Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a40dc4ae-9f5a-33b7-961e-0ee5fce74aeb.roa
File:                     a40dc4ae-9f5a-33b7-961e-0ee5fce74aeb.roa (raw, json)
Hash identifier:          uKODppZp1yYMICu9xHwXoZLd5hgti4NUACCW73DKvow=
Subject key identifier:   A0:70:F3:24:D9:50:27:E1:D9:DF:21:B1:CA:81:3C:08:21:C7:24:9E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7BBFE5E3C952C88B78F2900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a40dc4ae-9f5a-33b7-961e-0ee5fce74aeb.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        35.225.160.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bb:fe:5e:3c:95:2c:88:b7:8f:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=0cde0b0d-ba7a-43a9-ac75-9f9ce081a3d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f3:f6:2b:0e:90:c8:d1:91:81:4c:8e:16:74:
                    5e:0e:41:b6:09:ae:91:f7:74:48:87:67:d7:a5:a2:
                    c3:c8:0b:7c:5e:04:4e:87:b6:17:30:2e:5f:f0:cd:
                    76:98:92:44:eb:b6:36:c1:e4:80:60:18:df:c5:9a:
                    33:fe:a4:88:f1:0e:cf:c1:4a:45:70:81:df:db:08:
                    9f:4f:ea:56:bc:90:66:ad:a9:52:5a:2a:85:a4:c3:
                    34:7b:92:e0:d0:6a:5a:55:60:07:07:e3:b3:2d:40:
                    7a:98:5c:4d:da:00:8f:26:04:81:22:0f:38:78:ad:
                    7e:d4:2c:5e:0b:16:49:17:d5:49:d6:fb:2d:0c:45:
                    26:c0:eb:2d:00:62:fe:46:dc:29:e7:5a:77:34:b6:
                    8f:c9:93:53:47:ea:3c:dd:63:dd:da:14:c7:27:cc:
                    94:87:71:b4:a8:1a:3b:0f:b7:7a:24:d0:fb:5b:df:
                    5f:86:fa:11:d1:87:b3:55:24:84:53:f2:80:cf:3b:
                    95:fa:be:7e:98:db:d1:47:c2:49:f6:61:e9:2a:75:
                    77:03:e1:26:53:3e:f2:7e:62:86:ba:2c:43:0c:95:
                    19:e8:86:16:12:9a:9d:d7:48:a0:1d:79:27:bf:8d:
                    5e:0a:74:a8:0c:06:9b:a4:69:be:3c:c3:45:50:7b:
                    e5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:70:F3:24:D9:50:27:E1:D9:DF:21:B1:CA:81:3C:08:21:C7:24:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a40dc4ae-9f5a-33b7-961e-0ee5fce74aeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.225.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:6d:30:cc:ed:3f:2f:1a:3c:49:0d:cb:2e:65:41:ab:47:9d:
         b2:dd:e0:ae:2b:d6:d2:4b:d6:28:7a:6b:ec:34:0f:9d:c9:19:
         69:f6:f8:ec:9f:6a:e9:09:33:f9:cb:73:77:7b:7c:79:18:5c:
         d4:48:ed:54:2a:26:49:05:1e:ac:1e:20:6f:54:a4:ff:f0:21:
         c5:d4:1b:30:59:8b:f3:ef:76:82:de:c7:1a:ca:85:95:4e:5d:
         dd:7d:4f:94:07:01:b1:e1:c5:56:31:9e:e3:ee:87:f0:e0:9e:
         1c:21:42:7d:03:4d:81:ed:cf:9c:f0:c0:03:5e:91:e9:44:9b:
         0b:da:e3:75:fc:88:08:73:61:e6:6c:84:7b:43:03:3c:96:b1:
         a4:17:07:00:76:22:b3:5e:59:7c:32:ca:91:a8:47:19:1e:f1:
         5a:52:e3:36:a6:6f:a7:ea:c4:cf:29:18:75:36:a7:91:b5:9d:
         de:7b:aa:15:c9:e3:07:b0:df:43:05:bc:ae:ee:97:73:f0:41:
         db:23:3f:a0:ec:fb:a1:ad:3e:fe:05:e9:99:74:3e:ad:21:54:
         ed:b7:70:a0:bd:16:0a:5f:76:e7:e5:a6:95:3e:74:e1:21:56:
         5f:47:a2:c9:e1:5f:ac:af:17:fb:d8:73:ae:b4:ab:df:a4:25:
         e3:f8:e2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:21 2023 by rpki-client on console-ams.rpki-client.org