Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/d8b0a68c-9d72-3842-91b3-a9294cca4c6b.roa
File:                     d8b0a68c-9d72-3842-91b3-a9294cca4c6b.roa (raw, json)
Hash identifier:          EiWmfKxyjrXvIsyNKJPQYRVufLnENF9BOgXDPnxhK+4=
Subject key identifier:   79:2F:D0:BE:69:9C:A3:05:28:6D:6F:FD:E6:00:8B:0D:6A:7A:0E:D2
Certificate issuer:       /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732B421723
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/d8b0a68c-9d72-3842-91b3-a9294cca4c6b.roa
Signing time:             Tue 07 Jul 2020 21:50:18 +0000
ROA not before:           Fri 26 Jul 2019 04:00:00 +0000
ROA not after:            Mon 10 Oct 2022 04:00:00 +0000
asID:                     394688
IP address blocks:        162.221.8.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2b:42:17:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
        Validity
            Not Before: Jul 26 04:00:00 2019 GMT
            Not After : Oct 10 04:00:00 2022 GMT
        Subject: CN=84331804-7aff-4d0e-b8f0-74b1ee9b811d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c4:eb:b2:b8:f9:19:f1:ef:6d:d0:e1:9e:d6:
                    05:47:3d:8e:f3:8a:7d:a1:f2:65:d6:62:c3:89:fd:
                    59:17:5e:58:2e:cb:a0:39:be:6b:69:85:7e:c2:5f:
                    e4:3b:f7:8d:30:16:d7:97:a7:90:20:10:ad:bb:5a:
                    96:b1:2f:a6:a9:e1:99:34:0c:dc:6c:45:c7:35:ed:
                    49:08:f8:07:7d:18:70:0e:4f:0c:9b:f4:73:e2:08:
                    76:ab:23:60:01:40:95:0b:88:71:a2:48:30:07:33:
                    14:96:48:d3:ee:41:58:60:1a:da:49:96:0a:62:04:
                    38:a1:b2:94:e1:90:4b:6f:0c:b5:d7:5f:fa:86:a9:
                    84:af:c4:aa:63:55:e9:4a:0e:1e:24:3c:31:8e:ca:
                    85:25:ee:6d:05:b7:29:6a:5c:cf:04:8e:51:c8:0a:
                    4e:d4:cf:e5:19:88:80:8a:1b:33:c4:7d:7a:05:1f:
                    2c:de:d9:ab:9a:41:2d:00:83:5e:02:70:cc:aa:2e:
                    c8:ff:78:3f:0c:ed:7f:16:68:66:10:d5:1c:84:fa:
                    61:f0:fb:64:be:63:bf:c3:e1:a9:4d:fa:be:29:ca:
                    b3:63:d5:88:8a:cf:19:23:af:d3:a4:5e:d4:c9:2b:
                    62:c1:ae:45:b6:3f:25:a5:de:9e:78:04:d3:b8:a3:
                    fc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2F:D0:BE:69:9C:A3:05:28:6D:6F:FD:E6:00:8B:0D:6A:7A:0E:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/d8b0a68c-9d72-3842-91b3-a9294cca4c6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:f6:3c:3e:1a:5e:5d:e0:21:12:e4:1d:5f:8b:5f:28:f6:5c:
         2e:9e:a3:cd:86:97:c5:a6:99:08:6f:54:26:ca:32:4a:f4:7c:
         07:aa:8a:fe:a7:17:44:95:aa:da:8e:5c:1e:81:1e:a4:0c:b8:
         e3:a3:6b:52:88:0c:94:f4:43:d1:5f:01:70:56:71:ad:c9:33:
         7d:60:02:9a:b0:14:e7:3e:44:21:62:5a:b6:5a:c9:37:62:76:
         ac:45:3c:a7:36:f1:a6:ed:0c:07:55:a1:ef:6f:db:d7:f5:7a:
         16:6c:eb:12:89:6c:ff:f0:fa:12:04:76:68:75:2f:73:f9:ea:
         ad:47:fe:31:01:1d:41:b6:f8:7d:60:d0:2a:89:62:0a:d4:2b:
         d2:a5:e1:14:a1:e6:68:55:13:dc:d2:f6:81:70:7a:25:d5:69:
         11:c2:e7:22:4a:24:ac:fa:72:71:90:bf:ae:4d:2f:2e:37:f3:
         5f:be:88:e0:ce:a4:39:21:26:d0:46:3a:ac:20:24:11:b1:c6:
         16:ec:d8:aa:3b:d8:16:d5:1d:90:08:5a:7a:57:cd:ec:2b:88:
         0e:a5:d3:79:51:f1:4f:f0:4c:e3:e5:3c:85:65:da:c7:33:8e:
         8e:dd:04:2a:5b:a4:0b:8f:c4:85:66:b7:d2:55:47:30:aa:9e:
         14:88:e4:b6
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcytCFyMwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYwZTJi
NDAeFw0xOTA3MjYwNDAwMDBaFw0yMjEwMTAwNDAwMDBaMC8xLTArBgNVBAMTJDg0
MzMxODA0LTdhZmYtNGQwZS1iOGYwLTc0YjFlZTliODExZDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMnE67K4+Rnx723Q4Z7WBUc9jvOKfaHyZdZiw4n9
WRdeWC7LoDm+a2mFfsJf5Dv3jTAW15enkCAQrbtalrEvpqnhmTQM3GxFxzXtSQj4
B30YcA5PDJv0c+IIdqsjYAFAlQuIcaJIMAczFJZI0+5BWGAa2kmWCmIEOKGylOGQ
S28Mtddf+oaphK/EqmNV6UoOHiQ8MY7KhSXubQW3KWpczwSOUcgKTtTP5RmIgIob
M8R9egUfLN7Zq5pBLQCDXgJwzKouyP94PwztfxZoZhDVHIT6YfD7ZL5jv8PhqU36
vinKs2PViIrPGSOv06Re1MkrYsGuRbY/JaXenngE07ij/HECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBR5L9C+aZyjBShtb/3mAIsNanoO0jCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0
ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBlMmI0L2Q4YjBhNjhjLTlkNzItMzg0
Mi05MWIzLWE5Mjk0Y2NhNGM2Yi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMw
LWRlNGRmMDYwZTJiNC8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUy
YjQuY3JsMB8GA1UdIwQYMBaAFHu1rEWy5Q4Ku+4GvONIIxAbJwsMMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYw
NjBlMmI0LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKLdCDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEABfY8PhpeXeAhEuQdX4tfKPZcLp6jzYaXxaaZCG9UJsoySvR8B6qK/qcXRJWq
2o5cHoEepAy446NrUogMlPRD0V8BcFZxrckzfWACmrAU5z5EIWJatlrJN2J2rEU8
pzbxpu0MB1Wh72/b1/V6FmzrEols//D6EgR2aHUvc/nqrUf+MQEdQbb4fWDQKoli
CtQr0qXhFKHmaFUT3NL2gXB6JdVpEcLnIkokrPpycZC/rk0vLjfzX76I4M6kOSEm
0EY6rCAkEbHGFuzYqjvYFtUdkAhaelfN7CuIDqXTeVHxT/BM4+U8hWXaxzOOjt0E
KlukC4/EhWa30lVHMKqeFIjktg==
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:45:50 2025 by rpki-client