Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ee7d7f01-535b-3096-816f-c9c3940b4203.roa
File:                     ee7d7f01-535b-3096-816f-c9c3940b4203.roa (raw, json)
Hash identifier:          mIrrs7HwJspR3XrfcG31Sn5HAs8bVbKt/I8fCWXfHqo=
Subject key identifier:   7F:95:E3:8C:E2:FF:31:06:9E:F8:81:49:F1:02:6B:36:9F:0E:AC:01
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7B823A72931E8BEE110AA80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ee7d7f01-535b-3096-816f-c9c3940b4203.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        35.192.128.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b8:23:a7:29:31:e8:be:e1:10:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=cad6002b-921b-4416-bdd6-95dd550a9515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:be:8e:b1:8c:6a:df:96:3f:dc:0c:ee:b2:90:
                    6e:22:1c:09:f0:cb:c3:2b:df:34:3d:ca:78:7f:c3:
                    09:29:42:06:af:3c:90:c5:03:3e:46:f2:82:9f:83:
                    00:d4:4e:44:85:31:7c:c0:90:7f:aa:96:3e:47:9c:
                    17:86:70:9c:0b:53:38:97:96:82:1c:68:b4:68:bb:
                    16:a8:e1:17:c2:67:d5:1b:e8:71:c9:51:6e:48:96:
                    e3:39:a2:47:89:5d:f3:2e:a2:ca:1b:d0:a0:34:de:
                    a3:e3:28:1e:83:31:c6:30:cc:28:d2:fb:0f:5b:a7:
                    c8:bf:63:d4:1f:8a:ff:31:0e:c9:e1:b5:cb:f5:36:
                    74:b9:54:4f:38:46:ca:41:b0:b6:c1:45:75:4f:fb:
                    28:2a:42:30:3b:f4:78:c8:5a:b1:09:08:61:5a:78:
                    7f:33:41:99:be:c4:60:bb:06:aa:a6:3e:f5:f3:58:
                    e5:57:95:c4:f6:0e:94:5f:fe:54:3c:e9:ba:53:30:
                    95:8f:ad:44:64:29:98:da:3d:79:63:de:7a:04:e0:
                    2a:cb:42:fc:51:04:2b:03:5b:bc:3c:37:eb:f7:12:
                    b0:3a:7b:2e:ca:15:b0:d0:f7:57:a9:aa:24:98:0c:
                    db:81:0b:31:4b:bc:45:06:f6:31:96:c3:de:49:43:
                    e2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:95:E3:8C:E2:FF:31:06:9E:F8:81:49:F1:02:6B:36:9F:0E:AC:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ee7d7f01-535b-3096-816f-c9c3940b4203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.192.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:bf:00:5a:87:93:49:64:76:0f:ff:19:6d:1b:0a:aa:07:4c:
         32:60:dc:cd:91:82:b4:12:da:b1:6d:17:53:1e:01:48:28:bb:
         04:4e:d7:c9:9e:1e:48:0b:ab:8f:48:86:ab:b2:79:cf:cb:b3:
         61:27:3a:bf:bc:92:7b:14:01:b5:ee:80:26:dd:fd:89:3e:12:
         b5:1d:b1:51:da:10:46:c9:7f:35:73:f1:ee:e8:a8:6d:bc:10:
         0a:f3:e5:00:36:84:c9:83:5a:ce:a9:38:fc:13:0c:81:73:54:
         fc:77:73:eb:f5:50:8f:80:af:9d:ab:5a:34:7c:d1:5f:bd:65:
         f5:b3:19:7a:88:1b:7e:ba:fe:69:cf:a7:cb:81:46:55:07:ff:
         b3:3d:4d:75:34:bf:c1:c7:a4:02:e5:6d:95:db:fc:d9:49:ef:
         6c:42:65:9f:c6:d1:f2:2e:e3:82:82:02:0a:c1:2c:5e:c3:a0:
         4f:cc:f0:ff:b4:b7:e2:4a:ee:d1:8c:b4:f2:3d:bb:fb:2e:1e:
         15:11:85:f9:fb:1b:d4:39:df:a0:11:94:77:0e:74:f7:1f:d1:
         82:28:70:ec:33:d1:05:fc:57:09:e9:c4:8f:3d:38:9c:df:1d:
         40:10:90:eb:45:56:78:7e:45:04:3b:6c:a8:8c:af:8c:12:24:
         94:90:9b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:26:12 2025 by rpki-client