Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ebc3666f-9ecc-3fdc-9e2d-c94cec31dee5.roa
File:                     ebc3666f-9ecc-3fdc-9e2d-c94cec31dee5.roa (raw, json)
Hash identifier:          kYQuv6XqjxK+kJ7M47XSsIIr9Y4SzE6emXVrcfOnNG8=
Subject key identifier:   E3:FC:E0:25:20:B3:36:8F:45:97:46:DF:86:20:58:41:D6:88:59:A0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309FDE70AF6D9A72111874580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ebc3666f-9ecc-3fdc-9e2d-c94cec31dee5.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.230.212.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fd:e7:0a:f6:d9:a7:21:11:87:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=e5c71ea1-4071-43d7-b1a2-dddcc2a200ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:4f:cc:62:2b:b5:4e:dc:76:fb:da:be:fc:
                    ed:b1:4d:64:e7:96:02:3b:41:55:1d:b1:a5:75:ee:
                    3a:a9:c2:1f:10:2e:73:0a:66:08:8e:1c:db:11:a3:
                    15:da:83:d3:f3:15:04:e6:70:14:3c:cd:aa:4a:72:
                    e3:15:e3:b8:d1:cd:19:3b:8c:24:8d:fd:71:29:9a:
                    37:03:52:4d:a5:0d:fd:00:dc:9b:33:0d:d0:42:88:
                    3a:8c:10:9a:20:87:e8:18:c2:47:70:f3:58:3b:b7:
                    cf:01:33:25:32:0d:b8:8f:d7:5a:9a:53:4a:f1:17:
                    a7:4a:4c:9c:f3:5e:f9:19:57:fc:d5:96:79:e4:86:
                    dc:98:41:31:55:7b:37:73:68:cb:2d:a7:e4:f6:d2:
                    89:6c:ec:e9:c3:bd:d3:1c:30:69:0f:e3:1e:f6:42:
                    69:c5:a9:14:59:63:de:1a:f5:ec:88:79:69:66:15:
                    8d:8d:53:04:a0:62:e2:68:f3:14:af:d9:fa:14:4f:
                    82:0f:62:a8:20:e0:7f:2c:6d:17:3e:2d:12:62:66:
                    18:36:38:41:a7:9b:cd:5d:dd:dc:bf:e9:8b:ce:73:
                    1e:4a:82:94:d7:07:44:14:4e:13:ce:ff:eb:fd:5b:
                    20:fa:9f:25:0b:9b:b6:72:8e:d7:b9:ae:68:2d:af:
                    d1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FC:E0:25:20:B3:36:8F:45:97:46:DF:86:20:58:41:D6:88:59:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ebc3666f-9ecc-3fdc-9e2d-c94cec31dee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.230.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ff:66:27:cf:99:8c:ed:b3:f1:49:87:34:f7:1c:29:a8:82:
         fe:25:d4:65:79:d2:04:4d:0f:34:ea:fc:ce:67:06:ff:9d:44:
         7f:85:99:83:7f:f5:98:1a:32:c1:37:3b:30:9b:22:bf:21:67:
         9d:d7:c6:20:c8:32:70:61:50:d4:1e:0d:b9:cd:64:d1:52:7a:
         d7:c9:46:94:c3:4f:55:62:0e:05:9d:52:72:ab:98:aa:1e:fe:
         96:07:98:f0:73:9c:e4:9a:82:3e:1e:2a:99:87:fc:c3:d3:a7:
         56:4e:68:0a:f4:f1:86:2e:f7:58:02:05:91:a3:5f:41:f3:b3:
         20:e7:2e:27:5a:64:fc:64:e3:2c:ea:77:f7:b5:d7:83:49:21:
         92:af:e9:7b:f6:b3:06:e9:09:51:e1:db:f7:6a:9d:4e:9a:60:
         b9:de:32:c9:11:96:cb:8f:46:28:d7:93:5e:62:13:8d:46:9f:
         2b:21:3b:f3:10:85:90:f1:41:88:8f:f4:83:9d:c0:e1:62:a6:
         4d:37:ef:b5:62:28:3e:44:d5:15:95:8c:74:1d:0a:0c:01:3e:
         e5:15:84:21:9d:d2:83:79:4f:e7:23:bc:ee:1b:a1:bc:01:76:
         18:9b:ef:de:85:25:db:2d:59:74:78:00:28:cf:94:03:aa:5a:
         ff:c1:ab:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ/ecK9tmnIRGHRYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZTVjNzFlYTEtNDA3MS00M2Q3LWIxYTItZGRkY2MyYTIwMGVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbdPzGIrtU7cdvvavvztsU1k55YCO0FVHbGl
de46qcIfEC5zCmYIjhzbEaMV2oPT8xUE5nAUPM2qSnLjFeO40c0ZO4wkjf1xKZo3
A1JNpQ39ANybMw3QQog6jBCaIIfoGMJHcPNYO7fPATMlMg24j9damlNK8RenSkyc
8175GVf81ZZ55IbcmEExVXs3c2jLLafk9tKJbOzpw73THDBpD+Me9kJpxakUWWPe
GvXsiHlpZhWNjVMEoGLiaPMUr9n6FE+CD2KoIOB/LG0XPi0SYmYYNjhBp5vNXd3c
v+mLznMeSoKU1wdEFE4Tzv/r/Vsg+p8lC5u2co7Xua5oLa/RPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOP84CUgszaPRZdG34YgWEHWiFmgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWJjMzY2NmYtOWVjYy0z
ZmRjLTllMmQtYzk0Y2VjMzFkZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCI+bUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIP/ZifPmYzts/FJhzT3HCmogv4l1GV50gRNDzTq/M5nBv+dRH+FmYN/
9ZgaMsE3OzCbIr8hZ53XxiDIMnBhUNQeDbnNZNFSetfJRpTDT1ViDgWdUnKrmKoe
/pYHmPBznOSagj4eKpmH/MPTp1ZOaAr08YYu91gCBZGjX0HzsyDnLidaZPxk4yzq
d/e114NJIZKv6Xv2swbpCVHh2/dqnU6aYLneMskRlsuPRijXk15iE41GnyshO/MQ
hZDxQYiP9IOdwOFipk0377ViKD5E1RWVjHQdCgwBPuUVhCGd0oN5T+cjvO4bobwB
dhib796FJdstWXR4ACjPlAOqWv/Bq4E=
-----END CERTIFICATE-----
Generated at Sat May 10 11:29:10 2025 by rpki-client