Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01df0920-5c62-3b46-8036-f1014de23cf1.roa
File:                     01df0920-5c62-3b46-8036-f1014de23cf1.roa (raw, json)
Hash identifier:          fJf+i563lGD7ayjPPYHodTcL5M7jjTJqsOYrQVn/Ii8=
Subject key identifier:   42:AC:9B:61:51:A6:50:D8:89:2D:F3:A8:5C:B3:D5:56:57:70:95:F1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309FC67F8DFDD1DF2DEEAA080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01df0920-5c62-3b46-8036-f1014de23cf1.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        35.211.0.0/16 maxlen: 16
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fc:67:f8:df:dd:1d:f2:de:ea:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=2023f6c4-543e-4841-a8e6-2115f46a1242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:40:5d:06:c0:db:0e:30:92:60:40:65:b0:23:
                    d9:ac:75:11:89:23:78:d1:f2:42:5b:4c:12:61:16:
                    d0:29:e1:cf:c7:4b:05:7b:4b:c9:b9:c0:d4:51:ba:
                    20:a8:0f:06:82:6c:9d:e1:7b:06:a8:f4:aa:41:cd:
                    7a:ff:98:2c:55:14:96:40:68:b4:a1:03:85:c3:e2:
                    41:33:24:99:69:89:b8:5d:1c:94:42:b8:ee:52:3b:
                    79:2e:de:b0:ca:08:fc:92:49:d3:b6:5b:cf:b7:37:
                    7f:4e:e5:cc:03:35:93:5c:ca:c7:7a:2f:5f:af:e1:
                    65:11:6f:34:53:f6:00:05:cc:f2:62:13:fe:65:8b:
                    a9:cb:ab:1f:c1:f7:a5:6e:30:b2:ab:39:97:c1:9b:
                    ae:af:6d:11:05:02:bd:bf:be:a9:f7:69:56:b1:61:
                    77:35:3e:68:51:e6:ff:1e:4e:3e:97:7e:a6:d9:af:
                    f8:2d:73:e7:cc:51:7d:ef:11:2c:48:13:b5:5e:fb:
                    39:98:94:7a:40:0c:d7:3e:99:38:a9:b4:4d:de:4a:
                    0e:22:5f:71:8b:0d:d7:44:f0:bc:0e:60:ba:25:24:
                    06:08:8f:d6:30:12:ab:07:80:3d:3c:31:b4:a7:70:
                    82:ae:dc:77:a4:1b:8f:52:23:e8:80:29:6c:66:aa:
                    97:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AC:9B:61:51:A6:50:D8:89:2D:F3:A8:5C:B3:D5:56:57:70:95:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01df0920-5c62-3b46-8036-f1014de23cf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.211.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a4:9c:e1:07:e9:7e:69:94:57:3a:25:65:76:84:b1:42:f3:
         d0:c9:a5:6f:c5:2e:a0:3d:3d:bf:1c:53:a9:b1:75:9e:00:ab:
         f3:24:cc:06:e1:ad:db:a9:f1:6b:5d:20:d6:2c:fe:19:43:ba:
         ae:eb:a6:29:ab:66:67:3a:54:cb:93:13:68:10:9c:38:90:e4:
         e3:5a:e0:ac:1e:81:30:3e:75:c4:5e:4a:9f:23:a3:51:51:b8:
         95:98:dc:dd:be:4d:08:41:13:65:94:38:2c:8c:94:fe:29:34:
         f4:ae:97:38:51:07:ee:22:51:65:60:17:d5:c3:ce:22:ef:ca:
         14:23:d0:30:d6:ad:f0:0f:3c:01:5f:91:48:7b:2a:48:51:b0:
         b4:7a:99:49:dc:32:f3:3d:1c:a1:92:08:77:37:a7:de:ea:20:
         68:73:54:3d:e5:06:ee:ca:8c:c8:7b:5b:5c:87:30:fd:5a:41:
         34:eb:02:5d:aa:9b:86:7d:1e:ba:a9:44:d8:ba:14:20:6a:fd:
         4b:2b:ed:c7:9b:d6:cb:bf:84:8c:11:f1:33:1c:81:61:47:3d:
         ef:57:94:b7:c4:c4:bf:7f:93:bb:a8:b3:0e:91:b0:60:64:e0:
         9e:0b:05:81:1f:0a:a1:14:b3:c5:af:7e:fe:c9:42:32:6b:74:
         b9:45:b3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:05:37 2025 by rpki-client