Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/248ee6ae-77dd-3086-8a03-aafc43b4cfa6.roa
File:                     248ee6ae-77dd-3086-8a03-aafc43b4cfa6.roa (raw, json)
Hash identifier:          ls5NDxtifBzaf8rlHVY4AxRWckx09v5gXzeKVSeKevw=
Subject key identifier:   14:E8:45:E4:38:16:15:38:45:0F:36:74:7A:AE:D2:E1:66:C8:4D:EA
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A07899B5B2C0D1C90B9CAA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/248ee6ae-77dd-3086-8a03-aafc43b4cfa6.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.129.48.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:07:89:9b:5b:2c:0d:1c:90:b9:ca:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=99adae77-0d62-474e-a03a-c210417a6cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:61:a0:b0:36:8a:d3:49:d1:65:67:ac:00:56:
                    a8:2e:d7:92:48:7a:de:16:04:ec:24:c0:18:4c:58:
                    17:3d:85:7a:f9:de:9d:4a:4d:cf:8f:0a:af:5e:fe:
                    7f:1e:d0:c3:18:7c:e6:6d:2f:62:3b:c2:a6:e3:2c:
                    a7:fa:71:8d:09:1b:85:3d:9b:19:43:88:65:c4:5f:
                    8b:10:b6:b5:5f:f4:3b:e9:02:49:55:39:d0:bc:97:
                    d8:eb:7a:5e:eb:bf:dc:8e:60:b2:f8:93:2a:e2:26:
                    ee:7b:7c:f5:cf:e4:d9:ab:61:8f:e8:cd:7c:be:5d:
                    3f:f5:5c:8b:2a:8c:5c:7f:43:66:25:24:77:0e:1d:
                    e2:1b:d0:c5:fa:bc:37:95:b2:89:dc:5a:79:05:d6:
                    e9:0c:b9:d8:e5:7a:eb:08:e9:5f:bc:54:5d:48:76:
                    44:88:4b:07:04:0f:27:c6:88:de:bf:6d:67:73:b4:
                    f5:e3:e6:01:f2:ed:f9:b4:b7:df:14:f6:ab:1c:3a:
                    4e:e2:f9:07:84:ae:51:63:1c:8f:e7:8c:e7:0e:68:
                    93:e8:0e:21:23:45:e6:20:08:17:62:a9:46:33:87:
                    0e:88:0c:b1:33:46:f0:a5:a5:e6:66:26:21:9e:86:
                    8f:99:ff:b2:d5:0a:c4:fa:57:80:73:de:aa:1d:a2:
                    f6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E8:45:E4:38:16:15:38:45:0F:36:74:7A:AE:D2:E1:66:C8:4D:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/248ee6ae-77dd-3086-8a03-aafc43b4cfa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.129.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:89:02:bd:a0:26:7b:07:c0:e9:33:b9:1b:a8:2e:77:c5:64:
         98:d6:8a:6f:ef:73:a4:12:af:1c:be:4d:b7:28:f6:31:f6:70:
         70:30:68:39:53:5c:c0:8b:bb:60:7d:85:b1:a8:eb:12:0f:58:
         1e:b7:91:19:74:4e:e1:20:45:08:dc:ca:f6:2d:a9:70:0d:fc:
         30:19:c9:1e:d3:b8:ef:d7:70:d2:4a:5e:df:17:ae:ab:22:73:
         99:24:0d:99:66:55:fc:ae:31:05:a6:1b:16:89:60:62:05:cf:
         3c:44:80:f4:1c:b8:d0:c6:51:ab:a8:61:8d:f5:04:c4:4e:72:
         d2:92:32:a0:94:00:f0:da:55:6a:4b:c6:a8:18:0d:0c:ee:e9:
         10:de:64:51:e2:55:3a:1b:0a:af:18:08:54:9c:87:a7:e5:61:
         3d:85:e0:63:bf:92:e8:76:22:96:e7:b8:96:4e:64:b1:2b:da:
         7f:ff:86:45:51:73:7d:60:37:ea:63:bf:35:5c:11:43:9e:25:
         7e:a1:cb:26:51:a9:02:aa:5f:0d:47:57:c1:52:db:b8:15:88:
         eb:be:0d:9b:0e:83:9b:3b:41:a2:03:a4:17:84:b3:6a:8f:76:
         c3:1a:84:5f:01:8a:9f:fa:c1:16:14:f9:0d:d8:0e:30:4d:67:
         a0:22:71:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:37:30 2025 by rpki-client