Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1e29e3cd-2d8e-3789-bdf2-cc43fe32d6ee.roa
File:                     1e29e3cd-2d8e-3789-bdf2-cc43fe32d6ee.roa (raw, json)
Hash identifier:          xeWwW9wKymW/79M6YA90fRrJwtZANjSDstSdVA+/jkk=
Subject key identifier:   5E:0F:08:6E:58:E5:A5:EC:E8:2A:67:25:E9:41:A8:B8:12:AF:4A:55
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7BACC5CD1E6BFB297137DC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1e29e3cd-2d8e-3789-bdf2-cc43fe32d6ee.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        35.195.112.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ba:cc:5c:d1:e6:bf:b2:97:13:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=fe9eb8ba-2eaa-49c3-be81-ae401d992c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:bf:9c:aa:c0:c9:65:b1:84:ae:40:e9:76:
                    22:e0:8d:6f:6c:20:1c:7b:92:80:cb:a6:d1:6d:f0:
                    42:94:e4:4f:a9:c3:cc:a8:dc:bc:9f:2c:98:e2:96:
                    0f:2c:30:2a:14:c7:d8:f2:f1:b1:8d:a1:44:7f:c7:
                    ab:87:24:45:a6:8a:15:bf:d0:ee:90:c1:45:68:08:
                    05:de:78:9a:62:da:84:91:9d:78:3d:c8:cc:c1:04:
                    5d:de:ae:25:20:3a:17:b1:80:52:ec:f4:9f:df:a8:
                    c8:9e:71:74:81:a9:0d:78:1c:a2:c5:c6:8e:8e:d2:
                    1f:dc:22:92:50:51:ce:82:ba:18:72:c8:55:34:7d:
                    17:2e:72:21:cc:48:38:df:7b:4f:50:ee:db:3b:e6:
                    bc:d1:95:d7:13:db:ca:44:56:36:17:d1:8b:e5:21:
                    e1:30:80:3e:25:c3:ca:19:db:ee:ed:af:f1:ac:aa:
                    d7:c3:44:63:01:ed:ed:6d:90:6f:f8:4d:c1:9e:eb:
                    89:7b:0e:bc:95:c0:c2:5f:21:b9:7f:80:a6:78:58:
                    25:cc:d5:e6:35:e4:0c:c4:a9:ed:5d:b2:96:4c:c6:
                    74:70:c4:99:6b:7e:c4:d5:f2:0c:df:f7:cb:7e:ad:
                    d3:1e:11:f7:d0:ac:d1:b7:fe:d3:b3:dc:95:00:40:
                    96:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0F:08:6E:58:E5:A5:EC:E8:2A:67:25:E9:41:A8:B8:12:AF:4A:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1e29e3cd-2d8e-3789-bdf2-cc43fe32d6ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.195.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ae:78:2a:7f:79:ac:58:36:22:b9:8d:06:0f:c0:8b:a9:f5:
         60:36:f8:9f:10:35:18:ff:63:82:55:41:2a:df:f9:f6:c5:31:
         06:47:6f:f5:db:79:c3:89:19:6b:4f:a3:d9:96:3a:21:a2:a1:
         23:09:98:37:cf:8f:a4:b0:f6:c6:71:53:43:20:46:a1:c8:53:
         c2:40:af:ea:2f:a1:a4:c1:1d:0e:1c:72:26:2b:b1:b4:da:fd:
         d9:03:19:a2:e7:7d:23:9a:51:a5:fa:cb:fa:e7:05:f3:74:92:
         63:6d:59:21:55:f5:20:6a:e5:1b:9e:f6:f2:80:ca:a4:44:53:
         2b:3d:31:c5:60:5d:09:59:58:e0:7f:6e:cd:5b:e6:9d:8d:ff:
         1f:70:2f:0c:07:db:7a:61:4b:d8:e2:c5:b8:c0:4c:7c:f1:68:
         a0:17:54:34:fc:c8:dd:c5:ce:49:5d:af:60:b2:32:18:d9:46:
         d6:28:cf:13:dd:4b:97:97:56:91:1b:23:1f:a2:13:99:b5:94:
         a2:97:1c:b2:ef:55:a5:ef:94:2f:c3:7c:09:d0:27:f7:36:8e:
         2f:78:fe:25:cb:da:23:d3:b1:ed:20:00:b9:60:93:2e:a7:15:
         f7:60:20:32:27:70:c8:ef:44:d2:dd:67:84:d2:52:d6:21:32:
         32:68:0a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:36:03 2025 by rpki-client