Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ccc9e44-dc1a-3a4b-8fb2-0785c05065bf.roa
File:                     3ccc9e44-dc1a-3a4b-8fb2-0785c05065bf.roa (raw, json)
Hash identifier:          iVsZ39vIbmAO7xoNwMDywdW5p06M6xuNdEOnm6W69uI=
Subject key identifier:   F8:13:70:48:10:70:61:48:9B:A7:D5:68:D0:26:8E:FC:3E:8A:0A:D6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A1E3115B1D2F64689F40AC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ccc9e44-dc1a-3a4b-8fb2-0785c05065bf.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.243.0.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1e:31:15:b1:d2:f6:46:89:f4:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=6f52abe5-e470-4dee-863d-847457200cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cf:df:28:1a:0e:bf:99:55:6f:c7:32:8f:53:
                    46:fb:80:e4:77:69:c8:3b:cb:02:44:aa:5f:48:55:
                    05:82:cf:29:7d:05:cc:3a:9c:80:82:84:b2:77:84:
                    a7:bd:78:2f:f3:d8:6b:e4:50:d1:53:26:51:23:8e:
                    b2:34:56:e4:b6:f8:de:3b:55:49:21:ee:df:9c:74:
                    0e:f7:a7:ac:7a:db:5d:ad:dd:c7:6c:6f:30:88:3f:
                    97:15:14:4e:27:2d:59:a6:24:75:30:b8:9c:b8:84:
                    33:e5:5b:27:6e:fa:49:e2:16:db:5e:29:15:df:d9:
                    b1:f5:94:db:d8:a7:68:21:27:f0:b0:90:3a:3d:f0:
                    bf:ab:7a:04:f2:0c:31:ff:98:53:2c:e4:ad:77:f6:
                    1a:ef:8c:29:8a:6d:b3:c2:87:a9:a8:a1:df:f3:0e:
                    3b:b3:54:82:14:98:05:18:b2:22:32:e0:b1:c8:09:
                    01:1f:5f:6f:49:38:d0:2e:3f:2d:06:fd:33:bf:5b:
                    a1:e3:e4:ab:35:d0:31:89:df:35:10:96:7b:e0:4a:
                    c6:ae:e9:56:4c:f1:b1:36:8f:a5:77:2e:12:d5:91:
                    a0:8a:c8:b8:bb:dc:6c:23:5b:a0:0f:24:74:52:8d:
                    d8:11:c8:de:35:1b:75:39:a9:e0:65:65:6d:ec:2f:
                    94:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:13:70:48:10:70:61:48:9B:A7:D5:68:D0:26:8E:FC:3E:8A:0A:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ccc9e44-dc1a-3a4b-8fb2-0785c05065bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.243.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:2a:ce:66:38:9b:a8:7c:ca:4e:ab:50:95:e6:80:5c:18:97:
         ce:26:27:34:c0:a1:2c:c1:6f:48:6a:1d:13:c1:d4:e8:d5:2a:
         1a:a9:2c:69:43:b2:14:8f:fa:9f:51:c5:3a:8d:fc:8c:5f:be:
         7c:5f:66:8b:22:eb:75:cd:49:28:ed:8e:9c:b3:d0:e7:01:fb:
         01:aa:bb:5f:4d:a2:7d:17:e6:f8:81:1a:c8:bc:50:40:45:4c:
         a1:5e:03:fb:90:f0:2e:96:01:0d:b6:34:58:68:b5:2c:7f:3c:
         f7:77:26:ab:15:bf:fb:31:75:96:8a:17:29:35:08:a1:f0:42:
         ab:79:b0:95:88:a6:ac:a1:e4:b7:39:fd:cd:6a:db:f0:7b:84:
         76:2f:4f:49:84:7c:d5:3c:eb:97:1b:01:1d:0a:7d:59:46:5d:
         e8:5d:a6:48:09:90:ff:26:db:fa:47:d2:95:75:bf:f5:1c:a8:
         3c:28:c3:5f:2a:6a:7d:02:50:51:65:f2:ff:21:46:b8:a0:0e:
         c2:55:1a:7d:56:5e:2a:47:13:80:50:0f:5d:9a:67:44:72:e9:
         a0:db:c7:01:b3:8f:4b:f4:d0:d3:67:72:c2:f4:ce:33:d5:09:
         bb:ee:03:7f:65:77:05:c5:fa:5b:c3:87:e9:2d:91:df:6f:59:
         ea:c7:4d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----