Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9eb495a0-9440-33f0-977b-99df2cc491e3.roa
File:                     9eb495a0-9440-33f0-977b-99df2cc491e3.roa (raw, json)
Hash identifier:          gZvWd7v+kyhQ2UzWDfG+wlvtBONCqedpF5cJwGkqjWE=
Subject key identifier:   1E:16:27:17:12:29:FF:2E:C4:C2:14:1A:CF:03:C0:DB:DA:DD:12:72
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7A2A9837AFA162A6D715780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9eb495a0-9440-33f0-977b-99df2cc491e3.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        35.205.192.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a2:a9:83:7a:fa:16:2a:6d:71:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=0032a293-267f-44d8-a57b-cb83facfeecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ac:a4:ac:25:b1:95:0b:72:73:d6:f1:b0:b3:
                    30:77:e7:85:da:7e:63:3d:3c:76:3b:7c:ad:f2:85:
                    23:11:6a:f0:59:a3:f8:8a:4f:58:79:13:a8:92:18:
                    2f:15:0d:5f:c8:ac:1e:68:db:52:c0:43:f0:0d:d6:
                    c8:c0:e8:40:74:77:94:1e:4c:4f:15:3e:38:70:b0:
                    fb:94:50:09:53:8f:58:7d:e7:2e:81:85:8c:04:05:
                    bb:5e:94:bd:b9:4c:d3:11:cc:e1:17:ad:a9:9b:25:
                    82:ca:67:3e:78:11:8a:66:ed:d8:b1:6e:72:45:f8:
                    1a:ae:f6:20:ad:9d:97:20:3b:39:9c:a1:8f:8e:d5:
                    75:e3:77:0e:29:ce:c0:33:da:e2:af:b9:e2:d6:23:
                    f4:2b:a5:d0:2a:a0:2f:5a:8d:f2:3e:43:9d:03:f6:
                    b6:1b:0e:2b:8e:e7:61:40:19:49:b8:2b:6a:e3:26:
                    a1:7f:cf:aa:0c:5d:83:d6:f4:69:bc:7b:5c:1e:45:
                    97:f9:36:b8:c8:37:9e:a4:fb:1f:14:ff:97:45:c5:
                    20:4f:78:f9:ef:ff:e7:93:8f:fd:75:8d:0d:00:90:
                    90:f6:e1:1d:ea:68:50:4d:06:da:41:f9:da:3a:ed:
                    c7:40:a2:7a:6f:05:07:62:1c:12:f4:0a:ed:df:7e:
                    2d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:16:27:17:12:29:FF:2E:C4:C2:14:1A:CF:03:C0:DB:DA:DD:12:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9eb495a0-9440-33f0-977b-99df2cc491e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.205.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:b2:66:13:3c:de:2f:cf:15:30:10:77:5c:33:86:45:0f:40:
         a0:a7:f5:99:68:b8:ae:ba:ed:b6:c6:8a:fd:3f:86:ac:8d:b7:
         65:6d:8c:12:25:70:7c:3c:4d:f9:a9:f8:1e:b6:09:dd:1a:a7:
         83:42:50:d1:41:9e:5d:b0:bc:23:46:23:01:16:97:4e:b0:4e:
         ce:31:da:f8:c0:6b:a9:19:26:4a:68:c2:90:6d:5b:6b:a7:6d:
         90:3e:1d:ac:c6:75:10:0f:03:dc:5a:8b:69:08:c9:49:33:52:
         44:56:1d:e8:04:5d:07:e0:b3:79:ff:32:0d:f3:fc:c2:6d:2f:
         2f:29:03:5a:42:92:87:29:69:af:c8:8f:d2:f3:e6:9a:15:a7:
         5f:bb:7b:bb:80:95:2d:93:7f:f3:eb:cd:52:2d:0c:6e:00:d3:
         c2:71:36:6a:49:73:85:53:86:20:cb:5c:3b:be:ed:32:aa:71:
         c1:b6:15:1f:3d:51:9f:00:f6:01:d3:8a:2e:a3:df:10:e4:25:
         56:da:54:3b:23:51:82:25:12:69:9d:99:19:00:45:86:a7:aa:
         75:ce:e4:ac:02:4f:90:55:ba:5c:5d:0c:f8:19:c7:bc:bc:33:
         87:1b:03:c5:20:66:c7:45:fd:06:8f:a1:64:76:2d:d0:1d:d4:
         50:56:ad:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:39:12 2025 by rpki-client