Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60086029-0c1d-373f-b7dc-4156223da37b.roa
File:                     60086029-0c1d-373f-b7dc-4156223da37b.roa (raw, json)
Hash identifier:          ZFUokol2ZKrAZO0ozrxr5HxrewZ3CfEA3Grevk0lQQM=
Subject key identifier:   CC:7A:BF:E2:38:4A:71:2E:BC:9B:F8:05:0B:82:73:BD:DB:DD:27:8A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309F50ED639CE39B7942645A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60086029-0c1d-373f-b7dc-4156223da37b.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.241.112.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f5:0e:d6:39:ce:39:b7:94:26:45:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=187710f2-8b34-46d8-8f30-10c793133945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:86:6e:13:f2:e3:26:35:b4:9e:3c:a6:cb:83:
                    6c:30:d9:1e:1d:2b:97:4f:8b:f3:7d:be:66:a4:04:
                    e9:a6:ab:f6:47:fa:cf:8d:27:70:71:ab:e0:fc:5d:
                    2f:37:e9:3c:46:34:16:52:d1:fc:49:8b:3d:47:0e:
                    e9:a1:95:e8:55:f8:8b:97:c3:75:5e:16:7a:0c:ec:
                    b6:62:a2:bf:4c:a1:96:4b:e6:a6:f9:a2:69:e6:1e:
                    73:d8:00:b4:7e:42:12:02:e2:8f:c9:9b:c2:02:af:
                    33:d9:23:31:df:18:cf:8a:65:8c:e5:00:7c:d9:1d:
                    fd:b9:96:6e:fb:8f:a7:a5:71:69:20:79:ec:d7:50:
                    cd:37:b6:4c:ea:5b:cb:e0:ab:de:a4:65:1a:ee:08:
                    94:78:fe:01:7f:84:a3:11:cd:e2:66:d7:b5:04:66:
                    44:3f:3d:63:3e:84:95:72:20:fc:b5:b6:9d:eb:8e:
                    8b:45:95:e3:90:83:3b:84:b2:e0:78:76:d8:3c:35:
                    dc:a4:b7:f4:56:e3:61:a6:92:f0:aa:7d:74:87:e4:
                    80:95:47:76:7d:cb:98:a4:d5:84:2c:4a:c7:d5:e5:
                    ee:4c:d9:64:f3:0c:10:69:6a:30:1f:d9:13:2f:ce:
                    9b:fd:19:df:d2:23:5f:08:a4:57:4e:74:46:1d:24:
                    37:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7A:BF:E2:38:4A:71:2E:BC:9B:F8:05:0B:82:73:BD:DB:DD:27:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60086029-0c1d-373f-b7dc-4156223da37b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.241.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:56:02:62:c6:fc:98:85:18:d2:87:b7:a7:c9:90:df:89:db:
         c8:da:0b:0b:59:58:ca:76:b6:f5:d4:16:9b:9e:d7:42:db:40:
         02:dc:a0:33:19:1b:3f:90:ed:66:db:e3:76:41:7b:ce:6a:b6:
         5b:b8:50:22:30:dc:8e:22:f2:67:40:eb:a2:77:42:ff:a8:58:
         62:c8:08:4a:ce:6c:33:a6:4e:04:95:32:32:55:16:48:1f:87:
         3d:ab:06:09:c5:f9:08:35:16:1e:35:d8:a2:6d:63:e1:12:10:
         94:60:2f:e7:36:b9:3f:43:5e:a7:6c:c3:dc:5c:41:c6:a1:f8:
         ff:d2:25:2b:35:74:9a:cf:55:01:fc:49:dd:b6:18:8e:29:c2:
         57:ea:16:89:ca:05:1e:9e:44:2b:10:8d:ea:81:7b:14:a5:1f:
         d0:9b:2b:09:ce:4c:52:f3:ee:c0:5f:d6:3c:06:c9:a9:49:2c:
         1f:6e:48:b5:05:2d:98:66:4c:d6:75:a6:6d:35:57:89:cc:19:
         12:11:2f:1e:63:af:c0:bd:30:6e:bf:a3:69:83:2f:f4:73:24:
         39:81:82:92:43:8a:13:71:b6:db:8c:cf:0c:08:c6:3c:de:74:
         36:bf:b2:3f:80:2e:fe:b3:d7:b1:14:df:8e:d1:9d:e7:82:ed:
         af:0f:a8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:21:32 2025 by rpki-client