Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/81b23ca7-ecb7-38cc-a79d-61b4bda1f300.roa
File:                     81b23ca7-ecb7-38cc-a79d-61b4bda1f300.roa (raw, json)
Hash identifier:          Z8Z3VA6M6EpSXJs93bOnXt6QotmevqUcoeJyRBVzmMk=
Subject key identifier:   70:39:EC:F2:DD:FA:7C:C2:F7:EB:28:E8:20:FB:DE:59:D3:A2:C0:4A
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328583A6FAB4DDF55A5616B8410BDB8
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/81b23ca7-ecb7-38cc-a79d-61b4bda1f300.roa
Signing time:             Wed 30 Sep 2020 04:00:00 +0000
ROA not before:           Wed 30 Sep 2020 04:00:00 +0000
ROA not after:            Fri 06 Jan 2023 05:00:00 +0000
asID:                     10747
IP address blocks:        170.133.215.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:6f:ab:4d:df:55:a5:61:6b:84:10:bd:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Sep 30 04:00:00 2020 GMT
            Not After : Jan  6 05:00:00 2023 GMT
        Subject: CN=ecd7f74d-9c8f-4c7d-a5cd-cbddd15369d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:96:31:66:c3:ce:b1:91:13:fa:d6:19:9e:3b:
                    d3:1a:7c:78:d0:bf:1f:81:04:43:52:12:5d:db:ed:
                    1c:b8:5c:e2:0f:cf:86:7c:bb:d0:4d:3d:6e:5c:19:
                    ba:ba:fa:74:21:e1:05:64:cc:a5:c0:f4:93:b8:bd:
                    49:19:76:35:70:95:c1:6c:e0:c5:85:9d:5b:df:fc:
                    40:2c:04:3c:67:b9:e4:a3:2c:62:68:ed:34:4a:e5:
                    32:b7:9a:4b:69:03:84:99:3e:0c:e2:b1:22:a1:a2:
                    9b:ca:3b:b0:6b:1e:8a:0e:22:48:37:8b:d5:d0:11:
                    54:69:f4:6f:a3:45:83:09:10:71:dd:b0:b8:14:98:
                    44:df:56:64:01:10:4d:03:b0:bc:e9:96:ac:cd:d5:
                    2f:3a:de:0b:8a:74:15:f4:28:24:ac:8c:f6:e8:e4:
                    73:2a:37:17:1e:b4:f9:71:04:6a:d9:c1:9d:14:d5:
                    ac:55:a4:16:4d:e7:70:3d:eb:1c:d4:b3:67:39:4c:
                    b2:a3:26:b2:15:02:1d:39:6d:75:7d:75:24:5d:f0:
                    e0:87:19:66:a2:21:b2:8a:36:0a:3a:4b:39:af:c3:
                    e0:03:46:ab:89:64:6a:38:ec:86:6e:85:73:e3:f3:
                    ea:7a:e8:8f:69:fc:a4:0d:a0:15:1b:6d:3c:b7:aa:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:39:EC:F2:DD:FA:7C:C2:F7:EB:28:E8:20:FB:DE:59:D3:A2:C0:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/81b23ca7-ecb7-38cc-a79d-61b4bda1f300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.133.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:49:81:db:4a:6b:1b:fb:ad:82:ba:f0:c6:f4:6e:98:df:95:
         ff:61:3f:cf:02:b9:cb:ff:bb:7b:36:07:f1:ac:31:3c:60:3c:
         57:c2:03:42:ca:de:c5:05:f6:d5:6f:cf:3a:6c:63:ac:11:b5:
         04:ae:fe:fb:55:db:13:f8:58:7c:a9:b7:93:10:d6:c1:f2:cb:
         c5:2e:43:98:5d:29:a2:a2:13:47:2f:96:e3:6a:70:97:80:2b:
         d1:15:85:94:14:c7:dc:fe:2e:0e:f9:23:e4:24:a4:60:8f:45:
         dc:39:d3:b1:09:9a:5b:d5:65:bd:94:cf:43:f8:75:f0:42:8f:
         da:ef:5f:0a:80:a1:b6:47:0d:de:a6:47:ad:88:f0:3b:5d:b7:
         a1:e8:dc:f0:f8:32:82:1a:56:46:7a:b0:ca:b2:e7:07:3c:d3:
         54:51:62:fe:8f:ce:06:a9:34:89:bb:b2:4a:d2:6a:0c:d0:2e:
         b5:2e:ce:7b:2f:7b:83:7f:8a:b9:5b:60:53:4e:8a:62:46:40:
         66:a3:de:82:74:47:37:bf:65:4c:e4:4e:fa:cf:ed:94:7e:c6:
         87:ee:3c:f3:c5:9c:66:90:d4:01:2f:8e:16:7b:fb:c7:43:21:
         80:05:81:7c:82:3b:80:2e:d0:52:0e:60:1b:f6:7a:4b:f5:e5:
         2b:4e:53:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDpvq03fVaVha4QQvbgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5
NzdmMB4XDTIwMDkzMDA0MDAwMFoXDTIzMDEwNjA1MDAwMFowLzEtMCsGA1UEAxMk
ZWNkN2Y3NGQtOWM4Zi00YzdkLWE1Y2QtY2JkZGQxNTM2OWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJYxZsPOsZET+tYZnjvTGnx40L8fgQRDUhJd
2+0cuFziD8+GfLvQTT1uXBm6uvp0IeEFZMylwPSTuL1JGXY1cJXBbODFhZ1b3/xA
LAQ8Z7nkoyxiaO00SuUyt5pLaQOEmT4M4rEioaKbyjuwax6KDiJIN4vV0BFUafRv
o0WDCRBx3bC4FJhE31ZkARBNA7C86ZaszdUvOt4LinQV9CgkrIz26ORzKjcXHrT5
cQRq2cGdFNWsVaQWTedwPesc1LNnOUyyoyayFQIdOW11fXUkXfDghxlmoiGyijYK
Oks5r8PgA0ariWRqOOyGboVz4/PqeuiPafykDaAVG208t6q/PQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHA57PLd+nzC9+so6CD73lnTosBKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm
ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvODFiMjNjYTctZWNiNy0z
OGNjLWE3OWQtNjFiNGJkYTFmMzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj
MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5
OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk
ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqoXXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJRJgdtKaxv7rYK68Mb0bpjflf9hP88Cucv/u3s2B/GsMTxgPFfCA0LK
3sUF9tVvzzpsY6wRtQSu/vtV2xP4WHypt5MQ1sHyy8UuQ5hdKaKiE0cvluNqcJeA
K9EVhZQUx9z+Lg75I+QkpGCPRdw507EJmlvVZb2Uz0P4dfBCj9rvXwqAobZHDd6m
R62I8Dtdt6Ho3PD4MoIaVkZ6sMqy5wc801RRYv6PzgapNIm7skrSagzQLrUuznsv
e4N/irlbYFNOimJGQGaj3oJ0Rze/ZUzkTvrP7ZR+xofuPPPFnGaQ1AEvjhZ7+8dD
IYAFgXyCO4Au0FIOYBv2ekv15StOU0E=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:38:09 2025 by rpki-client