Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e274a74-6791-3785-910a-4ecde780071b.roa
File:                     0e274a74-6791-3785-910a-4ecde780071b.roa (raw, json)
Hash identifier:          vKH4avqyIIFz5genVeCN4pXwnmke0kl2c7fVup3Dtvg=
Subject key identifier:   A4:90:92:08:B3:72:EA:40:07:21:1B:70:8F:40:CB:84:77:2D:98:F3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A13C586A8B0FD23E6ACCEC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e274a74-6791-3785-910a-4ecde780071b.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.197.64.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:13:c5:86:a8:b0:fd:23:e6:ac:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=f42b1536-4f1d-443c-b2ab-940ccae7ad98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e2:f4:e8:1d:92:45:c7:54:d3:27:fb:9f:d3:
                    46:f8:4a:6b:59:1f:a8:80:93:97:0a:df:0c:51:22:
                    bc:b3:30:bd:1d:66:ee:4a:76:73:4f:ce:b1:c6:40:
                    cc:a1:22:c4:9d:1d:fd:62:3b:5c:cf:d6:41:7e:49:
                    53:9c:67:2e:ac:12:2a:9a:65:d0:44:6f:65:f4:d6:
                    e8:db:3b:27:d0:4a:5f:e3:b0:48:c0:e8:9d:e9:69:
                    fa:10:f5:5f:b6:c0:5e:35:46:03:f9:f9:be:07:ba:
                    02:ce:f8:7c:d5:a2:4e:9f:a4:15:bf:1c:2e:f0:05:
                    0a:31:c9:e7:e1:66:0d:31:f3:f3:68:df:64:3a:d2:
                    39:69:22:05:3a:2f:d3:c7:28:72:f8:ad:14:6f:75:
                    d5:7c:c1:9b:3c:5d:42:d3:1b:8a:37:e5:f7:9b:1d:
                    27:67:b5:3b:31:43:09:07:22:c9:ec:f3:a8:bb:5c:
                    ac:94:e0:eb:18:3e:d4:52:59:ed:00:6a:5e:17:20:
                    da:10:b0:bb:3c:e9:78:cb:9d:db:b8:2c:bc:a5:64:
                    d0:e4:b6:ab:75:04:59:2e:81:c0:64:84:2f:97:83:
                    4d:a3:85:33:74:58:ef:48:b7:1d:ad:e8:65:60:28:
                    d0:f0:b8:0f:91:a3:20:a5:d5:3f:a9:68:30:21:6c:
                    46:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:90:92:08:B3:72:EA:40:07:21:1B:70:8F:40:CB:84:77:2D:98:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e274a74-6791-3785-910a-4ecde780071b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.197.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f0:84:65:6b:52:6c:71:0b:8c:78:95:41:fb:c6:93:07:7f:
         ff:d9:fd:9e:6b:d3:7b:63:f8:cf:d5:05:f2:62:32:94:e7:2b:
         ce:73:76:e6:b1:55:e9:f6:d7:0e:ec:79:c7:a5:79:3d:69:0a:
         df:d5:32:0c:95:15:91:ea:9a:05:f1:a0:b4:df:4e:3b:34:a3:
         31:55:09:c8:b1:08:dd:a4:3e:81:58:2b:c3:64:19:98:d7:be:
         d3:e1:c0:03:71:9f:df:ca:b4:d0:a8:b7:da:ad:84:9b:7d:2c:
         62:7b:55:b3:4f:31:71:87:39:3b:0d:53:5f:36:74:87:bf:07:
         b7:89:75:42:88:1d:ae:31:c3:53:32:76:1e:e1:e1:4d:14:9a:
         ed:52:8e:db:b6:a6:42:df:53:de:bb:76:f9:66:f5:15:91:08:
         e5:83:02:15:de:a9:dc:d6:bd:f4:36:46:7f:57:e5:03:13:92:
         0c:20:b1:1d:f9:5f:44:c8:97:6e:2c:f3:df:05:41:b7:e6:9b:
         16:7e:24:55:c2:75:7b:63:49:ab:36:55:7d:b7:fb:de:e7:c9:
         65:8c:1f:2d:b7:e2:ab:c1:0b:28:a1:7b:21:cb:c7:8f:25:34:
         41:6b:43:96:c3:3b:ba:98:4d:4f:76:d3:96:58:f3:5a:af:72:
         2c:3f:25:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----