Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fbe91275-780c-3845-a264-657dc4486fd4.roa
File:                     fbe91275-780c-3845-a264-657dc4486fd4.roa (raw, json)
Hash identifier:          rizrLrPxWJZwa/HbNvYjNAB3nnMa8qmZXVcA1RUQ4pk=
Subject key identifier:   A6:2B:0B:93:5C:6A:E4:C4:9F:73:21:A0:98:36:3A:A2:23:E3:26:2D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309F8E654C2E456EC0066EB80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fbe91275-780c-3845-a264-657dc4486fd4.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.242.128.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f8:e6:54:c2:e4:56:ec:00:66:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=70f3dba3-a66d-4d25-ab09-7482c46fbdb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:6c:cb:47:cc:c1:4f:5f:ef:fa:7e:7c:de:
                    5d:74:fc:03:2d:5c:16:54:a3:1c:bf:9b:9c:30:ac:
                    63:b7:08:73:74:c5:3f:89:1b:af:dc:2c:0d:bc:4c:
                    0c:1f:b4:09:f9:b7:d2:1a:61:10:47:3e:e8:b5:a9:
                    8d:f9:8b:78:00:5d:4b:a2:93:3e:cd:13:7b:97:83:
                    66:87:60:f8:39:14:66:33:67:bb:5a:95:a9:9f:5e:
                    5a:b5:08:57:8f:75:cd:af:ac:a0:62:f7:31:cb:c1:
                    23:d5:e2:9c:b5:33:24:92:fc:8d:ec:02:21:77:bc:
                    88:c7:ae:36:2a:83:40:3e:9a:a0:f2:52:c1:07:81:
                    5a:96:6b:03:b1:8b:3c:cc:47:d1:f0:be:d2:30:ac:
                    de:a3:d4:73:a2:03:c5:ce:c0:e7:18:5c:d9:85:e0:
                    40:72:71:e0:14:3d:f7:a9:1a:e2:85:9e:ec:54:c6:
                    f5:26:13:14:bd:d5:78:10:d0:f6:6c:2b:a0:0a:7d:
                    2f:1c:0f:37:3a:38:77:fb:90:35:84:77:51:21:a8:
                    eb:4b:b0:8b:af:7f:33:0b:b5:6b:88:49:08:43:84:
                    bd:94:2a:6f:b1:46:3a:21:7e:95:61:6f:24:9c:3b:
                    2b:29:eb:25:52:20:b2:84:2b:6a:2e:6a:18:29:ad:
                    24:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2B:0B:93:5C:6A:E4:C4:9F:73:21:A0:98:36:3A:A2:23:E3:26:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fbe91275-780c-3845-a264-657dc4486fd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.242.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:2c:54:c6:40:7f:b3:0b:07:22:05:7d:43:78:1f:08:ab:de:
         b2:95:b1:ce:20:fc:13:94:2e:df:58:b8:01:15:da:3b:06:9d:
         77:32:da:e3:e2:20:5d:e8:7d:82:7e:ec:1d:27:d4:ff:1e:ad:
         8b:b2:bb:25:9d:92:7f:d1:14:fb:b9:05:c9:cd:aa:db:74:5d:
         6f:2e:da:98:92:e2:e9:ae:10:0e:40:d4:f1:e3:fb:9d:76:4f:
         4b:27:38:59:02:fa:26:f5:9d:d4:79:87:50:a3:26:40:08:93:
         33:28:46:18:e0:6e:62:e0:15:be:a3:95:89:40:03:86:da:e2:
         20:a4:c7:cf:97:ed:f6:02:0a:ad:a0:bd:30:2d:b3:b2:46:fa:
         6d:dd:b0:9d:9c:7c:52:99:72:f7:fd:28:07:c2:1a:fb:a3:bd:
         43:c7:6d:ab:89:a8:d6:f9:19:2a:36:fa:6e:2b:c3:84:e2:c5:
         3e:7c:e4:4c:d7:f1:47:96:64:b0:8a:39:67:4f:7e:71:f0:03:
         4a:b0:6b:f7:26:fe:74:71:43:65:b6:a9:db:60:7a:e7:43:d8:
         84:e0:61:95:36:af:a7:ea:03:92:9b:8f:0a:17:14:c6:82:f1:
         30:0f:bc:6e:62:7d:a9:77:86:d1:5b:86:c8:57:4a:5f:a2:f3:
         a6:d7:f0:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ+OZUwuRW7ABm64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NzBmM2RiYTMtYTY2ZC00ZDI1LWFiMDktNzQ4MmM0NmZiZGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLNsy0fMwU9f7/p+fN5ddPwDLVwWVKMcv5uc
MKxjtwhzdMU/iRuv3CwNvEwMH7QJ+bfSGmEQRz7otamN+Yt4AF1LopM+zRN7l4Nm
h2D4ORRmM2e7WpWpn15atQhXj3XNr6ygYvcxy8Ej1eKctTMkkvyN7AIhd7yIx642
KoNAPpqg8lLBB4FalmsDsYs8zEfR8L7SMKzeo9RzogPFzsDnGFzZheBAcnHgFD33
qRrihZ7sVMb1JhMUvdV4END2bCugCn0vHA83Ojh3+5A1hHdRIajrS7CLr38zC7Vr
iEkIQ4S9lCpvsUY6IX6VYW8knDsrKeslUiCyhCtqLmoYKa0kCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKYrC5NcauTEn3MhoJg2OqIj4yYtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmJlOTEyNzUtNzgwYy0z
ODQ1LWEyNjQtNjU3ZGM0NDg2ZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/KAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJMsVMZAf7MLByIFfUN4Hwir3rKVsc4g/BOULt9YuAEV2jsGnXcy2uPi
IF3ofYJ+7B0n1P8erYuyuyWdkn/RFPu5BcnNqtt0XW8u2piS4umuEA5A1PHj+512
T0snOFkC+ib1ndR5h1CjJkAIkzMoRhjgbmLgFb6jlYlAA4ba4iCkx8+X7fYCCq2g
vTAts7JG+m3dsJ2cfFKZcvf9KAfCGvujvUPHbauJqNb5GSo2+m4rw4TixT585EzX
8UeWZLCKOWdPfnHwA0qwa/cm/nRxQ2W2qdtgeudD2ITgYZU2r6fqA5KbjwoXFMaC
8TAPvG5ifal3htFbhshXSl+i86bX8N8=
-----END CERTIFICATE-----
Generated at Sun May 11 04:08:22 2025 by rpki-client