Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/082f8580-c2a7-3397-aedf-064db350f6d1.roa
File:                     082f8580-c2a7-3397-aedf-064db350f6d1.roa (raw, json)
Hash identifier:          PGPanDPyM0dCS7yPDdMZE2h6vVTApq87cMZ/XyYbxnM=
Subject key identifier:   37:1F:77:C5:68:99:6C:21:62:9F:28:E7:DF:61:17:A0:78:F5:AF:F9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584347DC88E210DBCB5B31BBBD80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/082f8580-c2a7-3397-aedf-064db350f6d1.roa
Signing time:             Mon 18 Sep 2023 12:00:00 +0000
ROA not before:           Mon 18 Sep 2023 12:00:00 +0000
ROA not after:            Thu 30 Jan 2025 05:00:00 +0000
asID:                     15169
IP address blocks:        34.1.64.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:47:dc:88:e2:10:db:cb:5b:31:bb:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 18 12:00:00 2023 GMT
            Not After : Jan 30 05:00:00 2025 GMT
        Subject: CN=f152f30a-3f70-429d-881e-157ff839c9ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6d:27:a3:0f:17:b6:dc:d9:9f:28:d8:49:3a:
                    af:3a:a3:17:c2:cc:b0:49:53:3b:68:50:8b:ae:68:
                    cb:4b:d1:87:1c:63:38:b2:f4:fc:d2:14:ff:f3:db:
                    00:a4:7a:2c:f5:64:52:43:57:0a:8d:6c:db:5c:a1:
                    2e:f8:8a:43:ab:42:48:4c:23:65:f2:68:f5:58:3d:
                    d3:4d:45:15:4f:00:af:aa:cb:ec:f5:46:4c:f8:5d:
                    65:03:63:bd:51:d3:d8:f2:37:85:c5:a9:ab:f0:eb:
                    d4:20:9c:e5:c0:e8:bf:7d:e0:b1:d3:0d:8b:8b:89:
                    06:7d:95:15:58:43:8b:ee:a8:9f:fa:f3:b0:97:8e:
                    60:ca:18:f6:aa:07:3a:d1:a7:c9:7c:ee:fd:c5:00:
                    b8:60:6d:b2:93:7f:7e:87:ff:8c:f3:72:49:f8:b7:
                    66:eb:06:b8:9e:3e:b3:cb:5d:e2:3f:d4:1e:1f:b3:
                    0c:05:36:4a:23:fb:54:c8:60:63:29:32:5b:c7:68:
                    eb:c2:1a:ec:12:d9:ce:5d:53:ee:cf:83:91:66:8c:
                    18:2e:51:8c:10:98:8f:8b:47:79:48:53:c9:51:02:
                    84:48:83:ac:93:5b:ed:61:fe:a7:0a:78:b3:b2:16:
                    b1:99:7d:de:e2:4f:8e:b0:40:b0:8c:42:bb:00:08:
                    6b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1F:77:C5:68:99:6C:21:62:9F:28:E7:DF:61:17:A0:78:F5:AF:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/082f8580-c2a7-3397-aedf-064db350f6d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:05:ee:c9:2a:f2:62:22:e7:52:60:92:33:77:39:e6:00:d7:
         83:0a:91:9e:db:9a:0f:5d:46:b4:74:f1:76:31:fa:67:3d:db:
         5a:79:97:65:37:47:8f:e9:87:76:5e:33:0b:bc:05:af:83:75:
         49:8d:ed:06:d2:42:62:0e:ed:6e:24:57:13:b1:3a:19:b8:57:
         eb:d7:00:9f:0f:b1:e2:09:4d:31:b8:d0:19:22:25:6d:92:93:
         cc:a4:3b:9e:66:20:34:17:17:86:81:e0:67:a1:c8:c8:1b:bf:
         a1:67:a6:17:7a:80:a5:0b:62:1d:62:6c:19:3d:e9:be:57:1a:
         01:ae:c3:fd:31:b9:9f:f3:e8:ab:7a:31:39:3d:2c:4e:32:f4:
         ee:b8:a8:13:a3:d9:c2:b8:b8:26:cd:ed:a4:8c:63:95:81:77:
         d1:85:ad:66:bb:07:bf:7d:f4:45:3f:5b:9b:a6:19:57:78:c9:
         de:e0:cb:db:25:79:a7:f8:23:db:c3:e1:89:de:f0:0b:0e:b0:
         23:bc:d2:2a:cb:cd:c6:b0:8d:f4:b7:b7:3c:41:90:14:bc:f4:
         70:62:4d:67:9f:83:41:6e:83:70:fb:64:eb:a7:06:3d:c6:1e:
         05:0c:32:85:b1:eb:c2:d6:0e:9b:a5:73:c3:f5:1b:f0:e5:56:
         7b:58:82:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:59:13 2025 by rpki-client