Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b53711f3-47d4-3e24-b2ac-a42194781652.roa
File:                     b53711f3-47d4-3e24-b2ac-a42194781652.roa (raw, json)
Hash identifier:          zghDaBhzXRp1W9RPCJ0skOV3TZW2+3MMf7+a+/z479I=
Subject key identifier:   E2:2E:BB:17:1C:48:7E:E6:DE:D3:5A:77:4E:87:F3:6D:F3:F7:6C:57
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7C03E2851FD8EC3FDBBBA00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b53711f3-47d4-3e24-b2ac-a42194781652.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.94.160.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c0:3e:28:51:fd:8e:c3:fd:bb:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=4265b188-868e-4f85-a13b-43ec4c0e0bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9e:f2:9f:bb:31:08:54:02:ce:21:e4:9d:27:
                    63:21:82:73:d5:88:94:0c:4b:48:0a:bd:b1:9e:6f:
                    f3:7c:93:c2:1d:0a:86:d9:65:bc:3a:dc:86:37:26:
                    a1:a7:7e:9b:6d:e7:15:72:90:ca:41:7a:2b:7b:c5:
                    5c:e2:c2:94:98:13:9b:5f:1e:2f:43:53:40:b6:85:
                    5a:71:1b:73:82:e9:3e:55:e1:12:6f:1d:f2:9f:e9:
                    90:96:25:3f:25:59:e3:44:72:ec:86:fa:17:59:fa:
                    fd:f6:74:c7:05:f6:c6:b0:77:b1:94:f0:50:3c:6d:
                    3f:9b:e0:93:dc:1f:6a:4b:42:85:72:2e:12:52:94:
                    47:cd:65:eb:aa:83:a5:2f:d8:10:9e:3d:9f:18:70:
                    68:15:bb:5e:56:2b:b5:57:40:83:ef:e1:bb:e0:3d:
                    6a:7b:48:1a:80:b9:fa:63:5b:7d:86:d7:0f:35:68:
                    3f:1b:ff:08:40:13:af:d0:76:0c:4c:31:fb:22:ca:
                    0e:2a:af:62:cc:61:d5:09:68:20:32:f3:de:9e:7c:
                    ed:2a:63:7a:58:3f:7d:43:df:18:fb:27:f4:aa:45:
                    81:66:97:b6:39:93:60:91:4d:71:d9:2f:91:dc:78:
                    d2:cc:7c:7d:1a:a4:6f:24:58:1b:fe:7b:65:2b:ce:
                    fc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2E:BB:17:1C:48:7E:E6:DE:D3:5A:77:4E:87:F3:6D:F3:F7:6C:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b53711f3-47d4-3e24-b2ac-a42194781652.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.94.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:68:e1:34:36:48:13:ef:bd:54:de:bb:31:0f:25:18:db:ee:
         30:55:ca:f2:f9:01:7e:15:3a:04:37:2d:1f:16:5d:d8:b6:49:
         8f:37:69:bb:1c:83:37:26:58:d0:68:59:93:16:1a:fe:17:8a:
         c5:74:9b:2d:09:72:52:b9:a5:45:37:27:dd:36:e8:5d:3a:d4:
         bf:7a:6e:92:37:b0:95:02:68:ed:a3:12:40:22:d0:8a:82:5d:
         8c:01:62:e9:94:83:97:8d:a1:31:36:3f:a1:71:0c:db:20:b7:
         43:1f:31:a7:f0:29:e0:b8:80:2b:42:03:cd:d5:8d:a6:b9:ce:
         0f:e0:f2:d2:61:86:c8:e5:fe:ad:d3:ed:31:66:ef:8f:2d:b6:
         63:e0:0f:b2:1f:67:10:e3:08:5a:65:25:8b:ba:b4:f3:a9:a0:
         33:a3:a9:8f:85:48:54:9f:e2:f6:ac:aa:f9:1a:bd:26:8b:82:
         5b:83:e6:16:f7:9c:a1:4d:a8:1d:b9:90:d0:57:88:a5:58:d6:
         c3:13:db:db:9c:05:2f:fd:c5:f0:ad:fe:48:05:da:88:8b:24:
         b5:58:8d:47:a5:1e:e9:98:98:be:39:10:d8:b1:86:94:20:0d:
         97:b8:05:b2:07:54:8b:b0:37:60:1c:f1:f7:f1:a3:e9:73:8b:
         33:15:51:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnwD4oUf2Ow/27ugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NDI2NWIxODgtODY4ZS00Zjg1LWExM2ItNDNlYzRjMGUwYmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ7yn7sxCFQCziHknSdjIYJz1YiUDEtICr2x
nm/zfJPCHQqG2WW8OtyGNyahp36bbecVcpDKQXore8Vc4sKUmBObXx4vQ1NAtoVa
cRtzguk+VeESbx3yn+mQliU/JVnjRHLshvoXWfr99nTHBfbGsHexlPBQPG0/m+CT
3B9qS0KFci4SUpRHzWXrqoOlL9gQnj2fGHBoFbteViu1V0CD7+G74D1qe0gagLn6
Y1t9htcPNWg/G/8IQBOv0HYMTDH7IsoOKq9izGHVCWggMvPennztKmN6WD99Q98Y
+yf0qkWBZpe2OZNgkU1x2S+R3HjSzHx9GqRvJFgb/ntlK8787wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOIuuxccSH7m3tNad06H823z92xXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjUzNzExZjMtNDdkNC0z
ZTI0LWIyYWMtYTQyMTk0NzgxNjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl6gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZo4TQ2SBPvvVTeuzEPJRjb7jBVyvL5AX4VOgQ3LR8WXdi2SY83absc
gzcmWNBoWZMWGv4XisV0my0JclK5pUU3J9026F061L96bpI3sJUCaO2jEkAi0IqC
XYwBYumUg5eNoTE2P6FxDNsgt0MfMafwKeC4gCtCA83Vjaa5zg/g8tJhhsjl/q3T
7TFm748ttmPgD7IfZxDjCFplJYu6tPOpoDOjqY+FSFSf4vasqvkavSaLgluD5hb3
nKFNqB25kNBXiKVY1sMT29ucBS/9xfCt/kgF2oiLJLVYjUelHumYmL45ENixhpQg
DZe4BbIHVIuwN2Ac8ffxo+lzizMVUaM=
-----END CERTIFICATE-----
Generated at Sat May 10 12:47:28 2025 by rpki-client