Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd04b5f0-854b-3ca4-a3c5-02af6b2fb6dd.roa
File:                     bd04b5f0-854b-3ca4-a3c5-02af6b2fb6dd.roa (raw, json)
Hash identifier:          Ky9/8s87Dyq1OrafelV3glrTDalBCu0tTJLLg1Y6sX8=
Subject key identifier:   5D:85:A5:3D:14:01:8C:A8:21:AD:35:A9:47:9C:27:E2:40:8A:E5:B9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7A19199D15F797BBFB44B40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd04b5f0-854b-3ca4-a3c5-02af6b2fb6dd.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        35.188.128.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a1:91:99:d1:5f:79:7b:bf:b4:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=620156ec-acec-4976-af04-a380525dfe51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dd:1f:71:39:eb:90:41:e0:63:9e:d5:1b:a4:
                    24:75:d0:c2:d0:1b:ac:80:fd:96:05:52:4f:65:11:
                    d2:86:2e:1d:5e:16:d0:b4:49:21:dc:4f:65:cd:a4:
                    d5:d0:85:f2:14:8f:94:f3:af:23:cb:b3:55:be:7b:
                    c2:a8:10:b7:4d:d1:e8:a9:a6:af:c2:c6:e4:e6:86:
                    a9:21:bc:b0:ea:84:e5:60:56:ef:c6:2c:e9:24:65:
                    b4:c5:48:87:1b:b0:e0:d2:02:20:e3:48:a4:11:90:
                    67:d2:cb:09:58:aa:eb:61:e2:a2:af:99:a7:6c:2c:
                    b6:8a:d4:25:3a:6a:fc:c3:d6:a3:85:47:44:ef:27:
                    3d:26:e5:30:3e:cb:80:ed:dd:d0:5d:f8:ba:d0:fd:
                    af:e7:a5:fb:d3:e6:40:92:b2:e2:72:28:41:bf:ce:
                    0d:23:da:5d:bf:23:95:48:7f:de:13:8f:a5:63:76:
                    96:30:58:4c:30:d5:59:87:fd:80:4a:c4:a8:10:df:
                    fe:1f:e6:1d:31:94:e7:7d:ac:e0:17:2b:06:91:45:
                    b4:ae:75:48:6f:b0:34:d7:5b:69:d3:d4:a5:c4:6b:
                    1c:4a:3f:ee:cc:21:e1:30:d5:e7:dd:2b:e9:37:af:
                    fc:40:37:3c:b8:a5:d2:58:d5:83:e8:e3:62:0a:32:
                    c2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:85:A5:3D:14:01:8C:A8:21:AD:35:A9:47:9C:27:E2:40:8A:E5:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd04b5f0-854b-3ca4-a3c5-02af6b2fb6dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.188.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:20:04:63:38:c6:15:03:0c:6b:45:42:6f:aa:35:b8:59:34:
         58:1c:7b:b3:dd:72:d1:0b:e8:6c:da:58:04:28:73:5f:03:47:
         d5:a0:6c:19:8d:96:c9:69:3d:ab:13:ed:b2:04:ae:02:ed:0e:
         8d:07:4b:80:29:61:dd:d3:7c:9e:44:e6:f6:a6:be:bc:78:6e:
         18:b0:c2:03:93:78:38:02:14:b2:e2:36:15:fd:ad:eb:f2:3c:
         f2:ff:d3:2a:12:1f:f7:9b:96:61:3c:f0:29:ea:10:ed:63:f9:
         75:db:4d:be:d2:a0:14:0c:b9:a0:cc:ed:19:66:e9:1e:e4:ac:
         ed:c2:00:30:7c:20:7e:be:19:a2:fc:6b:f3:55:73:7a:db:c1:
         78:9f:79:53:9b:71:b5:25:68:a0:6c:93:d6:c1:fc:47:75:3c:
         ef:8d:77:95:c3:ec:32:28:02:73:0c:91:67:a0:70:e5:42:70:
         db:d7:1c:db:71:33:e0:9f:81:6a:48:70:86:a8:0f:91:f6:0c:
         da:68:73:03:62:05:90:7a:ef:e7:8f:5f:c9:d7:11:e7:7d:5a:
         fb:9e:f0:59:34:54:6b:57:73:4a:e9:6b:1c:27:e1:38:61:40:
         d2:01:46:8f:bb:1e:72:bd:a2:7d:cd:f3:de:d1:36:df:29:d3:
         40:a1:8b:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnoZGZ0V95e7+0S0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NjIwMTU2ZWMtYWNlYy00OTc2LWFmMDQtYTM4MDUyNWRmZTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt0fcTnrkEHgY57VG6QkddDC0BusgP2WBVJP
ZRHShi4dXhbQtEkh3E9lzaTV0IXyFI+U868jy7NVvnvCqBC3TdHoqaavwsbk5oap
Ibyw6oTlYFbvxizpJGW0xUiHG7Dg0gIg40ikEZBn0ssJWKrrYeKir5mnbCy2itQl
Omr8w9ajhUdE7yc9JuUwPsuA7d3QXfi60P2v56X70+ZAkrLicihBv84NI9pdvyOV
SH/eE4+lY3aWMFhMMNVZh/2ASsSoEN/+H+YdMZTnfazgFysGkUW0rnVIb7A011tp
09SlxGscSj/uzCHhMNXn3SvpN6/8QDc8uKXSWNWD6ONiCjLCwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF2FpT0UAYyoIa01qUecJ+JAiuW5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmQwNGI1ZjAtODU0Yi0z
Y2E0LWEzYzUtMDJhZjZiMmZiNmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI7yAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACAgBGM4xhUDDGtFQm+qNbhZNFgce7PdctEL6GzaWAQoc18DR9WgbBmN
lslpPasT7bIErgLtDo0HS4ApYd3TfJ5E5vamvrx4bhiwwgOTeDgCFLLiNhX9revy
PPL/0yoSH/eblmE88CnqEO1j+XXbTb7SoBQMuaDM7Rlm6R7krO3CADB8IH6+GaL8
a/NVc3rbwXifeVObcbUlaKBsk9bB/Ed1PO+Nd5XD7DIoAnMMkWegcOVCcNvXHNtx
M+CfgWpIcIaoD5H2DNpocwNiBZB67+ePX8nXEed9Wvue8Fk0VGtXc0rpaxwn4Thh
QNIBRo+7HnK9on3N897RNt8p00Chi4U=
-----END CERTIFICATE-----
Generated at Sat May 10 14:44:47 2025 by rpki-client