Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/169d7ad7-9f35-38f8-8d12-0a4832722ecd.roa
File:                     169d7ad7-9f35-38f8-8d12-0a4832722ecd.roa (raw, json)
Hash identifier:          BuuLVVDvkpWq7thuUWebJydQYYaizO5kdgSAKpFurEM=
Subject key identifier:   BB:2E:21:2B:4D:1E:90:9C:4E:A8:AC:CD:AA:AD:9A:02:83:2B:EE:93
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847FF4A76E532D5CCC9DD00FBC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/169d7ad7-9f35-38f8-8d12-0a4832722ecd.roa
Signing time:             Mon 25 Nov 2024 14:00:39 +0000
ROA not before:           Mon 25 Nov 2024 14:00:39 +0000
ROA not after:            Sun 23 Feb 2025 14:00:39 +0000
asID:                     396982
IP address blocks:        35.185.96.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:4a:76:e5:32:d5:cc:c9:dd:00:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 25 14:00:39 2024 GMT
            Not After : Feb 23 14:00:39 2025 GMT
        Subject: CN=e488bafc-87fb-47be-b16a-88835d95e688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a3:04:13:d2:ac:43:44:73:94:20:2c:e5:ee:
                    c2:2b:26:b5:b0:a6:94:2c:f2:e4:13:4e:80:f4:8a:
                    e4:22:37:cc:33:03:ca:81:09:92:e0:20:f0:50:e7:
                    be:40:df:14:61:a0:c8:16:05:64:ce:79:e4:25:69:
                    52:92:f7:ba:64:d2:fc:ce:89:c0:36:e9:a8:9b:5d:
                    47:fc:68:17:fb:8f:bf:d4:cd:2c:d7:c8:81:60:99:
                    de:e5:f9:6b:f5:8e:5d:ec:b7:0d:40:53:40:30:d3:
                    60:a2:ae:43:bf:c5:2e:aa:c1:27:60:6b:9c:a0:05:
                    68:df:df:bb:ce:a7:35:4e:7b:e3:79:98:85:ec:9d:
                    6b:42:db:9d:1f:2b:a4:b2:2a:f2:d4:6a:2c:cb:56:
                    08:56:47:95:58:82:c8:a1:63:51:72:e3:0b:84:43:
                    48:90:28:8f:70:e6:58:7e:35:6b:dc:eb:e9:d3:d9:
                    cc:c9:df:86:83:e9:9f:54:cc:b7:df:02:db:fe:1c:
                    09:af:d6:82:96:09:28:1b:5a:7c:ce:0c:1f:b5:0a:
                    1d:e1:90:cd:45:2d:5a:57:79:b7:cd:b9:2d:7a:8b:
                    a5:f7:19:20:e3:5f:9f:73:08:1e:2f:83:ae:d1:07:
                    e6:8a:75:76:22:56:19:f3:e2:96:48:a5:02:5f:bb:
                    35:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2E:21:2B:4D:1E:90:9C:4E:A8:AC:CD:AA:AD:9A:02:83:2B:EE:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/169d7ad7-9f35-38f8-8d12-0a4832722ecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.185.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:fb:e6:65:23:24:ec:98:61:6b:1c:8f:67:f5:39:44:76:32:
         28:c4:54:43:29:4a:17:72:8b:e0:07:c2:89:5c:f6:07:da:3d:
         78:07:0b:1b:6d:8d:c1:cb:37:ed:f8:da:be:a1:4a:8a:42:c1:
         b0:f2:d4:03:bb:3c:14:a3:f1:78:ea:2b:84:43:f3:b0:be:cb:
         cb:c7:30:b7:98:a7:94:dc:9e:b0:60:d1:d5:fd:b5:37:3b:93:
         a3:16:48:e1:bb:ba:bf:bf:d8:60:8e:a6:47:87:6a:02:36:a6:
         53:6b:84:bd:9a:fa:92:81:fd:89:9c:fe:1c:2e:58:42:30:44:
         aa:b4:6b:9a:99:c5:93:f5:dc:e5:b1:49:b6:11:b5:f0:90:39:
         38:44:a2:0b:96:6c:67:2c:43:99:aa:11:9e:a5:08:2a:8a:a7:
         ac:95:4f:b3:bf:91:d7:8e:c8:72:38:3f:63:12:7b:44:f7:e8:
         40:06:22:2d:c6:95:2f:ed:aa:c5:42:b4:a2:49:ad:53:8a:ef:
         9e:43:d7:b2:d4:14:f2:a8:39:38:07:c3:39:e5:a2:82:48:33:
         ff:f3:f8:c9:6d:59:b6:85:5f:fa:0f:c6:09:34:3c:d8:c9:a0:
         aa:17:7b:14:de:5e:89:f5:6d:5b:5c:fc:79:e6:17:75:98:48:
         82:08:40:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:01:00 2025 by rpki-client