Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20e2bd3d-875d-36a8-add1-f8b2fd2edd8a.roa
File:                     20e2bd3d-875d-36a8-add1-f8b2fd2edd8a.roa (raw, json)
Hash identifier:          j0eK2DQKPiVKzPeMBmXUsSFBGB/19uehRh2DnVabKjc=
Subject key identifier:   27:E0:C3:0E:B8:4C:2C:6B:42:74:E8:CB:DA:6E:1B:78:D6:25:B1:2D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A01CF710D071291087320C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20e2bd3d-875d-36a8-add1-f8b2fd2edd8a.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.77.48.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:01:cf:71:0d:07:12:91:08:73:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=6ef9c03a-4ae9-4262-aa29-4f05b8e5a46e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f4:ff:b4:62:28:e8:bc:0a:15:5f:bb:76:65:
                    9d:78:88:af:89:16:4a:3a:81:cf:d4:08:c8:73:df:
                    42:2b:2a:f0:20:08:38:54:ca:39:7f:4b:f4:b8:13:
                    e6:63:71:e5:89:24:a1:cc:52:f8:4e:8d:8a:96:65:
                    02:34:29:3b:85:19:b5:be:bb:e4:5e:5b:b6:af:b8:
                    b1:b1:d2:39:44:02:d7:ef:f9:73:57:ca:a7:73:2c:
                    02:c9:02:02:6b:2a:dc:40:20:a3:c6:81:49:e3:18:
                    59:b2:a8:06:c2:76:01:2f:86:94:f1:35:37:d0:70:
                    04:4c:1b:c1:35:eb:45:8e:3a:f4:45:2c:cf:45:e4:
                    de:d2:4b:08:07:4f:67:6e:94:92:47:4c:73:a3:9a:
                    9e:33:d1:ba:a1:13:d9:5a:60:74:a2:dc:62:73:85:
                    a0:8e:9a:75:e2:28:d2:be:8e:f0:ba:a0:cb:49:8e:
                    87:ce:7c:62:34:9a:ee:66:10:da:02:a7:0b:b8:af:
                    62:fb:f5:62:7e:af:fd:c3:74:18:05:f2:c4:fc:02:
                    85:f1:42:a1:25:a1:1b:05:12:e5:fe:df:13:93:eb:
                    73:67:12:90:2f:98:60:e8:71:ec:a6:89:18:68:b6:
                    f4:1d:47:43:e8:6d:e8:00:a1:7e:a3:9c:a6:9e:d6:
                    7f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E0:C3:0E:B8:4C:2C:6B:42:74:E8:CB:DA:6E:1B:78:D6:25:B1:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20e2bd3d-875d-36a8-add1-f8b2fd2edd8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.77.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:fc:e9:7a:6f:83:61:c3:32:90:06:35:e4:25:de:f8:bf:ca:
         b2:91:c2:17:e2:ef:24:36:46:c5:a9:ef:f8:98:0f:22:d1:bc:
         7b:05:c4:5f:2c:96:cf:71:3c:19:89:37:ba:df:04:1d:76:7a:
         19:34:c9:73:58:8d:63:95:e1:f2:8c:35:4f:69:f7:2d:1c:93:
         75:8e:59:a2:a4:42:b8:11:94:31:75:2f:4a:08:76:e0:47:12:
         b3:13:12:91:82:0a:fd:8a:40:36:e3:e0:a0:a6:3b:7b:54:51:
         21:e2:2e:30:df:7b:d3:24:a6:93:41:81:19:f7:eb:54:23:0d:
         8e:fd:5e:9c:07:c5:d7:74:9f:01:56:25:f1:4e:ac:ae:0f:6d:
         8b:44:f0:e4:5a:73:58:96:37:97:b6:a7:37:1c:a2:15:d8:3d:
         be:b9:24:2c:7e:f5:e3:e2:da:ea:85:4e:cd:ed:b2:47:8d:ae:
         1b:c3:32:e2:48:a2:0d:83:68:1a:9f:32:a1:17:2d:b0:20:45:
         4e:ff:d9:e6:ee:90:93:4e:e9:35:53:34:05:c2:f6:cc:f0:fc:
         f9:63:d3:55:a0:e2:4a:5b:f8:7e:78:4e:f8:0f:3d:b2:61:ec:
         15:e8:bc:63:e7:47:2a:4f:6c:01:8d:a5:7f:a0:0f:1f:fb:c3:
         ad:4d:5a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:22:16 2025 by rpki-client