Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a6760fb5-607e-3cd2-bad6-5b3c17488dd5.roa
File:                     a6760fb5-607e-3cd2-bad6-5b3c17488dd5.roa (raw, json)
Hash identifier:          jNnwOxDJudUm6ntX80ZkPyEzJ34FB6ijy0/3imgk6zk=
Subject key identifier:   AE:CD:CB:D4:F9:BB:7C:58:28:F6:6B:11:D4:5E:60:BF:F4:61:5E:C3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A215BE2477AB016642AFC80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a6760fb5-607e-3cd2-bad6-5b3c17488dd5.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.220.208.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:21:5b:e2:47:7a:b0:16:64:2a:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=b38f903c-3844-4924-b5fa-87e768898db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:21:4e:eb:69:15:01:1b:99:62:95:ca:11:e8:
                    ac:40:99:75:eb:01:71:51:b9:a5:4f:0c:7b:bb:72:
                    ab:ab:57:44:b5:22:16:fc:26:ca:a3:bd:8d:99:a5:
                    17:f3:d7:15:4e:d7:91:79:b1:22:45:e5:11:50:2f:
                    38:79:65:3b:2b:fb:8b:82:2e:8d:de:d3:98:f0:cd:
                    35:0a:02:4c:5c:a2:ee:81:45:0f:4b:84:02:62:1b:
                    d2:84:87:4f:5a:01:5f:fb:2c:8c:0f:90:d5:9b:16:
                    86:13:5a:b6:f2:84:87:a9:25:c5:c7:a6:dd:f5:d1:
                    88:60:f7:74:ea:06:f5:2d:ca:aa:bc:a9:32:1b:30:
                    10:fe:5c:28:6f:d8:15:6c:b3:e6:5b:8c:83:3d:5e:
                    b7:01:ef:fd:e8:df:d8:43:de:dc:d3:64:42:ec:14:
                    12:c3:8e:26:89:60:8e:26:21:a2:d8:83:21:aa:b3:
                    b7:e6:a8:cb:27:f7:a3:a4:b4:b0:20:d3:b7:c1:72:
                    ab:2c:63:6c:a1:e7:4d:1a:63:26:90:09:d1:d6:b5:
                    fa:86:f0:d4:d0:02:12:16:63:1f:0a:6d:fb:4d:b5:
                    d0:0b:90:cf:96:f2:61:41:d9:fb:d7:13:b7:d8:11:
                    3b:8e:ba:23:b1:3e:cd:2e:cd:44:67:77:cc:c5:5e:
                    04:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CD:CB:D4:F9:BB:7C:58:28:F6:6B:11:D4:5E:60:BF:F4:61:5E:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a6760fb5-607e-3cd2-bad6-5b3c17488dd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.220.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:96:e2:d2:b1:ed:fd:8c:5a:e5:92:4d:17:3c:22:fc:aa:ee:
         ab:3c:d1:52:0f:9b:ef:7c:69:f6:93:49:0d:d8:a3:78:2e:8a:
         41:3e:99:2e:40:3d:f6:17:51:0f:8b:be:53:5b:49:24:ef:64:
         1f:49:27:32:0f:dd:47:da:1f:2f:b1:d5:f6:c4:fa:6c:01:03:
         25:ce:fc:c6:d4:38:be:9c:8c:29:b8:97:f7:47:58:03:7d:97:
         b5:fb:c7:35:5c:d6:8c:3f:1d:64:41:d3:87:07:94:c0:a2:27:
         69:f6:99:28:2b:f6:54:dc:d2:b7:c7:0f:51:c6:26:8d:6b:af:
         c7:7d:1a:1f:6b:bf:cd:4b:d3:e7:1d:2b:65:6a:c7:53:7f:79:
         15:33:38:a5:4a:4f:0a:e3:77:a7:ba:9d:57:a0:91:a2:7e:50:
         b8:cb:76:ef:b2:e9:98:6d:25:87:85:c7:06:c2:b2:b9:61:57:
         9c:62:e8:68:a6:5d:8d:04:f3:d1:db:1a:1f:32:f9:73:4c:24:
         6d:48:3f:57:aa:a0:14:1d:2a:fb:48:4e:9c:0c:91:26:4a:5d:
         41:42:48:f0:ff:4e:40:73:dc:e4:61:fe:e4:0c:13:a4:d2:43:
         4c:f5:32:e1:27:31:b5:43:6d:85:92:c6:6b:d3:97:a4:91:dc:
         ed:22:6a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:37:56 2025 by rpki-client