Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/7e3b9878-26cf-34e1-b4ef-b06887bd7949.roa
File:                     7e3b9878-26cf-34e1-b4ef-b06887bd7949.roa (raw, json)
Hash identifier:          vDZsXN2xsqmMLqbalPxfb+DHOTUqV/ro2XcYF93HGOk=
Subject key identifier:   17:5B:1E:06:F9:21:4E:85:3E:D6:3F:EC:78:D1:B2:B2:3C:55:5F:E3
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328576D51CC73C042CFC170F52EE235
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/7e3b9878-26cf-34e1-b4ef-b06887bd7949.roa
Signing time:             Thu 19 Mar 2020 23:44:15 +0000
ROA not before:           Mon 02 Dec 2019 05:00:00 +0000
ROA not after:            Wed 22 Jun 2022 04:00:00 +0000
asID:                     16815
IP address blocks:        173.199.29.0/24 maxlen: 24
                          173.199.38.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:f5:2e:e2:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Dec  2 05:00:00 2019 GMT
            Not After : Jun 22 04:00:00 2022 GMT
        Subject: CN=a03300f2-b418-411a-b64c-4c0f7c58287c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:b0:99:9f:00:c2:4f:a9:35:df:86:b2:6f:
                    fe:0a:12:ef:b6:b4:c5:48:91:9b:13:8e:9d:1a:3a:
                    89:93:5c:bb:ed:83:1d:9c:15:0f:c8:5c:2d:2b:8d:
                    cc:60:b6:14:13:15:6a:a3:25:08:72:75:bd:12:8c:
                    5f:a1:86:0e:a2:46:6b:f4:26:e3:77:49:71:3b:f6:
                    68:3f:5a:3f:2b:72:21:76:a0:03:5f:1d:54:c0:85:
                    ef:5e:36:76:37:fd:90:61:e1:fa:ac:8a:ab:e9:fe:
                    42:fa:96:99:a7:ff:4b:b2:be:81:0b:44:77:87:61:
                    bd:d6:df:aa:f2:cc:fb:82:a9:c1:c7:12:da:4b:5a:
                    fd:29:36:12:0d:50:3e:92:fd:cd:2b:3b:b5:db:ac:
                    0f:48:6c:d9:4c:16:54:a9:f1:ce:ff:84:5a:1b:90:
                    b2:c6:fb:28:56:cd:ed:e1:d2:a6:f2:6d:bd:09:a6:
                    13:56:3a:3f:29:4a:86:69:c4:c5:8e:4d:d8:1d:01:
                    c1:7e:93:47:ab:4b:d8:54:93:ee:a3:e5:b4:74:a8:
                    dc:e9:d2:0d:c3:81:a6:96:06:d2:70:17:34:9b:3c:
                    7b:09:ab:b8:5a:52:68:c2:da:17:43:18:bb:31:eb:
                    fb:d4:c8:e5:fc:fe:c8:a7:4b:31:83:a9:44:23:54:
                    f2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5B:1E:06:F9:21:4E:85:3E:D6:3F:EC:78:D1:B2:B2:3C:55:5F:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/7e3b9878-26cf-34e1-b4ef-b06887bd7949.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.29.0/24
                  173.199.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:3e:33:e6:da:b8:bc:85:65:41:66:bd:a3:86:ef:ab:13:a4:
         80:a5:65:d2:31:e6:4d:ac:3f:27:70:b7:06:c3:47:30:c7:9d:
         95:fb:fd:3f:e6:ed:ea:a4:3b:e0:7a:b9:26:07:21:bf:11:6d:
         db:51:e1:81:b0:e9:1f:e9:cd:b5:62:a9:41:f1:43:68:5e:65:
         60:4a:0d:2a:15:00:52:ac:de:3d:f2:b6:e3:d7:36:9e:41:0a:
         df:f1:ff:d6:85:2d:2b:4e:6b:cd:9a:39:64:e5:1a:6d:9d:6d:
         c3:5c:b4:15:6a:63:a3:fb:6b:21:e3:6d:06:60:1e:af:68:04:
         67:86:f2:23:65:33:66:9e:60:bc:13:19:88:94:b1:b2:1c:d7:
         96:ca:d1:0f:6a:22:db:14:47:38:e8:7d:78:83:79:7a:ac:ef:
         6e:45:a4:d8:9e:b8:fd:39:8e:79:d9:3d:6b:63:5a:be:2e:9d:
         a8:f2:90:82:ca:42:df:fc:ae:aa:e3:97:ed:ad:64:d3:e7:85:
         ba:4e:4b:a1:d0:1f:cc:66:e7:77:08:80:41:2d:25:0b:11:77:
         f2:c1:94:5f:1b:1b:de:73:6a:69:fe:1e:3b:ac:29:84:0e:ec:
         b9:46:2c:45:68:e6:64:4a:3f:03:fb:55:2f:b8:ea:c9:61:f4:
         27:41:8b:30
-----BEGIN CERTIFICATE-----
MIIGRTCCBS+gAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcPUu4jUwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGE1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4Mjli
ZjAeFw0xOTEyMDIwNTAwMDBaFw0yMjA2MjIwNDAwMDBaMC8xLTArBgNVBAMTJGEw
MzMwMGYyLWI0MTgtNDExYS1iNjRjLTRjMGY3YzU4Mjg3YzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMDNsJmfAMJPqTXfhrJv/goS77a0xUiRmxOOnRo6
iZNcu+2DHZwVD8hcLSuNzGC2FBMVaqMlCHJ1vRKMX6GGDqJGa/Qm43dJcTv2aD9a
PytyIXagA18dVMCF7142djf9kGHh+qyKq+n+QvqWmaf/S7K+gQtEd4dhvdbfqvLM
+4KpwccS2kta/Sk2Eg1QPpL9zSs7tdusD0hs2UwWVKnxzv+EWhuQssb7KFbN7eHS
pvJtvQmmE1Y6PylKhmnExY5N2B0BwX6TR6tL2FST7qPltHSo3OnSDcOBppYG0nAX
NJs8ewmruFpSaMLaF0MYuzHr+9TI5fz+yKdLMYOpRCNU8scCAwEAAaOCA1swggNX
MB0GA1UdDgQWBBQXWx4G+SFOhT7WP+x40bKyPFVf4zCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgw
ZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgyOWJmLzdlM2I5ODc4LTI2Y2YtMzRl
MS1iNGVmLWIwNjg4N2JkNzk0OS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2E1MzY4MGU4LTA4OTItNDI5YS04MTcw
LTQzNjFjMjE4MjliZi9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5
YmYuY3JsMB8GA1UdIwQYMBaAFCJoPBF2sxwMc88oFTaPJdDCdK7NMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMy
MTgyOWJmLmNlcjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAK3HHQMEAK3H
JjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3
DQEBCwOCAQEApz4z5tq4vIVlQWa9o4bvqxOkgKVl0jHmTaw/J3C3BsNHMMedlfv9
P+bt6qQ74Hq5JgchvxFt21HhgbDpH+nNtWKpQfFDaF5lYEoNKhUAUqzePfK249c2
nkEK3/H/1oUtK05rzZo5ZOUabZ1tw1y0FWpjo/trIeNtBmAer2gEZ4byI2UzZp5g
vBMZiJSxshzXlsrRD2oi2xRHOOh9eIN5eqzvbkWk2J64/TmOedk9a2Navi6dqPKQ
gspC3/yuquOX7a1k0+eFuk5LodAfzGbndwiAQS0lCxF38sGUXxsb3nNqaf4eO6wp
hA7suUYsRWjmZEo/A/tVL7jqyWH0J0GLMA==
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:12:14 2025 by rpki-client