Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd55d955-1906-317b-a178-73b01155b03b.roa
File:                     cd55d955-1906-317b-a178-73b01155b03b.roa (raw, json)
Hash identifier:          s6iyvRo+DeN6u9qrN+Lm8tsSAcdbf/m6mQYFGATJJGA=
Subject key identifier:   CA:95:5E:BB:3C:DB:97:97:DC:FE:EC:FF:22:98:CA:9A:2F:C2:7F:4D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309F3E615CE8079F38FB945C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd55d955-1906-317b-a178-73b01155b03b.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        35.186.128.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f3:e6:15:ce:80:79:f3:8f:b9:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=9c93d3bf-4b1d-4d0d-8359-65a56a79c5d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:83:b5:3a:5d:73:35:91:ee:8f:53:6e:5a:be:
                    90:87:30:c1:4b:15:05:4c:5d:d5:53:c5:43:9d:d1:
                    16:c1:fd:f4:58:81:c3:f1:e6:3a:83:02:a6:4a:dc:
                    b8:9e:ca:57:09:a7:97:fc:1b:18:63:a3:67:91:40:
                    a3:2a:74:7d:97:57:57:ff:b1:6e:39:9e:78:4e:41:
                    74:74:6a:4e:5e:c9:48:a3:03:d6:a0:68:9b:53:2c:
                    9e:13:64:28:5d:63:81:59:7c:d8:9f:d8:7d:c1:aa:
                    df:2d:40:57:ec:8c:b8:83:f0:71:f7:9a:50:d7:d4:
                    ef:f0:5e:f5:6c:9b:e4:65:a2:c5:a2:0c:83:67:f2:
                    28:6a:1c:7d:88:3c:a9:22:e9:f9:a8:cc:fb:57:7f:
                    85:20:66:b1:81:d0:a6:96:cd:f6:fe:a3:c3:14:12:
                    71:c7:52:bd:87:25:29:1e:e3:7c:13:c5:35:11:f1:
                    c0:e0:88:f3:73:b6:ae:36:27:a3:d3:02:27:e5:49:
                    64:ea:89:d9:d8:e2:cb:32:4c:ec:f6:dd:89:b2:ed:
                    7c:21:62:86:34:55:c1:ec:8d:6a:6e:70:e0:ef:0d:
                    eb:67:06:5e:2f:1a:b0:73:c3:60:90:ff:cd:18:9e:
                    45:93:7e:53:bb:19:a3:97:34:1d:9e:f0:44:23:d2:
                    08:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:95:5E:BB:3C:DB:97:97:DC:FE:EC:FF:22:98:CA:9A:2F:C2:7F:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd55d955-1906-317b-a178-73b01155b03b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.186.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:c8:7d:cf:db:5f:38:6d:62:f7:53:f0:48:a2:03:41:12:7d:
         98:ba:f8:e8:af:05:b9:95:e1:66:b4:63:05:e4:b0:e9:5e:5a:
         3c:ab:f5:9b:83:62:e1:91:1e:7e:7c:07:0b:56:de:00:d5:88:
         38:ca:04:e3:aa:88:68:c9:4d:34:25:96:6a:69:0a:54:d1:44:
         77:5e:50:f6:f0:22:be:c5:d4:1b:66:01:c9:bb:2e:2d:22:49:
         fb:1e:d5:0f:44:c2:12:bf:02:19:16:f0:df:77:e8:0e:08:09:
         52:01:d2:7a:6e:ca:5b:82:4c:a8:bd:26:17:aa:9d:4a:8b:b0:
         bc:fc:cf:8f:85:d1:79:f2:98:0d:68:32:21:a0:02:e0:39:e7:
         a3:27:c4:d9:f8:54:2c:71:ec:e3:27:70:04:f1:1d:de:37:ea:
         9a:df:a2:e8:2e:89:c7:4a:fe:02:79:d6:ec:8b:52:13:11:eb:
         0a:e8:ee:76:db:ec:53:f2:6f:02:71:0b:a6:54:9f:a8:b6:64:
         45:c5:ac:aa:e8:6d:8d:d9:9e:3c:7d:dd:44:28:56:86:b3:9d:
         de:03:f8:13:42:fa:5d:dc:89:3d:81:de:13:f6:db:72:22:49:
         ef:7b:31:55:ff:42:f3:93:92:ba:20:8e:6c:f5:92:ef:d3:9a:
         c6:bb:70:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----