Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2daa6777-2481-360d-9c48-3fc0cc4a1f32.roa
File:                     2daa6777-2481-360d-9c48-3fc0cc4a1f32.roa (raw, json)
Hash identifier:          3T9bd5rQZWF0X9L/lUAYLazwb7saJIKl3f8QtRk7nOw=
Subject key identifier:   8E:E8:C9:95:2D:1F:B1:8D:1D:88:E9:67:34:D9:5F:CE:32:4F:02:E7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309F32BB9AE83DE4B09890180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2daa6777-2481-360d-9c48-3fc0cc4a1f32.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.93.192.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f3:2b:b9:ae:83:de:4b:09:89:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=e6d008ff-74d0-42de-bd1e-b337f3b7b1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:41:71:25:5f:65:21:c1:9c:30:df:f1:37:89:
                    3c:6e:69:2f:1f:59:d2:ed:a9:1f:9c:95:e2:a1:08:
                    e9:7b:56:55:ba:81:8d:ef:d4:57:d9:b5:7e:66:55:
                    ab:12:ed:41:a4:26:9c:11:51:ae:1f:77:d1:b9:16:
                    13:a6:c9:ae:b9:fc:b8:62:a7:8f:13:cc:cd:45:1c:
                    0c:1a:a2:1a:0b:7a:e3:b2:4d:36:23:5d:1b:df:73:
                    d3:49:82:12:3a:f7:2a:34:4f:83:4f:56:db:20:4f:
                    b0:ac:50:8c:b8:f8:4e:09:71:df:af:d2:e4:e1:bf:
                    84:fe:de:eb:8c:cf:b9:65:6c:18:95:10:ad:0f:c6:
                    88:a1:fe:39:f7:8f:4a:70:05:16:73:9f:7d:2b:e8:
                    54:6f:2e:d3:89:a3:21:77:4b:48:1b:5b:c0:04:42:
                    c8:3b:6a:65:e4:44:8a:fd:d9:60:ae:7b:9d:98:5b:
                    ea:b9:a9:44:d9:a7:09:48:38:75:f9:c3:75:6d:43:
                    db:e2:eb:bf:b5:d6:37:04:16:f0:33:87:e6:1d:17:
                    e5:a7:cb:95:73:d2:3f:19:b1:1d:90:34:d7:03:db:
                    14:17:7c:09:42:92:ac:00:92:7e:63:74:e5:ff:4f:
                    55:d5:6c:3b:00:d4:07:d1:ee:66:68:50:10:12:33:
                    76:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E8:C9:95:2D:1F:B1:8D:1D:88:E9:67:34:D9:5F:CE:32:4F:02:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2daa6777-2481-360d-9c48-3fc0cc4a1f32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.93.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:8c:45:69:b6:2f:62:f3:a0:51:32:54:cd:be:6f:69:cc:94:
         ed:54:a5:09:7d:fd:51:55:69:a6:6c:a0:ae:a7:b9:b1:27:76:
         c3:dc:ee:d1:e7:44:84:26:8e:8b:f0:c1:97:f6:89:d5:e8:ea:
         6d:cd:a4:d3:81:a8:77:32:9b:c6:8c:b7:1c:3d:a6:b9:35:5b:
         41:03:f0:78:83:1b:73:ae:8a:a4:ab:4f:ba:45:47:54:c7:c0:
         a2:bb:e6:8d:6d:bb:24:dd:b4:f0:bb:a8:76:77:6d:c1:11:95:
         6e:7f:29:57:9a:b8:da:92:1e:9c:b3:e7:20:ff:d3:bf:7d:5e:
         10:81:53:e4:85:73:a6:d6:7a:c1:21:39:13:ef:f3:45:ad:35:
         56:98:f4:a5:5f:37:49:72:7c:3b:8a:ca:dc:da:f0:a6:c9:6d:
         3d:27:6a:de:fb:50:8f:f7:d3:f7:1e:34:6b:d9:d8:a6:d5:a0:
         7a:f9:11:3a:6e:db:61:a7:a5:93:f3:c6:b4:64:42:00:a3:e7:
         ce:8d:e6:c9:74:02:c1:71:35:2d:5e:0c:ed:ac:8b:4d:df:ea:
         39:47:11:98:2d:94:d8:1a:fd:52:db:94:10:3b:07:35:38:af:
         82:b3:cc:9c:ee:db:90:e4:fd:e1:1e:15:5b:16:69:53:ef:ff:
         c1:a4:b4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:24:03 2025 by rpki-client