Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22c0d9b9-e9e7-337f-9655-87e1346a51b6.roa
File:                     22c0d9b9-e9e7-337f-9655-87e1346a51b6.roa (raw, json)
Hash identifier:          qtKO+wJKgZTojwcssFid2sZUh4OQBSZIWjlD0dljnTc=
Subject key identifier:   7E:9D:D1:9A:15:05:D3:22:2C:DB:AE:6C:60:57:59:2E:7A:22:11:F6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A1BF1391964AB6DDD133088
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22c0d9b9-e9e7-337f-9655-87e1346a51b6.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.141.48.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1b:f1:39:19:64:ab:6d:dd:13:30:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=75040df6-558d-4624-9942-c14615e04b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5c:9e:de:dd:fe:51:10:86:86:51:f4:7f:26:
                    1d:01:5d:99:ac:1c:b4:11:20:9e:e0:b4:47:b3:3d:
                    da:5d:33:c4:55:b6:47:a0:b7:40:fa:fb:15:20:3d:
                    7d:b1:f5:48:bb:8e:f5:56:45:8e:ca:6c:e3:90:b0:
                    9e:70:d1:35:7f:32:92:c8:14:ee:80:8c:04:9a:c4:
                    93:a0:e3:4f:70:03:4f:e1:83:f3:23:88:a6:bb:f5:
                    17:43:5b:5e:43:ae:6c:a9:dd:f0:c4:67:55:af:ea:
                    9c:85:f5:da:87:7c:69:fe:c9:08:23:84:b1:bf:82:
                    23:0b:ba:34:38:00:35:95:09:ed:8b:b7:5d:a0:f4:
                    2a:9c:ce:ee:e2:ab:6a:ab:bc:f4:7e:18:4d:99:e5:
                    9a:e4:25:1a:70:ac:50:78:54:80:95:fa:c5:a0:78:
                    cf:3f:5a:81:0c:c1:a5:25:c6:e8:bd:b5:ca:95:03:
                    44:49:63:61:61:80:ce:80:bb:31:fd:78:10:71:d4:
                    ac:e9:8d:cc:5d:79:c6:26:08:ac:b3:ce:72:ec:96:
                    a1:b5:10:20:86:1a:48:64:e9:c7:14:15:44:dc:00:
                    cf:aa:85:9f:33:54:fb:01:42:8e:42:27:77:66:74:
                    ae:66:83:d5:2f:ac:55:f5:ca:e0:75:93:b7:d4:d7:
                    fa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9D:D1:9A:15:05:D3:22:2C:DB:AE:6C:60:57:59:2E:7A:22:11:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22c0d9b9-e9e7-337f-9655-87e1346a51b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.141.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d6:64:e8:cf:f7:70:e4:5c:23:87:8f:eb:ee:1c:90:31:b0:
         63:a3:49:2e:51:9e:0a:bc:b9:bb:ef:bf:36:1f:88:58:e6:90:
         23:47:91:78:12:c8:af:2e:65:27:e5:06:65:9e:f2:5e:c1:92:
         fe:2b:a4:8b:1b:72:98:2f:25:77:08:a8:c2:09:fc:fa:c0:d4:
         ff:a3:99:10:24:9a:98:25:23:5b:38:f8:ec:a5:7e:c6:53:5d:
         9b:de:3b:1e:19:d1:30:08:7b:68:ed:aa:4e:81:8d:0e:45:7a:
         19:b8:8f:99:9d:14:d1:80:81:67:b4:4d:38:db:45:77:03:19:
         e9:27:44:47:93:52:7f:30:c2:23:08:c0:30:2a:a5:76:2e:56:
         24:a1:a3:e5:22:cc:53:26:0f:a0:ed:41:75:82:1a:c0:db:b9:
         a0:d8:eb:14:55:f9:b0:09:a8:73:3e:02:11:1b:9b:45:87:18:
         22:8b:ab:7a:04:f7:58:0a:76:a3:d2:52:5c:b2:f8:e2:74:41:
         b1:96:04:96:ab:f4:c7:d7:4a:bf:86:4e:e3:df:76:81:d6:51:
         4b:e1:16:f1:5d:35:db:a5:2b:17:62:fe:6c:7e:7e:1d:df:3e:
         a7:ff:1c:46:a0:eb:4a:68:66:c4:68:0a:32:39:a0:3f:17:f3:
         50:03:e0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:57:43 2025 by rpki-client