Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/83b7d264-ca67-3429-bef9-03ff2381f89a.roa
File:                     83b7d264-ca67-3429-bef9-03ff2381f89a.roa (raw, json)
Hash identifier:          Xjix7MtiRzfu8DCL/CMWH5MkzKS1SPkl2bOwHket2Gg=
Subject key identifier:   B1:BD:AC:89:46:ED:E7:DB:3D:DB:76:C4:67:25:D9:30:D0:1A:BE:5F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285842B065685E5DF5CC74B0839CE8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/83b7d264-ca67-3429-bef9-03ff2381f89a.roa
Signing time:             Wed 26 Jul 2023 12:00:00 +0000
ROA not before:           Wed 26 Jul 2023 12:00:00 +0000
ROA not after:            Mon 29 Jul 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.199.64.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b0:65:68:5e:5d:f5:cc:74:b0:83:9c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 26 12:00:00 2023 GMT
            Not After : Jul 29 04:00:00 2024 GMT
        Subject: CN=c733d793-6a81-4bc4-8797-3e782364c21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:c1:2d:9d:ad:47:3f:48:d2:bd:0a:f4:3f:
                    b9:e4:cb:b9:d6:75:0b:4e:cf:f9:9f:ef:ee:e9:d9:
                    41:f7:4b:81:1f:c9:81:86:65:39:ce:67:3f:2e:aa:
                    77:de:a5:f4:94:84:2e:47:9a:b4:31:fb:c3:3a:6c:
                    c2:bc:34:19:6d:7d:a5:dc:c6:20:3e:31:bd:f9:d5:
                    ce:5a:82:64:70:f0:d2:d4:e8:a2:e2:ee:93:33:4b:
                    a3:89:30:c3:c5:ee:38:fe:b5:d1:99:8d:e7:f1:c7:
                    4a:53:82:a2:f2:8a:a2:df:cd:00:72:cc:09:55:0c:
                    a1:eb:40:1b:8a:4f:65:0f:df:d1:b6:92:65:a0:a7:
                    63:21:fa:6f:c6:41:54:12:53:c6:ba:c8:cb:c0:69:
                    d9:df:ab:99:53:e0:df:81:de:48:a5:b3:07:9c:ab:
                    fa:5b:3c:67:37:93:cc:fd:57:9a:b9:17:07:42:e0:
                    9e:bd:6a:9e:5e:ef:fe:ab:13:f4:e4:89:90:38:76:
                    81:90:64:00:b0:1b:92:06:1c:3f:73:e1:df:14:7f:
                    f6:eb:2e:4e:09:b5:a3:38:86:ad:35:66:01:e7:0d:
                    b8:4b:24:3b:d4:b0:9b:71:58:87:d7:ee:1a:f0:66:
                    9b:b3:2c:27:3b:32:f3:b2:de:e9:cd:5c:e3:fe:e5:
                    5c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BD:AC:89:46:ED:E7:DB:3D:DB:76:C4:67:25:D9:30:D0:1A:BE:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/83b7d264-ca67-3429-bef9-03ff2381f89a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.199.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e2:d1:bd:18:a5:d0:63:76:ae:30:98:0e:f6:08:53:8c:17:
         fd:1b:5b:6b:95:78:86:e7:ef:91:b3:f2:a1:33:e9:a7:4f:07:
         01:b9:3b:02:2d:57:f4:40:69:5a:55:ba:c8:1f:51:1b:00:71:
         ca:db:ac:e8:73:c7:f1:19:fb:f1:0b:2b:2c:bd:47:04:58:f3:
         ac:da:a1:29:ae:f3:7d:84:09:3f:de:c2:03:4b:f6:b3:d0:d6:
         ca:94:ce:aa:44:1a:98:5b:3e:be:64:c3:2b:47:09:4a:03:73:
         ec:f8:6c:3f:73:b1:18:b1:89:03:6c:c2:b6:1d:5d:ee:1e:ff:
         3e:06:86:04:4c:2d:d0:c2:87:1c:a3:cd:85:79:c8:cb:52:84:
         1c:70:30:b1:02:86:42:86:a9:cc:ae:a6:9d:ef:fd:18:72:cf:
         12:eb:13:ea:5e:22:a3:84:56:53:5c:d5:61:98:01:98:02:b9:
         71:35:4e:69:90:e8:48:28:55:83:60:d7:0c:95:85:23:65:ff:
         75:f5:3a:f4:b4:a6:1d:94:24:0f:50:c9:f5:ae:c2:e4:06:5a:
         af:0a:39:97:5f:b4:2a:a8:c2:8a:0c:17:05:d0:5a:4a:48:48:
         2b:9a:c4:f1:d0:f2:b9:d9:6f:10:16:14:1e:7f:9c:7a:f8:57:
         ca:e5:66:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:13:06 2025 by rpki-client