Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a4ae142-fd7e-33a3-8c40-2e66a8c44783.roa
File:                     0a4ae142-fd7e-33a3-8c40-2e66a8c44783.roa (raw, json)
Hash identifier:          uqA0KVmj4v2bcbVf0h/DmZXZaWwVSKLV9dRK7jlTHOs=
Subject key identifier:   CD:96:F7:8C:68:CC:FE:30:29:C9:1E:9A:AF:BB:EF:69:4B:DE:9D:F7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309EBA751BD104573E3215E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a4ae142-fd7e-33a3-8c40-2e66a8c44783.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.88.224.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:eb:a7:51:bd:10:45:73:e3:21:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=2a58e5a1-bb94-4b94-89ef-af020cec8245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:ea:7a:ce:ca:22:a2:ff:d6:5e:50:46:03:
                    18:00:4c:f5:52:0c:17:e6:3a:39:87:f6:cf:b9:46:
                    de:18:bc:8e:e4:66:67:2b:fd:02:c1:fc:f7:42:b1:
                    e2:07:5e:fd:2e:f3:70:71:60:5f:26:2a:30:31:2c:
                    8e:83:35:63:df:ba:81:ef:d8:ee:58:99:58:21:dc:
                    24:c5:be:67:2a:9a:b3:8f:28:2c:d0:70:a7:7b:df:
                    1e:52:ed:cc:08:d3:75:62:3b:8d:3f:97:82:b0:52:
                    c6:9f:ee:a7:07:55:83:72:e2:db:e0:ab:4f:dc:62:
                    d6:d2:41:7d:05:48:a6:af:6b:65:01:76:58:6e:46:
                    ac:b0:fe:25:17:a6:00:a8:58:2e:81:cd:a0:0e:4d:
                    12:fc:d2:d6:ef:9e:93:df:ec:7e:ff:61:7d:ea:7b:
                    76:86:43:05:be:ad:14:09:c3:0e:a0:ad:c0:56:d7:
                    a9:5e:17:75:8c:88:fd:40:d5:40:c3:fb:12:ef:b5:
                    99:af:86:10:f5:57:38:70:22:bb:0b:f5:f8:51:61:
                    a4:ee:fe:52:aa:3e:1a:43:84:d1:9a:a9:bd:81:bd:
                    ec:b0:e0:0a:28:43:2e:b9:00:23:85:e2:a3:4c:c6:
                    e5:89:74:fb:f9:51:5c:8e:cb:67:3b:1a:4e:f3:9d:
                    b0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:96:F7:8C:68:CC:FE:30:29:C9:1E:9A:AF:BB:EF:69:4B:DE:9D:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a4ae142-fd7e-33a3-8c40-2e66a8c44783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.88.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:26:d9:4d:d3:41:55:e2:f3:7c:7a:24:06:8c:fa:79:18:e3:
         35:bb:99:bf:7b:43:bb:4f:d9:1e:f3:98:f3:28:64:7d:2d:fa:
         1b:bb:77:a9:1c:38:d4:49:f6:83:86:4e:e4:c8:d0:74:2b:9a:
         70:82:52:cf:b6:d8:22:d5:90:c7:4d:3b:54:f3:56:22:82:7e:
         23:13:05:5a:48:dd:b0:2b:de:71:ec:52:f7:06:9d:60:44:cc:
         a7:e3:70:fc:10:62:88:cc:89:56:8c:88:26:f5:38:b0:dc:59:
         5a:73:92:d4:4f:3f:87:9b:63:02:a1:d5:de:9c:a8:58:58:54:
         4a:e7:e7:96:f6:0c:a2:68:d7:ff:19:4c:02:ce:8e:58:e8:22:
         94:3b:52:31:b3:7e:18:59:92:26:e2:f3:7d:d1:79:ad:ce:d7:
         68:3a:60:46:39:7f:8d:fe:ef:da:1c:d1:67:98:73:87:9c:d1:
         70:72:3f:ac:8d:90:af:eb:7e:b1:e7:4d:e6:f6:5e:b9:cd:52:
         c6:e6:d3:c6:3b:13:dc:b4:79:60:d9:dc:ce:2e:7a:4c:18:5c:
         7b:2e:7c:9e:61:2d:eb:34:dd:58:b3:b0:da:1b:10:53:fc:cb:
         6a:82:5d:26:35:21:9d:87:a7:76:08:71:a3:07:1d:ec:67:47:
         bd:03:ea:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:36:31 2025 by rpki-client