Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd553ff6-502d-3d57-a568-fef8808545f0.roa
File:                     dd553ff6-502d-3d57-a568-fef8808545f0.roa (raw, json)
Hash identifier:          pZEMpNfTEr18fsfIeWD75rUZGTM9r0SV6vY2QgIBwAk=
Subject key identifier:   3D:8D:3C:0C:F0:B8:98:00:A1:6E:E2:D6:7D:56:4F:4B:E7:CF:0F:4B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847FF4A54AAAC55C95D24121880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd553ff6-502d-3d57-a568-fef8808545f0.roa
Signing time:             Mon 25 Nov 2024 14:00:39 +0000
ROA not before:           Mon 25 Nov 2024 14:00:39 +0000
ROA not after:            Sun 23 Feb 2025 14:00:39 +0000
asID:                     396982
IP address blocks:        35.188.128.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:4a:54:aa:ac:55:c9:5d:24:12:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 25 14:00:39 2024 GMT
            Not After : Feb 23 14:00:39 2025 GMT
        Subject: CN=5b7fb45b-7287-40e3-8528-d168952f65c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d2:33:9e:2b:91:e5:fd:f6:93:4e:e2:36:35:
                    93:70:dd:f0:33:02:7e:d3:b2:b0:66:e3:44:dc:5c:
                    83:83:cd:d1:86:e5:d6:50:90:b3:0f:df:c7:60:c8:
                    56:ee:bb:74:ae:44:79:66:b3:e6:28:92:3f:62:33:
                    cd:24:2b:25:c2:0d:26:c6:a2:88:33:44:fd:c7:6d:
                    59:b9:e7:89:7a:9d:79:c9:d7:88:93:8f:69:43:2c:
                    60:7c:8d:cd:da:7a:de:e3:58:55:f5:48:cf:a7:fe:
                    17:12:98:ec:d9:b7:13:84:2c:f2:d5:df:d5:74:32:
                    16:b1:54:a3:1f:90:80:63:9d:d4:12:34:37:e9:a7:
                    ae:44:28:67:ff:19:a6:c6:3e:98:0f:d8:bd:18:2e:
                    6f:e4:df:a1:09:7d:cf:a1:ce:35:2a:72:de:49:b4:
                    f5:62:9f:3c:38:84:0d:8c:90:0d:0a:9a:a3:c0:bd:
                    7f:f4:9f:f9:13:1f:03:10:1f:64:02:63:42:03:bb:
                    be:0f:8c:23:01:0c:c5:04:b4:60:a6:ba:58:45:fe:
                    36:3b:f4:b7:e0:c1:ea:ea:53:06:9d:50:69:5f:b3:
                    26:37:07:2a:e1:06:63:64:7b:ae:ac:b7:1e:c6:a9:
                    6a:a2:05:66:39:80:94:90:f7:ed:d7:58:96:a9:cb:
                    69:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8D:3C:0C:F0:B8:98:00:A1:6E:E2:D6:7D:56:4F:4B:E7:CF:0F:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd553ff6-502d-3d57-a568-fef8808545f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.188.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:6a:57:8e:af:eb:07:87:10:ce:fa:01:a6:98:c9:11:82:db:
         58:ef:0d:50:93:a5:33:d1:25:93:77:dc:ea:e2:48:d2:26:87:
         2d:02:b9:e1:82:01:08:68:48:ee:af:7e:5a:31:1c:31:bb:fe:
         e0:71:ba:53:60:ba:95:56:82:30:1f:db:22:ad:5e:c2:e9:df:
         88:62:15:46:7c:2f:53:2d:d5:d6:80:35:46:4c:ad:d2:6b:01:
         db:2c:9c:36:0d:f4:b4:a8:cf:ee:12:40:6c:08:66:08:1d:c6:
         1c:a9:61:5b:d6:73:ec:12:65:18:bb:3e:ba:54:db:2c:14:50:
         dd:e5:b9:95:20:9c:05:d7:01:60:c3:b9:4b:5e:e2:1a:e0:b1:
         f5:d1:6d:ab:73:ca:06:63:ee:c3:c8:36:86:ff:2d:44:50:6d:
         0d:69:83:f0:12:06:7d:e1:5b:e8:42:39:12:74:3a:1b:88:82:
         d4:4f:06:0e:0d:76:a0:9b:f3:6d:00:fa:fe:87:3f:7b:5c:12:
         74:7c:58:4b:9c:37:21:91:c4:fa:40:00:9f:fe:c4:b6:06:7f:
         35:dc:3c:3b:79:2a:df:f5:97:63:84:ff:f3:1d:14:0e:7c:cf:
         bb:50:1a:a6:46:b8:54:60:fd:5a:2d:7c:93:36:a3:c2:32:c5:
         01:9c:9d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:55:06 2025 by rpki-client