Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8a9cf5d8-0bfb-3a59-85b3-ef9a5760bab3.roa
File:                     8a9cf5d8-0bfb-3a59-85b3-ef9a5760bab3.roa (raw, json)
Hash identifier:          wEHGiwGm1kC1mReUHXib4hZ9CEoReTdCXtZPi1lvA2Q=
Subject key identifier:   2A:09:53:F2:04:8D:D6:A5:B9:E8:9B:64:2D:33:99:D7:0F:FE:A4:1B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583D5BF2BF11ED87A216F7C3F880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8a9cf5d8-0bfb-3a59-85b3-ef9a5760bab3.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Wed 26 Jun 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.185.96.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5b:f2:bf:11:ed:87:a2:16:f7:c3:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Jun 26 04:00:00 2024 GMT
        Subject: CN=1a64166b-91b8-44a0-827c-d9cc764d3c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:88:6d:8f:2b:38:27:f8:2d:4c:6e:5b:54:f4:
                    80:bc:37:39:74:de:f3:a1:e4:ee:a2:b3:5d:66:0c:
                    2b:40:d1:63:d8:68:4c:25:d9:cb:2f:96:bc:59:b4:
                    95:de:30:99:68:58:46:3c:1e:4a:d1:a4:f8:ef:f9:
                    a8:f4:a0:88:1f:07:7f:43:85:44:09:b5:99:1c:bf:
                    97:cb:95:01:df:d0:1b:a5:58:35:0b:fe:58:59:bf:
                    b7:01:70:b2:75:fc:27:25:6c:ba:3b:8e:b3:21:8b:
                    51:a2:b1:d6:e2:80:14:65:24:26:fd:e9:72:28:ca:
                    7d:08:fd:70:26:1c:8e:e5:06:19:d6:5c:91:bc:d8:
                    a1:da:91:fc:7a:e7:07:e0:49:7f:1f:f9:b5:ca:48:
                    3a:a5:22:95:4c:e9:8b:b9:34:e0:35:8b:c3:b8:f3:
                    f6:72:fe:7e:39:c7:0c:4c:3e:1e:a9:9a:0d:4b:9e:
                    0e:6f:05:55:79:d0:94:43:9f:92:de:da:ed:5b:46:
                    34:1c:51:3e:77:92:ed:25:22:d4:62:5e:b1:6b:f3:
                    12:5f:29:b3:bc:85:0e:39:4d:8b:01:e8:fa:b8:61:
                    c7:9f:1d:3f:2b:17:3b:e7:fc:cc:a7:fb:e0:50:9d:
                    9f:d6:15:cf:01:3a:51:1f:e5:7e:81:29:7f:00:8c:
                    4a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:09:53:F2:04:8D:D6:A5:B9:E8:9B:64:2D:33:99:D7:0F:FE:A4:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8a9cf5d8-0bfb-3a59-85b3-ef9a5760bab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.185.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:52:f1:74:2d:e8:94:f0:99:11:a1:72:7c:8f:6f:60:04:1e:
         34:17:c6:43:be:b6:53:a3:a4:e1:8a:3c:64:19:66:9e:ae:c2:
         e6:95:6d:ac:be:0e:ad:9f:2f:64:7d:c0:67:82:c9:ee:94:8f:
         51:9c:ce:36:94:c5:de:18:a1:83:5b:a0:cb:91:2d:cb:a7:80:
         05:3b:7f:62:9e:e7:a6:f7:4b:96:88:fe:96:0c:df:50:81:8e:
         cb:69:72:26:d1:e6:4f:60:f2:ef:ad:2f:d9:0d:26:cb:d7:70:
         f8:ed:3f:a2:04:b7:89:4a:dc:ee:24:1b:c2:86:cd:be:35:8b:
         2c:77:c3:e1:6c:ca:d2:25:49:17:74:10:81:70:73:9b:4f:28:
         8b:13:3b:bf:17:46:45:06:f2:1f:7b:94:c4:6a:5a:41:76:03:
         39:78:b2:ce:99:b4:79:e0:36:2b:20:71:4c:3a:ba:0e:9d:93:
         10:ee:f1:f7:c3:4e:56:a5:01:58:d8:17:cf:e9:e3:ec:3a:db:
         c9:05:c2:1d:09:e1:53:ec:f2:be:c0:37:9d:6c:7a:16:fa:22:
         27:28:46:4f:b2:64:67:3b:50:4b:13:b0:d9:a5:40:10:9e:1f:
         4d:7b:d4:92:ed:b7:c1:ed:19:15:8d:b0:ef:76:fb:ac:09:9d:
         e6:98:0f:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1b8r8R7YeiFvfD+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIyMDMyNTA0MDAwMFoXDTI0MDYyNjA0MDAwMFowLzEtMCsGA1UEAxMk
MWE2NDE2NmItOTFiOC00NGEwLTgyN2MtZDljYzc2NGQzYzAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Yhtjys4J/gtTG5bVPSAvDc5dN7zoeTuorNd
ZgwrQNFj2GhMJdnLL5a8WbSV3jCZaFhGPB5K0aT47/mo9KCIHwd/Q4VECbWZHL+X
y5UB39AbpVg1C/5YWb+3AXCydfwnJWy6O46zIYtRorHW4oAUZSQm/elyKMp9CP1w
JhyO5QYZ1lyRvNih2pH8eucH4El/H/m1ykg6pSKVTOmLuTTgNYvDuPP2cv5+OccM
TD4eqZoNS54ObwVVedCUQ5+S3trtW0Y0HFE+d5LtJSLUYl6xa/MSXymzvIUOOU2L
Aej6uGHHnx0/Kxc75/zMp/vgUJ2f1hXPATpRH+V+gSl/AIxKjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCoJU/IEjdalueibZC0zmdcP/qQbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGE5Y2Y1ZDgtMGJmYi0z
YTU5LTg1YjMtZWY5YTU3NjBiYWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI7lgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFpS8XQt6JTwmRGhcnyPb2AEHjQXxkO+tlOjpOGKPGQZZp6uwuaVbay+
Dq2fL2R9wGeCye6Uj1GczjaUxd4YoYNboMuRLcungAU7f2Ke56b3S5aI/pYM31CB
jstpcibR5k9g8u+tL9kNJsvXcPjtP6IEt4lK3O4kG8KGzb41iyx3w+FsytIlSRd0
EIFwc5tPKIsTO78XRkUG8h97lMRqWkF2Azl4ss6ZtHngNisgcUw6ug6dkxDu8ffD
TlalAVjYF8/p4+w628kFwh0J4VPs8r7AN51sehb6IicoRk+yZGc7UEsTsNmlQBCe
H0171JLtt8HtGRWNsO92+6wJneaYD7g=
-----END CERTIFICATE-----
Generated at Sat May 10 13:35:41 2025 by rpki-client