Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/079a8a66-d978-3621-9831-8ef418f8f00a.roa
File:                     079a8a66-d978-3621-9831-8ef418f8f00a.roa (raw, json)
Hash identifier:          ya0Wv1eyDyFelhbepTUZmumijkzXan+ya01qr1LCUpU=
Subject key identifier:   E3:7A:48:5C:90:4B:8D:13:44:6E:8B:95:1B:2F:4E:C3:A9:ED:E5:F7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A23394C09752D27CEF70F40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/079a8a66-d978-3621-9831-8ef418f8f00a.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        34.167.0.0/16 maxlen: 16
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:23:39:4c:09:75:2d:27:ce:f7:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=87c4d17c-4c9b-4934-a7ad-99cd87422715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:97:28:a8:b4:b3:8e:58:21:c4:f5:20:81:
                    92:eb:bd:1e:c8:31:7c:ca:1e:dc:fb:15:95:e7:0e:
                    6e:81:a8:c3:bb:a3:bd:d6:63:06:d7:95:1e:62:0a:
                    5c:0d:2f:27:d9:a9:7c:cd:dc:02:6b:2a:7b:16:e4:
                    ba:d0:e0:10:63:61:94:e0:e7:94:97:16:4d:4c:0b:
                    02:6c:07:a8:cf:0d:47:b3:cb:7b:e4:f3:4c:3f:15:
                    84:29:84:ec:49:f5:32:0d:72:bf:55:1e:e8:44:9b:
                    12:b1:59:d1:4b:84:69:99:64:b3:49:64:22:84:a2:
                    5e:5c:48:1a:62:5b:32:10:17:f8:ec:93:c7:db:bf:
                    51:55:8f:c2:4e:a8:f6:f3:ba:cb:b4:a6:c6:5b:0d:
                    28:8d:6a:2d:bf:81:0a:ea:bd:95:ac:73:60:d0:ac:
                    bf:9f:ba:59:43:60:60:b5:34:8e:44:02:9c:47:a4:
                    00:4f:d3:94:08:a1:91:d0:ae:34:36:24:22:e9:dc:
                    64:30:ff:d1:f2:71:cc:4b:c4:de:94:d6:9a:08:91:
                    a6:83:32:be:72:2b:02:d5:f9:93:ca:44:e4:6b:51:
                    f5:13:b9:53:65:72:ab:6e:d3:f8:b8:16:a9:3e:41:
                    f6:c1:35:89:39:94:18:14:4d:c1:a2:09:6e:89:9a:
                    4a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7A:48:5C:90:4B:8D:13:44:6E:8B:95:1B:2F:4E:C3:A9:ED:E5:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/079a8a66-d978-3621-9831-8ef418f8f00a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.167.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:eb:49:54:6d:f9:b2:93:d2:62:91:f6:c7:ca:ef:21:57:a4:
         58:1e:d1:55:ae:29:8d:8d:3d:19:0d:52:0b:68:86:f5:d7:04:
         a6:1d:13:fa:79:b6:09:aa:f6:48:31:4a:3e:52:5e:e9:7c:fb:
         4f:43:a5:e0:c9:53:a6:28:eb:04:48:37:ba:8f:39:ee:aa:b9:
         14:bb:b0:2d:ad:25:48:96:99:84:94:82:02:f5:7a:b6:8e:e8:
         41:c0:85:58:85:36:66:e7:57:3f:20:33:68:de:92:45:25:9c:
         8f:1f:ec:c4:27:b7:b9:ff:c0:43:10:c4:f8:09:da:d1:b6:82:
         3c:d4:85:de:c1:47:1c:53:6c:6e:4d:bb:93:f8:d2:ca:71:fd:
         e0:f6:c2:ba:cb:76:6a:ae:ae:1c:4a:18:81:8f:b9:af:c8:82:
         15:35:81:43:31:47:22:69:f2:c4:6b:8e:15:e7:81:6b:6d:9b:
         7b:0c:65:b1:a4:02:ea:d4:ca:5e:09:45:49:8d:eb:34:ce:11:
         17:84:30:d8:a7:d2:f1:1e:39:a7:b5:b6:90:3a:c0:92:44:23:
         fa:14:10:37:ca:a9:9a:42:83:ab:dd:4d:47:29:82:37:1e:0e:
         f6:a0:c0:76:fa:68:a7:a4:22:1c:3a:93:03:fd:6b:f0:92:9a:
         50:08:56:4c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEMKIzlMCXUtJ873D0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ODdjNGQxN2MtNGM5Yi00OTM0LWE3YWQtOTljZDg3NDIyNzE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxKXKKi0s45YIcT1IIGS670eyDF8yh7c+xWV
5w5ugajDu6O91mMG15UeYgpcDS8n2al8zdwCayp7FuS60OAQY2GU4OeUlxZNTAsC
bAeozw1Hs8t75PNMPxWEKYTsSfUyDXK/VR7oRJsSsVnRS4RpmWSzSWQihKJeXEga
YlsyEBf47JPH279RVY/CTqj287rLtKbGWw0ojWotv4EK6r2VrHNg0Ky/n7pZQ2Bg
tTSORAKcR6QAT9OUCKGR0K40NiQi6dxkMP/R8nHMS8TelNaaCJGmgzK+cisC1fmT
ykTka1H1E7lTZXKrbtP4uBapPkH2wTWJOZQYFE3BogluiZpKuwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFON6SFyQS40TRG6LlRsvTsOp7eX3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDc5YThhNjYtZDk3OC0z
NjIxLTk4MzEtOGVmNDE4ZjhmMDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIqcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVOtJVG35spPSYpH2x8rvIVekWB7RVa4pjY09GQ1SC2iG9dcEph0T+nm2
Car2SDFKPlJe6Xz7T0Ol4MlTpijrBEg3uo857qq5FLuwLa0lSJaZhJSCAvV6to7o
QcCFWIU2ZudXPyAzaN6SRSWcjx/sxCe3uf/AQxDE+Ana0baCPNSF3sFHHFNsbk27
k/jSynH94PbCust2aq6uHEoYgY+5r8iCFTWBQzFHImnyxGuOFeeBa22bewxlsaQC
6tTKXglFSY3rNM4RF4Qw2KfS8R45p7W2kDrAkkQj+hQQN8qpmkKDq91NRymCNx4O
9qDAdvpop6QiHDqTA/1r8JKaUAhWTA==
-----END CERTIFICATE-----
Generated at Sat May 10 13:39:12 2025 by rpki-client