Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6747bc00-c417-3898-8d91-bba5dbc1487a.roa
File:                     6747bc00-c417-3898-8d91-bba5dbc1487a.roa (raw, json)
Hash identifier:          lsU1W75/CmokNILVOscOmFbChxffnr6RN8O40pNUUDw=
Subject key identifier:   73:49:81:4B:F9:2A:CC:C2:53:A2:D9:86:BE:9D:D1:A5:5A:A4:80:A9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A1B28E91721A7482E092F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6747bc00-c417-3898-8d91-bba5dbc1487a.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.190.176.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1b:28:e9:17:21:a7:48:2e:09:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=dc8c71d7-459a-4f6c-99d3-1b459eb5cf92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:20:9d:c4:94:59:84:ba:4f:4a:1b:a4:21:91:
                    69:b8:5e:4e:bd:86:f9:83:d1:fc:de:d8:4a:10:c0:
                    ca:30:5a:4b:51:69:58:60:3f:76:17:ae:44:17:76:
                    91:eb:84:7c:76:fd:01:3d:33:65:ae:f7:11:f7:87:
                    b7:b9:c4:24:20:6e:18:e1:ae:ce:64:8c:b3:c6:e2:
                    e5:6f:54:f4:b6:04:92:ff:4e:3f:af:df:4a:c4:02:
                    1b:23:18:ed:ae:8d:be:07:0f:dc:af:a4:c6:e8:c6:
                    10:d0:03:d7:de:c3:60:38:b4:6b:48:86:2f:00:04:
                    d5:7b:86:b2:16:30:cf:09:a9:f3:c1:76:d3:ab:7b:
                    c5:48:1e:0b:d8:4c:e0:48:0c:b6:f8:f7:45:28:01:
                    05:21:47:b4:32:ba:55:b2:0b:01:2b:d3:1e:75:1a:
                    9e:b9:45:c8:8a:9b:7d:31:36:f8:f5:67:25:9d:0e:
                    f3:8c:08:6b:79:e2:1e:12:46:62:5d:90:8d:b2:78:
                    80:7a:3f:0c:ec:23:74:ed:a8:d2:8f:cb:17:89:01:
                    fa:15:a0:0f:d2:e6:43:bf:07:de:58:7e:cd:da:f9:
                    34:de:26:05:ef:b6:63:1c:0f:f8:3a:64:65:2a:d9:
                    5c:31:5e:58:be:b2:19:9e:37:78:72:47:d3:73:26:
                    40:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:49:81:4B:F9:2A:CC:C2:53:A2:D9:86:BE:9D:D1:A5:5A:A4:80:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6747bc00-c417-3898-8d91-bba5dbc1487a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.190.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:e4:cf:5e:7d:70:e9:2c:0f:e4:b7:c6:3b:c7:9b:29:48:93:
         d9:cb:13:a3:1c:7d:6e:27:fb:5e:1a:57:10:70:66:45:06:7b:
         12:99:97:0a:41:c8:78:20:b3:04:1c:ea:f6:68:29:a1:8f:e7:
         30:ff:7e:e8:34:1c:12:08:0d:94:93:e9:0e:f1:39:83:7e:06:
         1c:bf:8b:d3:64:22:8d:76:d3:3d:de:0f:06:54:ff:1f:dd:b0:
         2c:25:e2:24:af:4b:e3:b7:8e:bc:81:8d:b0:ad:92:db:9f:12:
         b7:84:42:13:db:86:42:f8:c4:99:93:c6:59:84:ca:cf:5e:20:
         c2:43:65:34:64:73:90:e2:0f:30:37:62:95:b5:50:70:d6:90:
         60:16:6d:fb:3f:35:92:26:6f:cd:99:e6:1a:a6:d8:f2:a9:e3:
         2c:e9:1c:4d:b8:0f:1a:fa:24:2c:3d:12:a6:0b:d1:ef:83:36:
         ea:88:75:5b:95:e1:06:61:1a:3c:ed:b5:74:cf:61:5f:be:0b:
         93:03:f5:16:ce:e8:ba:6c:5b:90:e3:a7:a8:f2:cc:6b:4f:98:
         fe:53:8e:51:5e:e3:af:f3:10:b1:63:10:95:25:15:76:99:b1:
         39:fb:bb:79:c0:1d:d0:b7:fe:2b:eb:82:88:17:4c:83:9f:3f:
         a4:9b:f6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:48:27 2025 by rpki-client