:6e:dc:1e:0a:a8:3e:60:
                    e0:55:02:70:e8:32:58:b8:2b:af:4a:21:d1:86:df:
                    c7:fa:79:62:7a:11:0f:9a:67:61:63:5e:2b:08:d7:
                    2a:e0:82:c3:3d:d4:4c:3f:25:18:c2:ed:ee:d5:66:
                    39:3c:9a:75:75:a8:5b:20:4c:3f:5e:55:a4:0d:9c:
                    67:9c:23:93:de:8c:de:f6:69:60:b5:a8:62:3c:25:
                    4e:42:d6:23:ee:e7:a3:bf:29:0d:a7:ee:70:11:7c:
                    02:4d:3c:69:53:84:48:28:95:6c:df:0e:de:ef:88:
                    e7:e0:d5:a3:ba:32:f2:95:b1:78:97:e0:b7:65:65:
                    9c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E5:9C:09:C5:0A:28:48:97:43:AF:8C:92:FC:03:0F:A0:0A:B3:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7eb4e945-077a-3464-89a0-e48f3cee80f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.98.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ed:b2:da:e5:f0:be:1b:95:1a:ae:fc:e8:a9:4f:72:0b:79:
         80:8f:af:fe:31:05:80:ca:8b:45:1b:ed:4a:f6:94:4f:a1:6a:
         98:60:bd:3b:74:4e:78:64:cc:28:da:ce:6d:ae:d9:b6:2a:54:
         ca:7c:7e:a1:41:63:1c:9f:d1:69:65:cb:1d:6e:d2:18:45:b5:
         98:59:12:94:e2:5a:81:f2:bd:84:4a:03:30:c1:b7:75:49:7d:
         09:10:c7:7f:5e:a2:d7:4e:c1:32:9c:4f:87:c5:0e:6c:4d:39:
         4a:26:d7:ad:de:46:27:18:19:25:9b:ae:58:2a:ff:a8:53:77:
         36:c7:72:89:81:f2:4c:06:1e:d4:04:eb:68:a9:1b:d5:39:fc:
         67:50:88:da:f7:a1:ed:48:ac:be:5e:ba:56:7d:23:62:b7:1f:
         87:3c:af:a7:c3:c1:46:c3:47:8a:f9:42:24:cc:52:52:65:e1:
         0c:e9:5e:db:f3:4a:90:9d:39:10:c1:6e:64:ba:fc:ad:66:59:
         27:bc:1c:89:56:d3:45:4f:21:57:23:31:06:4d:4b:1e:57:58:
         14:f2:c5:00:e8:f9:10:60:fb:f7:2e:31:b2:16:e6:68:ef:29:
         67:81:40:4a:a3:8d:10:12:d8:3f:fc:0d:0d:e0:f1:88:33:28:
         11:06:1a:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKFSYteuUIRpgqYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MTJiOTRlOGItYTI4OC00MTA3LTgxMjEtODUzM2NiOGZjY2ZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSLA8d6GYM4PltDaVagO3Ecj3JjsdUQ85EfI
2zrj1h4IkU2E9o38Ulag91usOHPqSrAhsuFfbPymE71n2oblaVpqbfT+yET3w5A3
3KbKgHQpZ+lOOyPlymeu/oEOIsZPA0TdQX21A3EB+Ci6XEiUo2+HQoOmdzr9enMo
NlgcHG7cHgqoPmDgVQJw6DJYuCuvSiHRht/H+nliehEPmmdhY14rCNcq4ILDPdRM
PyUYwu3u1WY5PJp1dahbIEw/XlWkDZxnnCOT3oze9mlgtahiPCVOQtYj7uejvykN
p+5wEXwCTTxpU4RIKJVs3w7e74jn4NWjujLylbF4l+C3ZWWc5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP/lnAnFCihIl0OvjJL8Aw+gCrO+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2ViNGU5NDUtMDc3YS0z
NDY0LTg5YTAtZTQ4ZjNjZWU4MGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBImKWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABHtstrl8L4blRqu/OipT3ILeYCPr/4xBYDKi0Ub7Ur2lE+haphgvTt0
TnhkzCjazm2u2bYqVMp8fqFBYxyf0Wllyx1u0hhFtZhZEpTiWoHyvYRKAzDBt3VJ
fQkQx39eotdOwTKcT4fFDmxNOUom163eRicYGSWbrlgq/6hTdzbHcomB8kwGHtQE
62ipG9U5/GdQiNr3oe1IrL5eulZ9I2K3H4c8r6fDwUbDR4r5QiTMUlJl4QzpXtvz
SpCdORDBbmS6/K1mWSe8HIlW00VPIVcjMQZNSx5XWBTyxQDo+RBg+/cuMbIW5mjv
KWeBQEqjjRAS2D/8DQ3g8YgzKBEGGlU=
-----END CERTIFICATE-----
Generated at Sat May 10 12:35:51 2025 by rpki-client