Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9fb7a784-f57f-3afa-b59f-737c73172947.roa
File:                     9fb7a784-f57f-3afa-b59f-737c73172947.roa (raw, json)
Hash identifier:          OFny7Xmx87yZccolHhD8SfaBe60iHv7CC1722+X9blM=
Subject key identifier:   0B:46:C3:D6:FD:1F:0E:74:FF:B6:18:F1:1F:E4:D3:2A:2F:93:79:93
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309FEB047E31C2D724C9FD8C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9fb7a784-f57f-3afa-b59f-737c73172947.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.192.80.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fe:b0:47:e3:1c:2d:72:4c:9f:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=7a96e537-987a-4d8c-a7ae-1c373039b3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:ee:ea:89:19:e7:2f:a2:61:0f:7c:7c:69:
                    cd:ab:8d:3e:e6:b0:98:4f:12:e1:1c:a7:84:ba:3e:
                    c2:f7:c3:ee:5d:69:90:65:6e:ab:4c:90:f0:bb:b4:
                    d6:47:c2:5f:0d:44:7d:af:53:3e:85:88:0f:7f:62:
                    82:aa:f9:80:32:72:ab:2a:3e:ab:fb:e1:f1:5e:85:
                    df:dc:37:82:6e:1e:8e:74:c1:fc:5d:ac:06:b8:b0:
                    37:7a:8b:46:1f:b2:75:30:53:4c:ac:ee:91:36:37:
                    fb:33:e1:8a:8a:54:30:0a:3c:3d:cd:b4:09:19:81:
                    8f:48:82:e4:be:89:3d:34:d2:58:9a:78:e3:4f:00:
                    d3:0e:22:0c:18:35:6c:38:fb:0d:ef:c3:5b:99:84:
                    bb:e2:3f:16:20:85:83:3f:aa:04:52:11:1a:d8:2e:
                    81:82:2f:3e:86:91:b9:6a:e5:06:5e:74:21:2e:ae:
                    e5:74:af:70:58:3b:42:e1:9b:11:ac:1b:bd:97:c9:
                    4c:cd:26:38:e7:ba:cb:94:a3:db:e5:e5:ec:d2:1a:
                    d1:a8:b9:1e:21:81:39:ba:62:0d:2a:4f:1e:dd:c5:
                    aa:65:96:d1:7e:1c:cf:db:09:9a:fb:b8:38:fe:e9:
                    32:d3:19:34:c9:7b:a4:ad:8c:bc:c3:49:38:68:e9:
                    97:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:46:C3:D6:FD:1F:0E:74:FF:B6:18:F1:1F:E4:D3:2A:2F:93:79:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9fb7a784-f57f-3afa-b59f-737c73172947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.192.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:60:7b:ff:c5:26:d5:59:f2:1d:9a:d3:f0:9f:dc:82:cb:65:
         03:c3:78:19:e1:29:dd:5a:c7:d0:6a:ce:4d:29:52:2d:bf:6f:
         62:2f:12:0b:23:59:b2:c0:b9:d4:9c:08:bf:c9:7b:3e:8d:4f:
         29:07:28:05:3d:dd:86:99:c6:cc:a5:ee:7c:c9:48:47:fc:7b:
         11:d6:a5:d1:1a:1f:76:c6:5a:27:82:d5:08:39:57:8c:f5:54:
         85:c0:7b:a6:39:e0:52:14:dd:a2:d0:c3:82:58:2a:14:f4:6d:
         42:2e:b5:56:b7:43:f0:4d:82:f7:73:7d:ce:fb:75:d8:88:73:
         49:63:c3:89:d1:58:47:68:2d:ef:27:48:0d:02:ae:86:6f:77:
         31:ce:7f:73:48:ed:34:ae:d1:fc:a9:e1:d8:4f:7f:23:1d:90:
         92:33:4f:a2:b7:55:55:e5:e5:82:75:c7:bb:a4:c1:f0:6b:c1:
         2f:f9:e3:db:5b:57:81:9d:6d:64:f7:c1:1f:5a:be:e0:e8:b3:
         6b:19:a8:d4:ce:81:0d:fe:49:9e:fa:e1:57:b2:ba:3e:ca:8f:
         0f:24:20:d9:8f:77:ee:4b:6f:af:55:a6:7c:0b:8d:7a:8e:2b:
         97:7b:83:f1:e5:52:f2:b7:e5:9c:45:a2:54:2d:ee:13:68:76:
         42:92:96:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:40:43 2025 by rpki-client