Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00c3a4c3-e912-3d23-82fe-ec4e2374fd8d.roa
File:                     00c3a4c3-e912-3d23-82fe-ec4e2374fd8d.roa (raw, json)
Hash identifier:          RMpgjAADkafQdU7AAHsUK46YiYCFMxUSssaMQknqbqc=
Subject key identifier:   F6:E8:E5:DB:33:80:CC:39:86:73:3F:B7:12:34:CA:89:87:69:D0:06
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847FF4A661122CC4A914E838080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00c3a4c3-e912-3d23-82fe-ec4e2374fd8d.roa
Signing time:             Mon 25 Nov 2024 14:00:39 +0000
ROA not before:           Mon 25 Nov 2024 14:00:39 +0000
ROA not after:            Sun 23 Feb 2025 14:00:39 +0000
asID:                     396982
IP address blocks:        35.205.64.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:4a:66:11:22:cc:4a:91:4e:83:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 25 14:00:39 2024 GMT
            Not After : Feb 23 14:00:39 2025 GMT
        Subject: CN=e409d62b-adec-46c2-9aaa-107ad0a72ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ba:86:85:12:ea:fc:14:44:25:e4:83:13:76:
                    d6:68:64:f5:e8:e0:15:0f:9d:26:cf:d8:a0:e4:78:
                    8f:0d:14:58:16:19:78:6b:1c:65:1b:90:cf:2f:37:
                    19:85:f0:77:e8:a2:9d:72:c7:31:18:2d:c1:67:6d:
                    f2:13:c6:c1:54:c2:ac:e8:66:21:b0:f7:2f:da:2b:
                    33:5d:b8:28:3a:ad:b0:73:7a:44:c4:03:91:a6:89:
                    00:a4:dd:ee:d9:fb:77:96:50:97:14:51:00:82:df:
                    47:a4:8d:18:fd:4b:d8:7c:41:3a:d1:9e:83:9a:14:
                    eb:04:00:26:1a:70:db:99:96:1a:61:08:15:47:a2:
                    83:90:7e:8b:73:5a:23:3f:66:d5:cd:eb:16:49:11:
                    3e:0a:06:8a:9c:4f:1e:30:6d:0c:58:3e:e7:3a:38:
                    5e:67:5d:c5:eb:41:35:6c:36:5d:e3:e9:3d:7c:c8:
                    42:e3:6c:5a:41:6b:e0:f6:ea:30:60:3b:0e:79:45:
                    68:45:cc:02:21:8a:3e:3d:0d:cc:d5:af:d1:48:69:
                    11:32:b3:be:d6:c0:23:a9:83:64:e8:c0:86:10:5c:
                    ce:9c:b7:87:cb:4d:3f:b6:7f:b8:56:36:55:95:08:
                    29:a1:dd:d9:df:21:b8:67:dd:99:e8:ed:60:1c:54:
                    6e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E8:E5:DB:33:80:CC:39:86:73:3F:B7:12:34:CA:89:87:69:D0:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00c3a4c3-e912-3d23-82fe-ec4e2374fd8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.205.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:3d:1a:1b:47:d5:38:b3:f9:ff:d6:36:16:8e:51:dd:2c:e5:
         31:7e:cf:ca:af:69:77:7c:7b:b2:07:74:a5:8b:d5:e9:13:54:
         dd:9a:7b:7a:59:6d:62:11:10:35:e2:81:23:fd:7a:d2:99:14:
         29:bc:c7:96:ef:86:8c:77:19:5e:c9:18:03:22:50:cc:85:fe:
         e0:f6:03:bb:3a:fa:08:17:fd:b5:6f:80:a9:5f:a2:99:95:8c:
         04:46:dd:f2:79:0b:41:b0:40:63:88:87:76:8e:71:7c:70:bb:
         15:49:c6:da:04:f6:bc:0b:29:fa:ec:fe:f5:29:6c:bc:c6:84:
         82:c9:6c:b9:13:77:ef:fe:38:93:77:d3:52:f0:e0:30:ee:e8:
         5a:77:fb:4b:22:b9:d5:2b:08:31:51:df:8c:b4:54:fa:14:15:
         e3:78:6f:67:4b:4c:29:99:bc:a2:72:e4:04:c7:20:07:ec:76:
         44:31:69:4e:81:b3:16:b6:b5:3a:5b:12:87:3d:12:2b:e2:e3:
         02:8b:fe:af:a4:4b:e1:d1:67:c0:31:bd:79:88:f8:c6:7a:c0:
         e7:f3:d3:5f:a1:43:cf:80:68:18:b8:91:e0:59:f2:69:51:e1:
         41:74:91:34:c5:92:b0:49:59:79:34:f1:c0:e4:96:a3:cd:67:
         0e:74:da:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----