Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/db7e0269-ca76-3b6a-a0c7-bdca07ac7247.roa
File:                     db7e0269-ca76-3b6a-a0c7-bdca07ac7247.roa (raw, json)
Hash identifier:          S2qthVRd+kS9JV6FfdodPVV1vDG4epjVU8XIQyd6SBQ=
Subject key identifier:   E4:CC:E8:FE:83:82:17:BC:58:FA:E8:8F:35:0E:55:48:4A:14:0E:6D
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858430A26B5C3458581EBA8458B80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/db7e0269-ca76-3b6a-a0c7-bdca07ac7247.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        208.65.152.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:26:b5:c3:45:85:81:eb:a8:45:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=52175bcd-543d-4876-84a4-781db82662f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:62:09:bd:b5:2c:fc:b9:c6:f8:65:6a:01:be:
                    37:f7:a2:90:57:55:de:91:c5:7f:fb:d7:bf:5a:36:
                    46:4d:18:ff:4f:18:7f:bf:06:ab:73:6e:b2:f9:9d:
                    0f:08:70:eb:df:b3:88:3e:fd:e4:50:7a:b5:03:69:
                    8f:1c:9f:d2:7d:00:41:ca:10:ba:4b:a1:e6:93:6d:
                    22:fd:f5:4b:37:78:d2:2b:ce:b6:d2:52:7e:93:00:
                    b1:63:89:ec:03:f0:18:f4:7f:e7:c1:b2:57:7c:18:
                    83:4a:4d:ab:98:4f:6a:04:e7:77:91:0f:a2:e6:c9:
                    9f:f8:96:9e:4c:71:d0:11:cf:82:13:48:93:27:92:
                    c2:04:89:69:49:52:66:ec:8b:47:59:d9:47:51:9d:
                    c1:74:32:d1:8c:97:9a:c3:fa:c5:82:25:83:1f:58:
                    41:32:99:09:dc:47:96:03:7d:e2:08:d7:09:09:80:
                    4b:12:0a:4a:18:bb:b8:a2:01:da:69:2a:27:3a:ac:
                    07:28:30:46:f3:a2:c2:a2:e3:23:39:bf:7e:a1:1d:
                    58:9c:05:b5:ea:12:ae:fa:53:b8:25:09:97:ec:3d:
                    32:99:27:a6:eb:5f:41:be:8f:c3:d8:4f:0d:b3:05:
                    84:d8:36:6f:5f:11:b3:da:fa:49:8d:c8:1c:3e:48:
                    99:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CC:E8:FE:83:82:17:BC:58:FA:E8:8F:35:0E:55:48:4A:14:0E:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/db7e0269-ca76-3b6a-a0c7-bdca07ac7247.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:03:b0:ba:23:19:87:cd:8c:9b:d0:f3:e6:57:56:40:71:5a:
         7b:6f:84:48:7e:cd:ce:db:cf:0a:6e:c0:8b:7e:90:3b:15:f8:
         84:fb:42:99:fa:24:5e:f4:d6:fe:83:21:23:48:84:6e:a4:29:
         d0:7b:24:82:b1:c0:65:ae:bb:ea:19:c9:b2:5c:e2:0d:3f:76:
         85:be:d4:6e:10:2f:ab:1b:14:16:67:07:f8:83:14:c7:06:10:
         64:b7:b7:29:db:d1:0d:02:c2:c9:15:7e:09:70:9c:80:25:17:
         f2:eb:34:45:cd:df:46:38:5c:6b:19:a1:26:29:31:17:32:e4:
         9a:ac:e8:31:52:bf:b7:e4:af:88:45:71:60:5e:38:e2:2b:bc:
         ad:8c:ba:62:f7:a6:8c:75:54:03:d5:7f:1f:68:66:28:b5:13:
         b9:8b:9d:31:a2:3a:09:86:72:a1:32:22:82:03:e2:46:e6:fa:
         c9:5f:52:7d:50:23:54:f7:11:f1:00:47:db:e7:bd:02:13:20:
         66:a5:c2:9e:d8:0a:c8:d9:91:a3:9f:8f:15:ba:87:66:77:0f:
         7e:fa:86:32:22:d0:e2:65:c3:a3:ed:34:3a:4e:7f:85:e7:c4:
         7e:ad:54:0f:d3:95:fc:a9:1b:8d:3a:3a:89:c9:50:55:ce:a2:
         6f:19:09:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKJrXDRYWB66hFi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NTIxNzViY2QtNTQzZC00ODc2LTg0YTQtNzgxZGI4MjY2MmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGIJvbUs/LnG+GVqAb4396KQV1XekcV/+9e/
WjZGTRj/Txh/vwarc26y+Z0PCHDr37OIPv3kUHq1A2mPHJ/SfQBByhC6S6Hmk20i
/fVLN3jSK8620lJ+kwCxY4nsA/AY9H/nwbJXfBiDSk2rmE9qBOd3kQ+i5smf+Jae
THHQEc+CE0iTJ5LCBIlpSVJm7ItHWdlHUZ3BdDLRjJeaw/rFgiWDH1hBMpkJ3EeW
A33iCNcJCYBLEgpKGLu4ogHaaSonOqwHKDBG86LCouMjOb9+oR1YnAW16hKu+lO4
JQmX7D0ymSem619Bvo/D2E8NswWE2DZvXxGz2vpJjcgcPkiZdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOTM6P6Dghe8WProjzUOVUhKFA5tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvZGI3ZTAyNjktY2E3Ni0z
YjZhLWEwYzctYmRjYTA3YWM3MjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EGYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHsDsLojGYfNjJvQ8+ZXVkBxWntvhEh+zc7bzwpuwIt+kDsV+IT7Qpn6
JF701v6DISNIhG6kKdB7JIKxwGWuu+oZybJc4g0/doW+1G4QL6sbFBZnB/iDFMcG
EGS3tynb0Q0CwskVfglwnIAlF/LrNEXN30Y4XGsZoSYpMRcy5Jqs6DFSv7fkr4hF
cWBeOOIrvK2MumL3pox1VAPVfx9oZii1E7mLnTGiOgmGcqEyIoID4kbm+slfUn1Q
I1T3EfEAR9vnvQITIGalwp7YCsjZkaOfjxW6h2Z3D376hjIi0OJlw6PtNDpOf4Xn
xH6tVA/TlfypG406OonJUFXOom8ZCRA=
-----END CERTIFICATE-----
Generated at Fri Mar 14 13:30:41 2025 by rpki-client