Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6e5e313-8678-3045-a2b2-82f2755a52db.roa
File:                     d6e5e313-8678-3045-a2b2-82f2755a52db.roa (raw, json)
Hash identifier:          2lxaFUzRtZQrf4c7B5A+PfXc+X406Izl+1adtrGRKKI=
Subject key identifier:   2A:7F:2A:6B:7A:1B:CD:7D:7B:5B:1B:6B:26:AA:76:04:0A:49:5F:1D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309F099399A5AD1F83D89F080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6e5e313-8678-3045-a2b2-82f2755a52db.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        34.181.0.0/16 maxlen: 16
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f0:99:39:9a:5a:d1:f8:3d:89:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=67257687-8eb7-4ded-93ce-7e8640bf1c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:38:88:37:20:21:23:ca:74:1e:93:94:40:5f:
                    bd:d2:51:73:bc:0d:d4:be:60:12:6d:00:98:ca:9f:
                    17:06:15:97:35:17:8c:ba:00:21:e7:c3:63:ff:a9:
                    aa:9e:dc:07:17:2a:1e:51:5a:04:31:85:1b:95:c5:
                    cb:93:29:5d:43:20:da:a6:ed:1a:e3:b0:a6:85:84:
                    64:fe:b5:a2:d9:4b:0f:a9:e0:ca:2a:25:df:8d:bf:
                    f9:5e:35:26:69:53:98:81:b7:94:7e:7b:86:f3:d1:
                    2e:a1:4d:3f:67:f6:25:a3:a5:8f:89:9d:0e:b3:b5:
                    e8:a9:46:75:44:85:6a:32:97:51:7d:8f:3e:7f:ae:
                    8d:66:10:1f:02:be:ff:51:46:50:c1:e3:b0:28:e0:
                    d9:4b:39:42:bf:d8:bb:ce:10:94:7a:ac:af:66:3f:
                    e8:d6:19:de:fa:be:7c:75:1c:a6:19:77:fe:53:49:
                    a0:76:c6:91:04:26:c6:8e:d2:ba:a7:45:be:2e:6d:
                    22:55:57:8f:cf:df:e8:bb:72:1b:9f:56:49:75:ee:
                    af:73:1d:06:ad:24:18:1c:09:ed:fc:82:e7:9e:0d:
                    fd:50:bc:64:3b:f7:ee:f5:95:9e:63:5a:bf:19:4e:
                    92:b4:c3:c9:d6:2f:8a:23:12:66:0f:13:12:3a:55:
                    f5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7F:2A:6B:7A:1B:CD:7D:7B:5B:1B:6B:26:AA:76:04:0A:49:5F:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6e5e313-8678-3045-a2b2-82f2755a52db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:5f:b8:94:1d:b2:ee:2d:9f:2d:83:82:d9:bf:19:79:7c:a0:
         a3:8d:c9:c8:4d:23:c4:4e:d8:e2:77:5c:18:10:e5:13:a5:3b:
         64:ef:0f:0f:28:87:4d:e5:5c:b7:26:dd:41:e7:cd:ff:f8:02:
         de:c8:f5:3e:79:e4:ab:64:a9:b7:9f:be:8a:ce:42:35:d8:2d:
         16:88:9c:f6:20:1d:46:96:7b:b2:92:a6:3b:5f:69:28:ad:99:
         73:51:27:c1:f5:cd:d6:25:a3:9a:2f:d2:be:3a:1b:3e:b7:7f:
         18:b6:75:cb:8a:f9:35:aa:63:a0:92:e1:a5:4e:b4:e1:95:cd:
         31:2f:a9:b2:8c:e0:fa:48:83:19:4a:1d:06:8e:34:93:be:07:
         e5:a1:22:d0:71:11:58:ee:f7:03:fa:c9:58:23:0b:ec:93:75:
         75:89:07:aa:96:95:60:42:fa:d5:75:f1:50:c1:ce:6b:85:8d:
         37:76:a5:9f:98:c6:50:03:9f:96:87:f0:58:21:25:91:f1:c0:
         80:9d:7d:1d:0b:55:6a:a9:77:95:73:78:cc:63:7d:77:ac:3d:
         67:19:ae:2c:e2:08:10:57:0b:1e:5c:71:e2:ef:94:03:ae:f3:
         ef:69:bd:91:83:6c:0c:87:38:86:4b:9d:44:79:a3:20:fc:56:
         59:4e:ba:93
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEMJ8Jk5mlrR+D2J8IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NjcyNTc2ODctOGViNy00ZGVkLTkzY2UtN2U4NjQwYmYxYzNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTiINyAhI8p0HpOUQF+90lFzvA3UvmASbQCY
yp8XBhWXNReMugAh58Nj/6mqntwHFyoeUVoEMYUblcXLkyldQyDapu0a47CmhYRk
/rWi2UsPqeDKKiXfjb/5XjUmaVOYgbeUfnuG89EuoU0/Z/Ylo6WPiZ0Os7XoqUZ1
RIVqMpdRfY8+f66NZhAfAr7/UUZQweOwKODZSzlCv9i7zhCUeqyvZj/o1hne+r58
dRymGXf+U0mgdsaRBCbGjtK6p0W+Lm0iVVePz9/ou3Ibn1ZJde6vcx0GrSQYHAnt
/ILnng39ULxkO/fu9ZWeY1q/GU6StMPJ1i+KIxJmDxMSOlX1+wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCp/Kmt6G819e1sbayaqdgQKSV8dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDZlNWUzMTMtODY3OC0z
MDQ1LWEyYjItODJmMjc1NWE1MmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIrUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkF+4lB2y7i2fLYOC2b8ZeXygo43JyE0jxE7Y4ndcGBDlE6U7ZO8PDyiH
TeVctybdQefN//gC3sj1Pnnkq2Spt5++is5CNdgtFoic9iAdRpZ7spKmO19pKK2Z
c1EnwfXN1iWjmi/SvjobPrd/GLZ1y4r5NapjoJLhpU604ZXNMS+psozg+kiDGUod
Bo40k74H5aEi0HERWO73A/rJWCML7JN1dYkHqpaVYEL61XXxUMHOa4WNN3aln5jG
UAOflofwWCElkfHAgJ19HQtVaql3lXN4zGN9d6w9ZxmuLOIIEFcLHlxx4u+UA67z
72m9kYNsDIc4hkudRHmjIPxWWU66kw==
-----END CERTIFICATE-----
Generated at Sat May 10 13:38:03 2025 by rpki-client