Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddc1edc9-1146-30bf-bb79-f2743b21d732.roa
File:                     ddc1edc9-1146-30bf-bb79-f2743b21d732.roa (raw, json)
Hash identifier:          EvuMDUR1183cRvqsEvidGDeVEivXFj+YG4s/Mccmavo=
Subject key identifier:   ED:4F:7B:6F:14:46:6A:F5:48:EF:CE:62:13:CB:87:A8:64:21:9A:4D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309EBCF89E82FBCF72F03A200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddc1edc9-1146-30bf-bb79-f2743b21d732.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        35.188.96.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:eb:cf:89:e8:2f:bc:f7:2f:03:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=9e5d8e2c-76ce-49a4-97c3-e7911b0a3a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ac:9f:ce:3b:71:99:7d:28:17:43:ce:5b:58:
                    8c:89:75:43:23:1c:0a:45:29:d1:cf:90:dd:0d:8f:
                    b3:21:36:1d:20:c5:b8:60:6f:b2:5a:8f:94:84:68:
                    d8:23:3d:29:ca:a8:26:68:5e:25:bb:e9:a7:47:a6:
                    8a:a8:7b:ea:ab:19:b3:e3:4c:45:af:0f:de:51:25:
                    b4:df:06:34:0c:ea:69:f3:ad:d9:73:c4:73:ae:ab:
                    2a:57:cb:2e:7c:98:2c:18:e2:c5:30:70:f6:39:1f:
                    dd:81:2b:c8:b4:66:f7:2c:32:d9:73:cf:9a:bc:12:
                    c7:a4:0e:08:7b:53:cc:f9:6b:c4:8b:45:0e:c1:e8:
                    94:08:9d:6c:81:a2:59:7d:14:b3:aa:8b:91:d9:67:
                    fd:ff:60:64:2a:fb:ee:06:ae:7e:66:a0:1e:47:02:
                    bc:9a:1e:3c:68:35:f8:c3:2e:3a:8a:b4:90:be:a1:
                    ae:1b:ff:a8:d6:84:07:31:65:f5:a7:4b:8e:5b:9a:
                    86:d4:de:12:fd:b3:98:61:a0:2a:53:1d:6e:90:6a:
                    20:00:50:26:6f:a5:38:97:de:dd:e4:10:3e:31:58:
                    56:99:8b:5d:d1:20:7b:44:60:9b:a5:9a:17:4c:da:
                    cf:a5:b6:69:39:71:d7:85:62:46:75:d5:3c:80:31:
                    f3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4F:7B:6F:14:46:6A:F5:48:EF:CE:62:13:CB:87:A8:64:21:9A:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddc1edc9-1146-30bf-bb79-f2743b21d732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.188.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:9e:df:ef:63:ba:3a:22:ad:f2:90:0b:d9:1f:76:50:3a:29:
         aa:53:22:52:03:6a:94:62:a9:e9:58:a4:23:f1:9e:51:db:c5:
         ee:71:01:8e:89:98:d0:62:02:df:7b:d6:a7:87:9c:56:de:ec:
         eb:5d:ff:83:b3:86:20:a0:bc:c9:75:70:df:b4:6a:76:a7:66:
         e5:2b:4a:9c:47:ad:96:e6:72:ff:cc:1e:40:3c:09:79:c7:57:
         7b:d0:2e:37:5e:68:8b:98:44:a4:bc:fe:27:4e:64:86:13:0b:
         7f:49:ae:f0:0b:da:b3:c9:91:84:d6:c4:17:51:94:35:c7:9d:
         06:7d:7b:57:78:c1:1c:ec:dc:67:28:5e:0f:64:c6:fa:9e:26:
         54:86:0f:c9:e1:a1:b1:95:12:b1:40:f2:df:d5:69:90:87:55:
         b2:0d:58:ff:1d:67:31:a2:e5:95:c2:9d:28:02:69:91:cd:6d:
         9a:ab:d5:f3:ee:c2:0e:f8:5c:d8:d9:b3:95:31:f5:07:60:0a:
         34:d1:db:12:3c:49:66:e6:b9:4b:ca:43:f1:55:49:72:dc:ba:
         5b:ac:0a:43:87:02:47:a9:bb:cc:fb:90:74:ab:41:bd:bb:6d:
         a5:0b:e2:ed:fd:56:20:39:6e:34:b4:03:3f:90:35:1e:94:ef:
         f6:14:ad:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:57:49 2025 by rpki-client