Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7cb68501-f90b-387c-89ec-49e90381b61e.roa
File:                     7cb68501-f90b-387c-89ec-49e90381b61e.roa (raw, json)
Hash identifier:          jAftfzpKdoT20PCZRK5+ICAB9RAiilCzJec+WK44LCU=
Subject key identifier:   85:C3:E5:69:C9:B3:CE:8C:5A:0E:C9:AE:77:39:53:92:B8:EC:DA:D2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309FB71DD5B21ED7C9A8A0C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7cb68501-f90b-387c-89ec-49e90381b61e.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.195.48.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fb:71:dd:5b:21:ed:7c:9a:8a:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=a0928f34-0f6b-424c-9754-644f093021ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:22:1f:a5:5b:75:a5:23:63:59:38:1d:a5:b6:
                    09:cc:54:f6:74:13:0c:9b:8f:c4:67:69:43:11:10:
                    05:63:75:93:cc:16:5f:0a:7f:2a:46:a7:46:c9:b4:
                    a1:be:ad:39:82:36:ca:4f:57:a0:1f:5d:d1:7c:9f:
                    6c:f9:48:e5:08:e7:4b:25:32:bf:5e:1b:8e:8e:de:
                    41:f1:b1:66:5a:ce:59:19:19:9d:30:69:75:74:d9:
                    d3:1c:64:eb:7e:e4:6b:65:ed:b6:46:c8:3c:39:27:
                    74:0a:89:ca:0f:90:84:94:2c:6f:0f:51:bd:13:9d:
                    e3:84:2e:2d:25:89:a4:a7:bb:bb:a4:c9:44:57:96:
                    63:fc:3b:fd:37:8e:64:11:6b:58:0b:14:b4:69:77:
                    90:9a:a3:30:37:e7:d4:be:10:db:08:3a:46:25:30:
                    e8:95:34:96:dc:40:3f:e2:37:42:55:4a:fe:fd:de:
                    d9:62:f6:98:bd:86:b8:4c:8d:59:86:ae:19:e1:bd:
                    c6:be:1b:6c:3a:87:e0:d3:68:5a:e1:0d:79:e5:f4:
                    f3:50:4a:f4:39:c6:2b:f6:bf:08:ee:9a:b1:70:55:
                    27:3f:a3:6c:e8:59:bc:d5:68:8e:1d:32:87:30:62:
                    6f:7a:3f:a5:49:ba:9c:2e:01:b7:d2:9e:8b:c7:e3:
                    51:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C3:E5:69:C9:B3:CE:8C:5A:0E:C9:AE:77:39:53:92:B8:EC:DA:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7cb68501-f90b-387c-89ec-49e90381b61e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.195.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:bc:25:7e:a7:32:6c:07:a0:0b:db:83:a7:2d:ac:70:30:d3:
         03:a6:61:6c:16:c9:02:b4:69:ef:6c:3e:9f:f5:07:08:bb:63:
         63:0f:17:2f:2b:7a:0e:8b:60:8a:17:26:2b:ea:66:a4:51:08:
         2d:bf:07:85:f9:52:57:b8:dd:4a:71:58:c0:81:2e:f7:aa:2d:
         53:ea:7d:01:1b:73:1f:2f:6d:67:87:73:4f:68:eb:9c:ae:77:
         9b:2c:84:d4:0b:bb:0e:13:55:fb:24:e2:0e:94:43:79:78:98:
         6b:ea:4b:6e:1f:01:14:49:42:7a:61:15:ca:91:99:0e:fd:dd:
         ca:5c:81:af:40:34:ea:3c:f9:05:15:a2:fd:90:33:fb:2a:61:
         dc:71:4c:35:64:75:07:d2:56:d8:a4:6e:e5:32:4b:da:db:21:
         51:4f:8b:d3:80:d5:56:bf:ab:81:c8:36:57:2f:0f:0e:f6:ee:
         77:c7:b3:d4:0b:e6:3c:59:e5:1b:78:31:44:f1:27:47:2e:1b:
         78:21:87:9c:89:d7:94:7c:e0:fb:7c:73:bf:23:78:1b:bb:08:
         87:d7:9b:79:b3:15:2c:8b:e0:18:46:81:cc:52:22:72:20:75:
         69:7c:4c:c2:58:5d:e1:8f:04:ac:b8:5e:8f:0b:2e:e2:66:16:
         dd:58:aa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:27:20 2025 by rpki-client