Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/888e7f59-1755-3033-9563-4fdf0199adec.roa
File:                     888e7f59-1755-3033-9563-4fdf0199adec.roa (raw, json)
Hash identifier:          QRyx+ikvrA6+uyp3Ha7ZdznnIlbciSMOLe/3mzh58sw=
Subject key identifier:   27:9F:80:FB:11:E5:BD:EA:39:DE:B7:CB:D5:5E:22:3A:54:38:EA:6E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7AEF7937576CC070F9E79E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/888e7f59-1755-3033-9563-4fdf0199adec.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        35.221.64.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ae:f7:93:75:76:cc:07:0f:9e:79:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=0acbae99-756e-4ecd-ba36-c5e2ecbba474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:13:39:38:60:a9:0e:d2:e3:a2:c7:a5:81:8c:
                    ab:6b:dd:64:35:ac:09:86:e9:aa:48:f1:09:c4:48:
                    9a:05:db:e9:54:3b:43:ee:a4:10:01:3f:f9:1f:46:
                    44:b2:75:d5:66:21:ec:1c:27:63:94:ff:f1:35:0c:
                    a9:ac:ce:89:c7:9b:7b:e6:24:32:4d:80:c8:be:b8:
                    97:25:67:02:23:72:f0:30:2a:3f:39:2e:ac:62:18:
                    ab:b0:d6:e0:51:62:b5:91:53:6b:ca:05:c1:23:e9:
                    8e:98:57:7c:b7:7d:2e:77:ce:aa:a8:41:f2:31:1c:
                    de:04:b3:a4:26:c4:12:bf:27:9f:5f:e3:59:71:4f:
                    e8:76:a2:34:a2:4e:0f:27:b6:8a:8a:c6:34:5d:a3:
                    e4:7b:22:b6:c8:05:9e:a3:00:72:89:50:bd:15:0d:
                    dc:72:2f:ca:4a:a8:07:b0:89:4d:18:8c:5a:cb:8b:
                    f3:77:dc:02:f2:e8:99:58:12:17:0a:08:09:c5:a7:
                    dd:f9:04:30:df:ee:57:47:ae:17:40:bf:3d:5d:d5:
                    15:30:4e:db:eb:c0:d3:27:25:dd:21:b3:ac:d9:a4:
                    da:8d:1a:90:99:d4:c6:9b:6c:43:30:fb:35:9b:79:
                    40:2f:c7:54:9c:c3:6d:f3:04:40:7f:4b:66:9f:14:
                    97:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9F:80:FB:11:E5:BD:EA:39:DE:B7:CB:D5:5E:22:3A:54:38:EA:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/888e7f59-1755-3033-9563-4fdf0199adec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.221.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ff:14:54:eb:d8:e0:f4:d9:97:ee:19:e2:63:2b:8c:3d:75:
         d3:33:06:d8:5d:1c:bb:a4:e3:4f:ab:0b:2d:82:75:01:70:c9:
         d9:82:11:9a:3c:0c:bd:1a:93:d1:d7:69:03:29:40:b9:92:66:
         0a:f3:68:cb:a5:35:66:93:21:5d:8c:4c:55:b4:47:99:bb:f4:
         5d:ea:62:5c:34:27:d5:fd:f8:72:5d:69:e8:ab:9e:19:1c:e5:
         f4:2b:6b:bd:ab:1c:c2:20:15:89:06:d4:89:20:69:21:f3:4c:
         15:bb:10:3b:0f:a9:42:ae:df:b6:b8:e8:74:7b:4f:1d:de:87:
         9f:cc:52:ff:91:f8:3b:bc:4c:cc:d2:30:6f:ab:07:3a:53:12:
         52:d3:6a:51:cc:3c:be:2a:5c:f0:ad:9e:67:4e:a3:69:44:ed:
         0b:b8:dc:23:67:c2:91:ae:d4:f3:69:f1:cb:11:7b:52:a8:d6:
         59:d3:89:8b:62:c5:66:5c:31:16:f4:13:a0:96:60:bb:b7:e1:
         30:7f:bf:de:7e:df:65:6a:e5:7f:6e:06:65:dc:db:1e:59:33:
         39:43:af:36:1b:08:44:20:28:a2:d9:37:aa:84:29:f7:02:64:
         8c:d7:45:6f:50:03:52:dc:83:4e:3d:90:24:c7:5a:46:98:a7:
         62:59:b6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:03:49 2025 by rpki-client