Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/591de9af-53b5-3fbc-853d-615b4635ad65.roa
File:                     591de9af-53b5-3fbc-853d-615b4635ad65.roa (raw, json)
Hash identifier:          MoE0pJyN4TRQJfpgaKWvCWomkkItfwiVk6vSw8AeR38=
Subject key identifier:   F6:C8:A3:EE:AC:5B:31:95:E3:BC:8F:AC:B4:3C:FC:D7:FF:E1:F3:A2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A1D6337321587B196812300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/591de9af-53b5-3fbc-853d-615b4635ad65.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.193.128.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1d:63:37:32:15:87:b1:96:81:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=699a9f6b-8930-4fc4-bc25-764ec5967883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:42:83:51:4c:58:a2:86:38:ab:86:34:7d:00:
                    c7:e7:9f:9b:32:a4:05:01:18:fc:63:2c:34:c5:da:
                    0a:7f:45:08:1b:c3:e0:93:a9:8c:ff:d3:60:9d:09:
                    69:68:4c:d8:16:9c:e2:d0:97:e4:01:44:0b:2a:fe:
                    84:bd:9c:bd:1b:63:cc:85:23:a2:09:c6:21:64:72:
                    fd:b3:24:c8:55:83:64:e5:eb:5b:b9:f6:d0:f7:2a:
                    81:3f:1e:93:36:d7:f9:96:a1:2b:b8:52:a7:a8:83:
                    ce:06:4b:85:3a:0c:19:3e:b4:4f:ff:1c:0d:4c:c4:
                    93:de:56:e7:39:d8:97:c6:60:b8:6f:19:63:7b:cb:
                    2c:e4:5b:90:a1:ad:89:b4:98:e2:ee:00:44:4e:2d:
                    dd:5a:ec:15:0b:69:ec:eb:02:4d:1b:af:b0:32:05:
                    aa:95:8e:8e:e7:14:0a:6d:6f:67:2e:51:70:60:4e:
                    7b:90:30:3c:40:9c:b8:38:68:88:fd:8b:a9:74:44:
                    ae:8e:a8:63:a7:12:e2:f9:67:b7:a4:74:4a:91:a7:
                    a6:69:25:11:47:e3:e5:6a:15:59:49:5f:58:bc:fb:
                    20:7a:1d:19:53:4c:e4:a2:d2:08:df:8f:a5:8a:a0:
                    60:1b:05:fc:ce:57:34:ec:fd:31:17:3e:4e:4b:a0:
                    00:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C8:A3:EE:AC:5B:31:95:E3:BC:8F:AC:B4:3C:FC:D7:FF:E1:F3:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/591de9af-53b5-3fbc-853d-615b4635ad65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.193.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:33:f0:6a:88:3d:22:38:ad:2f:8d:8c:58:e1:93:fb:6a:a0:
         09:c9:c5:ba:ea:ed:84:d1:1e:04:68:a5:4f:85:fc:cc:06:8a:
         cd:43:26:6e:3a:a6:fb:00:63:69:1c:68:9b:8c:18:6c:1c:d7:
         c4:bb:b6:e3:8f:19:c1:e1:21:86:b2:e2:e2:32:2b:9f:a8:25:
         95:63:04:7f:bd:3f:3e:ff:93:81:96:ee:8d:26:c5:f4:29:de:
         7a:ca:04:6f:46:49:54:74:3d:0d:74:17:5f:7a:a1:6b:88:2d:
         a3:2f:69:7f:38:d0:33:1d:fa:eb:96:32:fb:77:74:42:7c:c0:
         aa:85:a5:40:f3:20:42:48:e2:74:33:b1:81:f0:7b:a1:53:30:
         cc:b3:fd:b7:26:ec:05:5e:2b:f7:d1:13:93:e8:5e:6e:fb:77:
         59:40:77:50:f9:fb:fa:71:a8:4c:83:2d:71:0f:de:ed:73:83:
         01:0b:76:db:f4:84:a9:5d:44:f4:fe:95:a5:70:4f:e8:b0:25:
         cd:99:62:c9:05:94:89:04:7c:67:85:d3:d7:26:58:ab:86:6c:
         ae:6d:d5:5d:62:a3:4a:fa:04:60:10:c9:30:cf:c5:62:9f:71:
         5c:d1:08:8a:19:fe:a8:24:e0:5c:27:1f:9b:da:5b:f0:ff:e0:
         0d:b4:fe:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:55:02 2025 by rpki-client