Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/335a7368-96e7-37aa-a249-6f062f5d2ea9.roa
File:                     335a7368-96e7-37aa-a249-6f062f5d2ea9.roa (raw, json)
Hash identifier:          XTM1jrDlkPnoRBiqmuBPZziSIfP8ODp/mvW9YqL9abY=
Subject key identifier:   79:53:2F:22:77:DD:58:93:36:70:96:C3:6D:5E:2E:99:18:AE:FD:94
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A2135A7B4DB9D39E88ABC00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/335a7368-96e7-37aa-a249-6f062f5d2ea9.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.97.144.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:21:35:a7:b4:db:9d:39:e8:8a:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=d9990cca-fc3a-49ff-96e7-1c6f38adb703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d2:5b:28:04:c6:a4:f2:7b:83:4c:a2:c9:a4:
                    5e:2f:04:ba:88:d2:b0:09:7c:dc:c4:40:2b:1d:2d:
                    ea:d3:4a:ca:b6:75:5a:ef:94:fd:34:d5:32:4c:b6:
                    1a:de:6a:00:65:b6:de:6a:34:7b:b4:ca:d8:ed:41:
                    72:ae:26:3a:49:02:80:2c:e1:c9:4e:ba:c6:c9:86:
                    af:91:78:19:fa:de:2b:77:a5:58:d1:ad:63:be:51:
                    81:4b:76:65:19:5d:21:7b:0d:3b:8c:88:a7:0f:bb:
                    6d:f4:6a:37:e9:f7:cb:1d:7a:b7:04:1b:d9:4c:5b:
                    bc:e6:f6:8a:97:96:b2:55:9e:e7:cb:02:33:b9:5f:
                    9f:42:67:a6:e2:21:c4:cf:d8:ed:7c:cf:70:65:34:
                    10:38:67:e9:89:e4:38:87:76:55:25:22:25:e1:53:
                    05:e4:f9:3e:1e:05:3c:3d:49:08:be:43:d0:48:df:
                    3f:5e:e4:5f:04:6a:f6:7e:30:e3:89:9e:01:4d:b5:
                    9a:1c:1c:ea:5a:cd:3d:52:41:8d:3e:af:11:57:64:
                    15:5e:98:64:d8:ac:26:29:79:20:b1:fd:bc:dd:ab:
                    b3:97:9a:b7:24:24:0f:7e:a2:44:a1:c3:d9:8e:89:
                    c3:c4:36:72:83:b5:26:dd:f6:7b:e9:d4:3f:06:1e:
                    34:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:53:2F:22:77:DD:58:93:36:70:96:C3:6D:5E:2E:99:18:AE:FD:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/335a7368-96e7-37aa-a249-6f062f5d2ea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.97.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:45:b0:0e:8f:0d:ba:ee:40:0c:be:45:9d:65:1a:8a:85:3e:
         cc:5d:f9:a2:35:7b:b5:8d:c3:a5:0a:5d:09:70:52:b1:3e:d2:
         b4:ed:24:f4:05:57:8e:ef:92:42:ad:e3:0f:34:d2:24:23:81:
         11:24:da:3d:e9:09:a8:35:84:42:2c:67:fe:7a:4d:4d:9a:47:
         a4:d4:9c:96:d4:82:6e:75:f7:39:6c:8f:e1:b5:0d:f2:3a:22:
         c0:80:55:6a:f8:ec:c4:d9:80:e9:75:c6:85:b6:c1:b6:0b:0e:
         1c:cd:52:73:75:6e:7f:c9:ea:39:e6:d5:25:30:06:9b:15:0f:
         81:61:c7:c9:bd:00:df:ec:34:38:d8:c0:87:5c:93:80:c8:d9:
         2e:3f:37:8d:0b:10:52:ff:e6:36:89:43:49:9a:bc:b9:59:84:
         98:68:72:c8:84:50:37:1a:ee:ea:28:03:da:12:5d:08:6a:26:
         a5:8b:4e:04:3d:f6:8d:3b:e6:78:a3:7f:c3:1d:8f:e4:fd:8a:
         56:15:0d:80:0c:23:10:ef:92:19:2c:a1:db:d8:40:13:7a:b7:
         5b:2a:ca:e0:71:f1:c2:85:c6:04:43:3e:62:e3:94:2c:25:d9:
         81:eb:57:b2:ad:c7:03:8d:20:a5:11:d0:c0:7d:43:57:a0:12:
         b8:f1:c5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:03:48 2025 by rpki-client