Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5fe9b88-5308-31fc-a904-a4a5a8aedbaf.roa
File:                     f5fe9b88-5308-31fc-a904-a4a5a8aedbaf.roa (raw, json)
Hash identifier:          6U53KAhWztgyALGkyjX64PUEyfNk/RxuYKhVl0Dilpg=
Subject key identifier:   BC:CE:22:9C:D9:5E:BB:D7:48:4C:0F:63:72:93:76:06:15:04:1A:E8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A0BAA54D0B3EF79592C6320
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5fe9b88-5308-31fc-a904-a4a5a8aedbaf.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.223.208.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0b:aa:54:d0:b3:ef:79:59:2c:63:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=15992044-8353-4717-848d-d333a12fe673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:dc:a3:34:42:ec:47:01:fa:96:12:5c:17:ba:
                    b3:bc:2e:bb:ad:5a:ea:cb:4c:70:99:53:d7:71:48:
                    b4:22:07:ac:a1:73:94:45:65:b8:3b:63:13:6d:63:
                    f1:4f:41:d5:a3:62:1c:a5:3a:a7:81:a1:33:0a:26:
                    f4:c2:10:54:8f:e4:eb:e5:18:dc:89:3e:57:e8:dd:
                    ef:32:b4:71:84:c8:86:6c:00:64:3a:07:b4:17:86:
                    58:19:b1:91:68:dc:01:f7:82:41:67:91:f6:58:fe:
                    0b:c5:04:86:bf:9e:e2:5f:a4:b5:eb:0d:fd:55:9c:
                    50:20:db:d0:d1:7c:61:fe:16:e8:a1:7e:42:88:d9:
                    17:cf:fe:3f:9e:f0:2b:63:33:cc:bf:1e:d9:89:40:
                    34:7d:98:4f:32:27:e2:3d:37:aa:2e:6d:d6:0f:57:
                    cd:39:ea:6d:1f:59:4c:3f:8e:a0:85:6b:0b:2d:70:
                    ee:e3:40:79:95:c2:0a:02:2f:08:dc:0c:f4:64:5a:
                    42:b2:ff:22:50:6b:2d:59:a1:ec:3d:fe:08:6b:bc:
                    f3:d4:89:1a:8d:e9:90:c6:31:c3:6e:47:99:2b:98:
                    65:73:95:1e:78:9f:ef:88:48:d3:aa:10:5b:42:57:
                    53:ed:ff:80:c0:a4:91:df:21:28:24:dd:c4:40:3d:
                    f6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CE:22:9C:D9:5E:BB:D7:48:4C:0F:63:72:93:76:06:15:04:1A:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5fe9b88-5308-31fc-a904-a4a5a8aedbaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.223.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:48:f1:ef:9b:32:47:7d:ba:64:b6:b3:09:b3:35:06:44:5e:
         97:5b:12:fa:8a:3b:44:81:72:e2:95:33:cb:22:d5:11:d4:38:
         f4:9b:05:a7:6e:71:1a:74:5b:b8:36:b9:9e:af:b4:9f:59:5d:
         de:89:66:92:b7:c4:3b:39:31:a5:96:66:77:5e:02:0b:8e:44:
         c2:cf:43:88:a6:50:d4:54:87:7a:e4:58:a9:5c:d5:cf:af:ca:
         80:46:4a:71:7d:52:6c:ff:e7:42:2f:65:cd:1a:b8:6e:b6:79:
         a7:be:1d:96:4f:2d:3d:c2:92:23:57:06:c4:aa:aa:ed:59:3d:
         bf:c4:89:42:4b:a1:51:1d:ae:d8:9d:46:84:45:2d:ff:fd:02:
         99:b2:cc:1a:12:74:d9:07:4b:95:a3:34:16:d7:35:41:75:e4:
         e4:ce:6c:da:ca:8a:18:bf:26:64:d2:66:2f:74:14:8c:2d:32:
         0e:c7:56:ed:f1:36:75:64:60:9b:41:36:2d:66:0d:9e:65:e2:
         0e:cd:8b:83:b1:ea:4e:e6:7b:1a:b3:24:25:8a:f7:df:b1:11:
         bd:02:83:f0:99:6f:7d:fe:ef:01:91:dc:cc:0e:d0:da:86:2d:
         ff:a1:43:26:50:35:a9:a1:19:00:97:e3:81:53:e0:08:d7:ec:
         ad:5e:37:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:42:45 2025 by rpki-client