Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/763e1db3-3ea8-357c-89ee-682095f8b41e.roa
File:                     763e1db3-3ea8-357c-89ee-682095f8b41e.roa (raw, json)
Hash identifier:          G+k52AD3currCVIaR4erX60bzvJdKLtosZqgwzqYPmg=
Subject key identifier:   A3:83:FF:E2:56:EC:D1:69:ED:58:42:50:B6:83:A2:17:A1:F2:71:29
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A0B53892D0123A15BAC5D20
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/763e1db3-3ea8-357c-89ee-682095f8b41e.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.204.176.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0b:53:89:2d:01:23:a1:5b:ac:5d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=16355cf5-5bc8-489b-9351-a580efde350a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d6:bd:d4:ea:b9:93:68:70:c5:b0:de:88:45:
                    6e:3d:57:4e:02:f7:c0:53:7e:6d:f5:ac:ad:3b:ad:
                    a0:49:59:2d:95:07:38:47:b7:cf:af:1d:f7:25:c6:
                    b9:c2:57:54:67:ec:1a:a9:bd:87:a1:bf:f7:3e:64:
                    d0:82:34:b1:3f:29:32:05:88:ff:2e:d3:70:e9:57:
                    42:0e:25:4e:33:e4:b5:d9:ab:02:43:07:ce:dd:b5:
                    20:d5:f0:bd:09:7a:2d:bb:57:d8:f1:11:17:e9:b9:
                    f5:1b:83:1e:5c:c7:fe:ad:cc:07:5b:a0:51:34:f9:
                    3a:4f:f7:d5:b9:d3:ec:7c:54:1d:5d:05:28:42:48:
                    8b:fe:2e:54:53:c1:85:36:ed:50:d0:88:38:fd:4b:
                    65:c5:3c:c2:d3:92:15:06:ac:8d:e5:6c:eb:cc:de:
                    74:4b:70:26:2c:00:59:17:a8:45:e4:e4:e2:3a:c7:
                    51:40:2a:5b:73:83:6f:f7:c3:41:37:e3:1d:e0:f3:
                    f7:66:7d:e3:8b:f4:72:56:8f:8c:1d:16:db:37:6e:
                    85:80:2e:45:f7:72:92:41:6a:c4:59:70:c3:c2:12:
                    5d:a1:f4:95:f3:da:fb:a7:9c:8b:f0:76:fd:b0:ce:
                    2b:46:3c:a1:5b:b6:be:91:46:e0:31:af:63:81:9d:
                    c5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:83:FF:E2:56:EC:D1:69:ED:58:42:50:B6:83:A2:17:A1:F2:71:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/763e1db3-3ea8-357c-89ee-682095f8b41e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.204.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:07:b0:88:61:a0:da:6c:e6:72:54:2d:e3:d8:39:f4:85:d3:
         c4:66:b6:d0:1f:7b:55:41:70:ee:74:ce:d6:e2:01:5a:c0:d8:
         fa:e7:be:e9:8d:68:0d:ab:e9:be:71:50:ac:1d:4b:95:af:1b:
         23:3a:53:4d:35:e4:84:76:fa:0f:74:1a:a9:dc:3f:80:58:62:
         d0:ff:98:5d:4b:0e:00:f1:d8:62:fd:04:58:82:de:de:42:0f:
         ac:27:4c:54:17:9a:a6:ba:17:0d:67:72:53:69:38:e2:08:48:
         a6:e4:72:33:45:80:c9:d4:86:e7:55:e8:b6:57:f4:19:59:cb:
         ae:c6:ad:57:ff:8e:60:6e:4f:3f:3f:f2:11:aa:9e:2f:84:09:
         3a:7a:c8:34:23:98:38:55:18:a2:83:c2:51:83:7c:96:7c:d6:
         4c:ff:b0:c3:fa:8e:56:53:7b:cf:7b:e9:b8:08:c8:09:58:96:
         e9:06:6d:6b:3e:c6:16:c3:18:78:4c:21:7c:b8:85:0c:c7:41:
         ee:aa:95:b6:c9:b7:af:6d:78:af:15:d2:d8:85:13:f2:d8:57:
         50:52:5d:00:5b:07:56:5a:8c:68:bf:4d:d4:89:61:3e:68:50:
         df:b3:b6:f8:ad:8d:fd:86:bc:5c:a7:89:7f:38:17:d1:c7:16:
         54:a4:f6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:45:18 2025 by rpki-client