Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1140489f-2261-3cff-9f84-00dce8880a15.roa
File:                     1140489f-2261-3cff-9f84-00dce8880a15.roa (raw, json)
Hash identifier:          72VTswoEw1OErPknk7mTBWXO0ydcVbZdbaK9OsXFvCU=
Subject key identifier:   8C:D1:96:5A:36:D7:DA:0E:D9:AB:52:E7:E0:44:E1:43:E8:1B:B4:AE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A1AAF840D1B70B51058F180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1140489f-2261-3cff-9f84-00dce8880a15.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     19527
IP address blocks:        35.215.192.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1a:af:84:0d:1b:70:b5:10:58:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ff9b48f2-3140-4074-a3db-1940c9866154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7d:90:c2:11:fa:38:bc:ff:21:40:bd:58:ab:
                    38:1f:c9:17:c4:93:1f:41:ac:c6:8b:e6:59:5b:c2:
                    ee:05:3e:b3:e8:7e:af:21:7b:7d:4d:38:92:32:96:
                    bb:74:02:03:88:22:22:c7:31:dd:72:ce:4c:6f:7c:
                    32:00:b1:44:79:db:3d:d2:b5:f6:79:f8:63:61:9a:
                    bf:83:64:11:4c:91:35:6c:c5:53:d3:c8:56:63:3a:
                    a5:6e:94:bb:ad:a7:b3:d0:2f:0b:23:2e:05:e5:3c:
                    ae:c4:10:21:d0:1b:8d:7c:78:11:84:6a:f4:63:d1:
                    30:15:eb:c8:35:56:49:ba:ba:68:98:f0:80:3d:a9:
                    77:04:d5:7d:fd:54:7b:08:b8:74:5b:54:7b:27:f0:
                    9b:5c:a8:9a:af:79:e3:76:ff:45:99:92:73:59:5c:
                    cb:ba:a9:7b:0a:0c:d1:75:b2:81:2b:ea:77:ab:6c:
                    e9:5a:a1:8b:e5:c1:4c:fd:bb:a2:34:29:7d:19:91:
                    3c:5d:e3:cb:f4:fd:3a:21:2b:7f:73:69:4a:2d:92:
                    06:e8:ec:6f:bf:4d:f0:7a:85:0f:c6:ec:fa:3e:d1:
                    64:66:76:5b:e9:63:22:66:18:3c:f4:f1:5a:4d:54:
                    9e:05:5d:3d:80:92:9c:46:4f:de:64:51:64:ea:0a:
                    04:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D1:96:5A:36:D7:DA:0E:D9:AB:52:E7:E0:44:E1:43:E8:1B:B4:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1140489f-2261-3cff-9f84-00dce8880a15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.215.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:a9:6c:bb:43:8a:0d:31:0f:9b:02:d3:84:90:b2:69:f1:b0:
         e8:0f:bc:1a:0d:bd:05:17:09:f6:d5:cc:71:5b:5e:8f:a6:ec:
         3e:56:42:43:61:64:7b:05:a0:96:c0:e9:18:9e:e0:b9:d5:21:
         fc:90:a4:2e:f8:24:0b:54:d7:e2:e1:31:2f:10:99:18:32:f5:
         06:02:86:59:b3:3a:13:20:07:f7:e3:49:e9:ba:ab:98:ec:22:
         17:fb:8a:ae:8e:90:75:93:20:fb:2c:ed:4a:fe:e4:48:30:87:
         d4:1c:d3:ee:e1:ed:d4:7c:ea:bd:d7:53:b8:8b:97:70:7d:f8:
         f9:9d:6d:f4:9c:f7:2a:ed:86:c7:ff:b8:8e:c7:a2:4e:1c:aa:
         64:bd:9d:4f:90:69:a3:7a:81:ed:78:97:66:79:af:be:6d:c4:
         c4:a9:ba:99:13:06:bd:e4:d8:a7:d3:fa:39:0e:df:2d:8a:35:
         a6:b3:e3:d9:67:05:83:43:a4:02:9e:22:c0:50:ae:0b:0f:d4:
         3b:cd:6d:6d:69:2f:10:37:8e:40:71:67:1a:20:fc:96:9f:ee:
         6a:71:9f:ab:d1:58:59:14:18:e4:db:bc:ca:4c:5e:8d:06:29:
         eb:29:67:e2:15:dd:d3:89:8b:35:58:34:0c:5b:72:96:19:33:
         90:25:c8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:20:34 2025 by rpki-client