Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9d2ea78-8bb7-3f01-a0ff-848fb3c36a4a.roa
File:                     a9d2ea78-8bb7-3f01-a0ff-848fb3c36a4a.roa (raw, json)
Hash identifier:          HxQNXE3s7IYMkwo7ev5b0O0aj3m4Cls22VekKP4LKC8=
Subject key identifier:   FD:EA:28:BF:FE:6A:B0:40:68:84:C2:A3:42:07:57:30:07:65:EA:CC
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7A0C5C5E13373457F570B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9d2ea78-8bb7-3f01-a0ff-848fb3c36a4a.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        35.219.0.0/17 maxlen: 17
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a0:c5:c5:e1:33:73:45:7f:57:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=e1f17ad7-7ba3-4e93-9c98-00fdc684d25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:86:93:84:18:8d:31:df:83:db:b2:2e:bd:84:
                    cd:88:84:28:a6:21:f3:32:14:50:26:31:bd:53:e0:
                    20:5e:69:ba:d9:e6:a2:d8:23:9e:b7:50:ac:90:be:
                    5d:47:d4:28:89:d1:c7:77:78:ee:f0:69:87:15:92:
                    80:03:19:b1:56:25:7b:f8:a1:b7:fc:1f:2e:98:57:
                    e1:f6:9d:85:55:35:89:ac:d1:2b:b0:76:b0:41:4d:
                    01:23:13:d0:ae:a5:d0:b7:9a:db:9d:c8:d9:1f:8a:
                    f9:7a:69:a5:6f:33:9c:8f:3d:92:56:1f:c3:ea:85:
                    7c:ff:58:ef:6b:4a:d8:52:a1:51:9c:63:c3:17:88:
                    99:d2:84:7f:05:81:4a:28:b8:72:06:51:87:66:b4:
                    34:e0:38:8f:d5:43:07:6d:e5:48:df:67:13:0f:45:
                    d0:74:e6:ba:60:46:46:13:34:ca:4a:9a:20:f7:ef:
                    c0:62:8b:0e:b2:82:c7:4c:bb:6f:54:1c:f1:8b:43:
                    ec:3c:5e:e1:44:87:a9:4a:6b:4b:c6:8a:47:79:72:
                    0e:03:ed:1b:06:d3:57:8c:e7:d5:00:2d:c5:2c:98:
                    ad:ea:75:8c:39:29:c4:34:f8:4a:c5:80:c7:a3:f6:
                    65:53:50:bd:e1:4b:f2:7b:2f:e9:20:51:f7:b8:b0:
                    e2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EA:28:BF:FE:6A:B0:40:68:84:C2:A3:42:07:57:30:07:65:EA:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9d2ea78-8bb7-3f01-a0ff-848fb3c36a4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.219.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:c9:fb:84:00:06:ed:5a:3c:a4:6d:a4:c5:ca:13:5b:ac:3e:
         f6:b4:b3:b7:d5:ef:8a:7f:9c:9f:8c:8e:1a:d6:4a:3c:03:2d:
         18:dc:64:4e:8c:0b:9a:6c:ff:54:6b:67:cf:bd:5a:72:1e:2b:
         7e:53:17:cb:c8:79:0b:63:00:9c:eb:58:ab:61:4d:4f:e8:18:
         22:41:27:39:1b:a9:dd:39:62:0d:48:8d:49:bb:c6:3b:a3:59:
         4d:a5:99:0d:40:a0:fc:59:82:d8:fc:57:6c:36:37:72:bc:fc:
         c0:c5:2f:de:55:fc:2a:77:86:55:03:8a:cb:fe:45:63:c6:6e:
         c5:61:f1:22:22:ea:c7:d1:30:5f:92:83:f9:6f:13:b4:97:ac:
         88:74:05:48:d4:c7:88:f1:6f:fb:b3:fb:bb:0a:b2:20:16:45:
         33:4a:41:c5:f7:80:37:8d:b7:03:8f:3b:6a:0f:fa:53:3f:fb:
         57:58:cf:b2:fa:b9:0b:3d:33:16:27:0c:bb:ac:80:21:ac:f7:
         37:36:2c:62:d7:c1:5b:63:31:63:f8:0a:3b:b8:3a:28:aa:34:
         60:b9:37:6e:9b:ce:0c:10:24:95:a5:e5:53:ea:d7:10:e3:01:
         de:d1:90:b0:24:c7:3e:2a:50:23:56:b3:6f:65:b7:7b:41:4a:
         cb:1d:1c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:20:54 2025 by rpki-client