Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b179ea9d-942f-3c46-adf6-17b7c57320fa.roa
File:                     b179ea9d-942f-3c46-adf6-17b7c57320fa.roa (raw, json)
Hash identifier:          28WCccHnFRXotQWf9N3i9K2/v4zmPS2Ljo4J17QG0QM=
Subject key identifier:   66:46:07:5D:0C:23:8D:EA:5B:4F:4B:61:D7:40:3B:A1:59:5D:1F:61
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285842B0668B0B86BB756DCAC64840
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b179ea9d-942f-3c46-adf6-17b7c57320fa.roa
Signing time:             Wed 26 Jul 2023 12:00:00 +0000
ROA not before:           Wed 26 Jul 2023 12:00:00 +0000
ROA not after:            Mon 29 Jul 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.147.128.0/17 maxlen: 17
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b0:66:8b:0b:86:bb:75:6d:ca:c6:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 26 12:00:00 2023 GMT
            Not After : Jul 29 04:00:00 2024 GMT
        Subject: CN=3d6c55ea-413a-46ce-b1f0-33653e8ac599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fe:2a:75:7c:bd:ea:74:37:58:8d:46:39:3f:
                    f6:f1:5e:07:49:14:e4:88:ab:6b:b4:fd:04:9e:a0:
                    b7:f4:ab:63:91:93:2e:42:4a:1a:c0:af:1f:cd:e3:
                    10:66:d9:3a:5b:21:44:b3:b9:b5:9b:b2:47:9e:ca:
                    d1:60:94:51:99:c7:0d:58:45:57:f3:24:36:9b:04:
                    43:ac:e8:0a:61:a1:a2:2c:32:4e:c7:46:41:40:44:
                    68:ee:37:51:59:78:d8:8a:6e:3d:0c:72:49:a5:f0:
                    7c:d6:1b:1a:6a:16:65:92:f9:e4:93:f8:f6:13:39:
                    ce:9e:36:74:39:ee:89:a8:3f:a0:24:8f:75:1e:37:
                    54:6f:35:c5:1f:65:1d:f9:46:1c:d9:1c:78:11:f2:
                    75:fa:2b:20:de:d6:ca:dd:cf:aa:59:6f:41:96:ab:
                    84:7a:20:b4:32:c2:3f:a4:3f:53:a5:c2:e2:0f:7e:
                    dd:d0:9d:e6:24:ce:0f:c2:7c:43:e2:3e:60:20:47:
                    56:96:27:e5:a9:ee:3a:0a:9e:0a:75:5a:17:ba:7a:
                    14:70:69:88:75:93:7c:15:a7:6f:53:4e:ee:8c:28:
                    96:46:52:a5:42:54:7a:18:e2:68:8b:e8:86:5a:bd:
                    ba:98:36:c7:a9:5b:c4:7b:de:5b:4d:5e:39:a2:26:
                    7e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:46:07:5D:0C:23:8D:EA:5B:4F:4B:61:D7:40:3B:A1:59:5D:1F:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b179ea9d-942f-3c46-adf6-17b7c57320fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.147.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:9c:36:bb:b1:02:b9:8a:fa:80:f4:d6:15:2b:7b:e1:2c:ff:
         8c:86:9f:18:07:84:1b:58:ba:5f:14:59:9f:08:b2:53:8a:1a:
         4b:21:49:63:94:29:70:5e:e5:6a:3a:3a:8c:48:57:26:86:9a:
         39:8f:db:dc:82:76:c8:28:83:11:09:89:7c:eb:d8:68:8a:4f:
         c7:d9:9f:76:61:34:9f:cb:a7:3d:81:5b:09:da:de:d3:c3:29:
         85:30:37:a7:2b:95:97:1f:03:0c:c5:30:a9:8a:13:1a:7b:7a:
         1a:59:c1:0d:36:2f:5b:4d:93:9d:73:f8:c0:98:b3:1b:06:4f:
         da:15:3e:07:3e:f7:56:6a:03:9f:8d:88:6a:0e:f1:ec:7d:5d:
         d3:30:53:04:d3:7b:75:2c:78:58:83:10:b0:dc:7c:d3:4d:a9:
         7e:97:c0:d0:7f:cb:1d:aa:09:20:12:c7:d9:8e:64:15:6b:3d:
         d3:83:12:b3:18:b4:52:f6:5e:45:a7:05:58:25:e9:21:5c:35:
         a0:46:8b:cf:74:fe:50:f2:57:ad:a8:92:83:f8:f9:b1:91:df:
         09:db:1a:60:ad:23:7b:44:a9:cc:3c:9c:dc:01:03:11:20:4b:
         22:69:8f:6a:3c:15:6f:43:89:47:d6:d6:76:16:9c:1b:8a:09:
         9f:0c:aa:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKwZosLhrt1bcrGSEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDcyNjEyMDAwMFoXDTI0MDcyOTA0MDAwMFowLzEtMCsGA1UEAxMk
M2Q2YzU1ZWEtNDEzYS00NmNlLWIxZjAtMzM2NTNlOGFjNTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf4qdXy96nQ3WI1GOT/28V4HSRTkiKtrtP0E
nqC39KtjkZMuQkoawK8fzeMQZtk6WyFEs7m1m7JHnsrRYJRRmccNWEVX8yQ2mwRD
rOgKYaGiLDJOx0ZBQERo7jdRWXjYim49DHJJpfB81hsaahZlkvnkk/j2EznOnjZ0
Oe6JqD+gJI91HjdUbzXFH2Ud+UYc2Rx4EfJ1+isg3tbK3c+qWW9BlquEeiC0MsI/
pD9TpcLiD37d0J3mJM4PwnxD4j5gIEdWliflqe46Cp4KdVoXunoUcGmIdZN8Fadv
U07ujCiWRlKlQlR6GOJoi+iGWr26mDbHqVvEe95bTV45oiZ+iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGZGB10MI43qW09LYddAO6FZXR9hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjE3OWVhOWQtOTQyZi0z
YzQ2LWFkZjYtMTdiN2M1NzMyMGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIpOAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJmcNruxArmK+oD01hUre+Es/4yGnxgHhBtYul8UWZ8IslOKGkshSWOU
KXBe5Wo6OoxIVyaGmjmP29yCdsgogxEJiXzr2GiKT8fZn3ZhNJ/Lpz2BWwna3tPD
KYUwN6crlZcfAwzFMKmKExp7ehpZwQ02L1tNk51z+MCYsxsGT9oVPgc+91ZqA5+N
iGoO8ex9XdMwUwTTe3UseFiDELDcfNNNqX6XwNB/yx2qCSASx9mOZBVrPdODErMY
tFL2XkWnBVgl6SFcNaBGi890/lDyV62okoP4+bGR3wnbGmCtI3tEqcw8nNwBAxEg
SyJpj2o8FW9DiUfW1nYWnBuKCZ8Mql8=
-----END CERTIFICATE-----
Generated at Sat May 10 12:40:55 2025 by rpki-client