Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01f71e4a-cc8a-39f7-b99e-6f1d81fdc22c.roa
File:                     01f71e4a-cc8a-39f7-b99e-6f1d81fdc22c.roa (raw, json)
Hash identifier:          u6nLcgYmvJsJ2mR0WP4voTSQtrtET9ddCreqPw+fyzE=
Subject key identifier:   C4:8E:14:0A:19:F3:4D:5C:CC:6F:A9:B6:FB:19:B9:20:9C:72:2E:D8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A04BF10107C3E41045CA000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01f71e4a-cc8a-39f7-b99e-6f1d81fdc22c.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.223.80.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:04:bf:10:10:7c:3e:41:04:5c:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=a3dce6d0-94bd-40cc-a671-1ecc5b442c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:11:b6:89:7a:5b:50:53:6b:17:aa:d2:b6:43:
                    50:db:55:51:1b:51:76:00:77:45:fa:74:c2:ae:e2:
                    11:de:54:4e:df:c0:9d:aa:28:6a:9e:1f:3a:86:04:
                    55:ba:50:5a:33:60:b9:34:61:bf:fa:67:9b:7c:b5:
                    80:fb:e3:3c:8d:d1:01:82:8a:9b:24:e2:6e:30:c2:
                    35:61:50:1c:20:74:5e:d6:d9:6f:0d:cc:8c:d0:cf:
                    f3:23:b2:24:24:b9:11:3a:cd:1a:68:c2:e0:6a:b4:
                    f1:b9:f7:60:0e:df:f9:92:c7:0c:25:85:ab:d9:6d:
                    07:df:59:b4:fc:de:04:fc:8d:1a:df:56:1d:33:06:
                    41:33:36:35:f0:66:5a:56:a8:76:25:ac:49:8b:a3:
                    ff:5e:49:ba:a6:2d:8f:b4:32:3a:77:dd:c0:59:40:
                    82:7e:ce:fd:fb:36:97:82:a8:cb:d8:f0:89:d5:a9:
                    b9:fb:8c:c8:70:9e:f5:9c:2e:ea:be:55:34:73:28:
                    f1:ee:64:37:7c:71:d2:fd:cd:23:1e:40:b7:78:3d:
                    36:c9:0f:64:cf:2e:c4:89:cb:d6:b6:11:3a:53:cd:
                    74:26:c5:bc:48:52:89:a2:de:62:b0:8d:c5:da:63:
                    2f:f6:25:d5:da:75:29:18:f2:cb:5a:9f:d9:8a:67:
                    d5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8E:14:0A:19:F3:4D:5C:CC:6F:A9:B6:FB:19:B9:20:9C:72:2E:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01f71e4a-cc8a-39f7-b99e-6f1d81fdc22c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.223.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ad:32:6f:41:88:30:80:92:eb:e8:b5:fd:73:57:69:52:d3:
         e0:c5:03:2d:ed:be:41:a2:a8:53:f7:49:1f:44:6e:5a:07:18:
         49:da:da:1d:55:a0:06:75:83:82:4a:b9:41:85:e6:e7:e7:ad:
         1c:a1:09:21:59:f5:bd:e2:27:90:bf:c0:3a:37:a9:d6:1b:31:
         4f:1b:a6:ba:52:dd:d5:6a:52:2d:96:b2:c9:7e:18:f4:61:6c:
         2e:bb:dc:ac:7e:74:d1:4b:5d:90:c6:ce:e1:ec:01:96:f1:85:
         a5:d1:5b:6b:b1:dc:33:71:14:53:b5:6c:d1:82:bb:4f:ed:55:
         92:5c:4f:ae:bc:6e:44:3a:f5:a6:d4:00:08:53:d4:4d:20:ad:
         38:d0:2a:33:6b:05:74:ed:2b:cf:f2:61:31:12:d6:bf:ad:e0:
         08:c9:f8:93:78:b5:d2:bd:cc:2a:3b:f1:e6:dd:4f:02:ee:0c:
         63:56:84:9c:1f:79:b9:57:10:3d:15:ae:4d:6c:f7:5c:29:ed:
         3a:b5:8a:4c:f9:94:10:ce:65:54:8b:a8:f4:62:e6:27:e9:31:
         51:5a:87:0d:cb:92:a3:a8:74:b2:ce:50:e8:9b:4f:45:c3:c6:
         e9:48:e2:f3:fc:ff:fe:26:af:9e:ec:89:02:a6:fa:eb:08:db:
         d5:45:10:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:42:37 2025 by rpki-client