Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/7ec3d00a-0be3-3d24-8106-d3e98a078114.roa
File:                     7ec3d00a-0be3-3d24-8106-d3e98a078114.roa (raw, json)
Hash identifier:          z+8/Jg14vvMLDwif8rkDG2CQQslVc/hcKX4lIAsLNu0=
Subject key identifier:   28:42:E2:CC:87:75:C6:9F:7D:87:CC:C4:EA:AC:CF:B3:22:16:53:08
Certificate issuer:       /CN=22b400c5-de2c-4a3d-a19e-a928e8743b70
Certificate serial:       010D0C9F4328576D51CC73C042CFC171843CAAE9
Authority key identifier: 9C:D4:4A:9F:6E:93:8A:0E:E6:8D:83:25:5B:18:16:64:C3:6E:B5:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/7ec3d00a-0be3-3d24-8106-d3e98a078114.roa
Signing time:             Thu 16 Apr 2020 18:25:00 +0000
ROA not before:           Thu 16 Apr 2020 04:00:00 +0000
ROA not after:            Wed 20 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        104.36.33.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:84:3c:aa:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b400c5-de2c-4a3d-a19e-a928e8743b70
        Validity
            Not Before: Apr 16 04:00:00 2020 GMT
            Not After : Jul 20 04:00:00 2022 GMT
        Subject: CN=0a09720c-214e-4918-994c-cb89c36b6445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:2c:be:e1:2b:31:db:9c:42:e8:94:59:64:
                    3e:b4:38:6a:c1:3d:54:41:3c:b6:52:ba:5b:ef:21:
                    cf:e4:51:76:34:64:23:04:25:22:44:9e:6a:2c:11:
                    dd:5b:3b:59:ab:7e:8c:c7:ce:82:9f:15:65:2f:6f:
                    d9:b5:90:c0:1c:8a:41:55:7f:82:31:02:08:90:32:
                    30:45:4f:41:15:19:49:00:16:0c:78:34:99:72:9e:
                    2d:b9:cf:e9:8d:e9:4d:ab:f0:30:d3:17:30:12:c1:
                    34:34:e5:44:ed:fd:d8:fe:2d:ee:67:d1:25:fb:9e:
                    61:8d:86:ca:8c:98:63:31:49:0b:b3:e3:2f:5f:eb:
                    fd:e4:31:c9:5d:03:90:95:fe:91:6a:5c:42:16:1c:
                    68:5d:2a:4a:db:37:50:a1:96:73:b6:78:4a:61:f1:
                    2f:71:9a:c8:4e:16:d6:ae:67:f2:05:bf:fd:eb:6e:
                    b3:fe:06:fc:21:38:0c:33:1e:c2:86:4b:e0:5b:34:
                    a3:85:5d:20:04:2c:9d:11:a0:1d:20:af:40:87:69:
                    66:4e:04:9d:fc:8e:00:88:44:6e:45:37:06:7f:8e:
                    85:10:9f:54:55:20:b5:96:93:89:2d:20:4d:4c:92:
                    fb:a6:56:0b:58:f4:14:5b:19:d6:a9:37:66:84:fe:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:42:E2:CC:87:75:C6:9F:7D:87:CC:C4:EA:AC:CF:B3:22:16:53:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/7ec3d00a-0be3-3d24-8106-d3e98a078114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/22b400c5-de2c-4a3d-a19e-a928e8743b70.crl

            X509v3 Authority Key Identifier:
                keyid:9C:D4:4A:9F:6E:93:8A:0E:E6:8D:83:25:5B:18:16:64:C3:6E:B5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:25:5e:98:0c:02:f5:e5:6d:20:73:13:8e:a4:30:3f:63:1e:
         b1:b3:f9:c9:fc:ed:9d:96:f9:d7:f2:8c:ba:6d:59:5e:f3:63:
         90:cb:e8:04:5f:f5:d2:4e:50:31:c2:f9:e3:ca:f5:c8:e5:fe:
         73:e1:91:74:82:f5:3c:17:c0:8f:1a:37:68:b7:27:a0:cf:ad:
         e9:08:f7:9a:49:53:2f:27:a4:65:30:c7:54:0d:11:a9:a0:89:
         8d:d5:0c:1a:d4:ef:84:9b:7f:42:41:5e:d6:38:b3:ad:d6:e9:
         92:3f:da:f8:5d:14:08:cc:6c:b3:57:97:ed:8f:a3:14:c8:a1:
         fb:1a:1d:e0:55:e0:ff:eb:f5:0b:27:de:4f:b9:a9:20:23:66:
         f8:3b:30:de:52:67:4d:92:51:9e:7a:68:52:0e:50:67:bb:24:
         40:35:c9:87:61:dd:be:5a:e3:23:fd:2b:08:3f:f9:67:27:e6:
         be:c7:18:aa:42:47:79:34:e8:39:a7:e1:c7:b0:ba:fa:67:e2:
         69:50:37:5f:26:1a:39:25:2d:e5:99:33:d7:f5:4f:ba:42:94:
         7f:68:ca:ad:8d:b0:6e:89:95:69:37:8b:e7:00:b0:57:06:d1:
         af:92:e4:95:96:f1:e7:a2:62:57:1a:98:f2:fa:34:30:6a:c4:
         a9:cb:d9:f8
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcYQ8qukwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDIyYjQwMGM1LWRlMmMtNGEzZC1hMTllLWE5MjhlODc0M2I3
MDAeFw0yMDA0MTYwNDAwMDBaFw0yMjA3MjAwNDAwMDBaMC8xLTArBgNVBAMTJDBh
MDk3MjBjLTIxNGUtNDkxOC05OTRjLWNiODljMzZiNjQ0NTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALU3LL7hKzHbnELolFlkPrQ4asE9VEE8tlK6W+8h
z+RRdjRkIwQlIkSeaiwR3Vs7Wat+jMfOgp8VZS9v2bWQwByKQVV/gjECCJAyMEVP
QRUZSQAWDHg0mXKeLbnP6Y3pTavwMNMXMBLBNDTlRO392P4t7mfRJfueYY2GyoyY
YzFJC7PjL1/r/eQxyV0DkJX+kWpcQhYcaF0qSts3UKGWc7Z4SmHxL3GayE4W1q5n
8gW//etus/4G/CE4DDMewoZL4Fs0o4VdIAQsnRGgHSCvQIdpZk4EnfyOAIhEbkU3
Bn+OhRCfVFUgtZaTiS0gTUyS+6ZWC1j0FFsZ1qk3ZoT+ussCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQoQuLMh3XGn32HzMTqrM+zIhZTCDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjJiNDAw
YzUtZGUyYy00YTNkLWExOWUtYTkyOGU4NzQzYjcwLzdlYzNkMDBhLTBiZTMtM2Qy
NC04MTA2LWQzZTk4YTA3ODExNC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzIyYjQwMGM1LWRlMmMtNGEzZC1hMTll
LWE5MjhlODc0M2I3MC8yMmI0MDBjNS1kZTJjLTRhM2QtYTE5ZS1hOTI4ZTg3NDNi
NzAuY3JsMB8GA1UdIwQYMBaAFJzUSp9uk4oO5o2DJVsYFmTDbrW+MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvMjJiNDAwYzUtZGUyYy00YTNkLWExOWUtYTkyOGU4
NzQzYjcwLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGgkITBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAzCVemAwC9eVtIHMTjqQwP2MesbP5yfztnZb51/KMum1ZXvNjkMvoBF/10k5Q
McL548r1yOX+c+GRdIL1PBfAjxo3aLcnoM+t6Qj3mklTLyekZTDHVA0RqaCJjdUM
GtTvhJt/QkFe1jizrdbpkj/a+F0UCMxss1eX7Y+jFMih+xod4FXg/+v1CyfeT7mp
ICNm+Dsw3lJnTZJRnnpoUg5QZ7skQDXJh2HdvlrjI/0rCD/5ZyfmvscYqkJHeTTo
Oafhx7C6+mfiaVA3XyYaOSUt5Zkz1/VPukKUf2jKrY2wbomVaTeL5wCwVwbRr5Lk
lZbx56JiVxqY8vo0MGrEqcvZ+A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org