Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/47e93334-10e1-39a9-be70-ae2e8c115e9f.roa
File:                     47e93334-10e1-39a9-be70-ae2e8c115e9f.roa (raw, json)
Hash identifier:          6J4D7BZNiFbeqc83RCytvi62GTSWhcN6MhUSyw2yA+Y=
Subject key identifier:   A9:F9:3C:BA:7E:F7:8C:FE:E4:7B:62:1E:C4:DC:63:B9:00:B6:D8:5F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309EFCE94AE8954EC2A2EC380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/47e93334-10e1-39a9-be70-ae2e8c115e9f.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.194.176.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ef:ce:94:ae:89:54:ec:2a:2e:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=797eaa9a-ed99-4c0b-af40-07cb047c52af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:07:71:79:a2:48:f1:5f:3c:e5:1d:d2:87:48:
                    c8:cf:12:18:74:9d:3d:45:a5:e1:2c:46:69:cb:66:
                    9b:3d:ac:ad:f9:b3:07:4d:02:8e:0b:fd:8c:b1:4a:
                    62:a1:77:06:24:7d:a3:ed:a9:e1:2a:d1:b4:43:75:
                    1b:55:09:d4:ab:fe:34:77:b7:af:a0:ee:99:a8:a9:
                    36:65:53:5e:39:46:3f:19:30:ec:3c:47:af:55:c2:
                    73:f6:b2:b0:b9:b0:dc:ff:f5:07:92:ae:11:06:44:
                    80:b1:5d:55:0f:1c:23:2d:be:62:fd:5c:40:22:ed:
                    02:ed:93:60:cd:2d:6e:9e:c3:dc:e8:08:37:c9:a6:
                    72:5a:e7:92:ca:27:06:e6:4a:49:65:1e:d8:5c:ad:
                    a7:b5:31:45:ca:fa:aa:be:e9:12:41:3e:a6:be:8e:
                    d0:af:fb:af:bd:df:93:2f:ee:6a:ea:ae:e8:14:cb:
                    0c:9f:8b:9a:21:4a:46:47:20:4b:ff:05:ef:b8:56:
                    93:d1:a0:7f:87:6e:f6:75:cc:16:48:55:e9:c4:ea:
                    ed:fc:42:d5:bf:6b:46:28:18:03:d7:65:3c:de:ba:
                    f1:87:5c:c1:78:94:0e:88:ce:d8:2a:d5:9d:f1:85:
                    09:9f:c9:45:dc:d8:38:b7:57:6e:2e:b3:6d:53:4d:
                    6d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F9:3C:BA:7E:F7:8C:FE:E4:7B:62:1E:C4:DC:63:B9:00:B6:D8:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/47e93334-10e1-39a9-be70-ae2e8c115e9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.194.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:22:25:6b:93:8d:c4:b7:c0:83:53:9c:ef:51:87:7e:d5:32:
         d6:a5:99:75:81:8a:98:72:16:02:de:1c:9d:dd:d6:eb:59:1b:
         70:b4:0d:67:fb:09:c7:65:fd:2f:e0:1e:b9:bd:a7:11:71:a8:
         f7:e6:30:87:32:4c:37:11:8d:b6:6d:bf:61:f0:ce:9e:25:23:
         f6:a8:7f:63:86:d4:8c:7d:51:65:b2:2d:1b:87:91:56:7e:1d:
         82:b8:4b:4d:30:ec:39:85:6b:2c:93:3e:3d:89:08:25:98:50:
         24:1d:d6:e0:46:9b:59:7d:54:20:f1:7b:79:7f:ce:0f:9d:11:
         cc:66:b2:eb:e3:cc:27:35:78:64:5f:ff:6e:5c:d3:6e:04:90:
         ac:6b:09:f5:61:0b:ca:22:9d:f9:70:4a:fb:14:75:26:da:cb:
         f3:00:4d:db:f3:ed:8e:28:6d:83:7e:7c:fa:9f:4c:f2:23:3d:
         f7:65:5a:37:f9:14:39:41:d6:bd:5b:7a:56:de:14:cf:bc:03:
         9b:fe:76:3b:cb:da:9b:91:9c:7c:c0:4b:bc:e9:3c:95:1a:45:
         ca:3b:31:76:19:d2:c3:22:9c:b8:a3:7c:06:e4:08:d1:2b:1d:
         6e:c8:28:90:4f:ae:95:c4:be:43:39:0e:4d:ed:c3:02:f8:e2:
         ff:42:a5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:49:00 2025 by rpki-client