Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34f30920-3720-3069-bdbd-8d832f45933f.roa
File:                     34f30920-3720-3069-bdbd-8d832f45933f.roa (raw, json)
Hash identifier:          xTdGHYCl9MXh5ImAsX+wPcXL6V9U5ZlIQRf7qFFSdQs=
Subject key identifier:   50:16:D8:79:FF:B0:1D:E6:7D:94:EE:E0:D5:F4:79:42:61:A7:57:81
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309FDAB29FBC8661ECE2BB080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34f30920-3720-3069-bdbd-8d832f45933f.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.105.240.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fd:ab:29:fb:c8:66:1e:ce:2b:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=dc9761b0-8a7e-47fb-b6e5-5ae9f93b0f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:44:aa:82:0a:1a:90:92:c3:00:db:7d:84:0e:
                    70:65:a2:d8:aa:1c:94:26:f3:a7:06:a3:81:91:a8:
                    cf:64:21:6a:ba:05:2e:e4:ab:96:5a:fd:37:3c:c5:
                    19:8f:fd:02:c0:eb:d9:9c:c5:2e:41:97:ec:a6:93:
                    34:cf:e3:41:6c:f7:d8:cd:fb:d8:65:83:02:79:24:
                    68:2a:ea:f2:57:fc:4b:18:f1:8b:2c:0e:e1:d5:69:
                    c0:9c:d1:ce:45:79:c8:89:6f:36:d9:4c:af:be:3e:
                    20:2e:bd:18:fc:a2:52:0b:e2:57:8b:a1:25:39:eb:
                    59:5d:b5:c4:c0:8c:22:e8:da:25:11:6d:d3:45:57:
                    a9:91:a4:b5:57:45:f1:cb:70:79:63:3c:4f:d6:0a:
                    12:14:97:d0:6a:08:63:a1:cc:71:a6:f8:08:80:2a:
                    fc:b6:c8:3b:58:0d:94:d7:1b:2b:fe:c9:db:3c:a4:
                    da:50:0b:bc:9b:94:b5:3d:1f:56:8c:a9:83:37:3d:
                    53:b5:18:85:1a:c0:8d:33:c6:e1:66:48:0b:3e:be:
                    23:4a:5a:31:32:11:f4:8c:96:33:e5:ae:4e:37:18:
                    c8:27:ee:67:80:71:11:67:57:83:3d:2b:27:a9:2c:
                    d8:9d:b0:aa:4d:d7:95:45:0d:d2:78:a6:6c:48:4c:
                    80:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:16:D8:79:FF:B0:1D:E6:7D:94:EE:E0:D5:F4:79:42:61:A7:57:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34f30920-3720-3069-bdbd-8d832f45933f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.105.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:14:6c:47:e4:f7:90:c6:ed:a3:0d:c6:04:9a:6c:64:ff:ec:
         37:26:93:0c:65:3e:13:3e:a3:fa:10:fa:4f:8e:9e:87:a8:a8:
         ad:9e:2b:ed:4c:46:34:55:ac:26:4d:44:28:9d:07:a5:a0:98:
         d0:a8:6d:62:bb:8c:c8:aa:aa:ba:2d:30:91:32:61:75:cf:b9:
         2f:50:3f:c8:62:77:ac:9e:cf:1d:9f:27:eb:9c:18:7f:99:c8:
         e3:92:34:49:68:e1:5e:74:3c:ea:23:0f:5a:d3:76:2b:bb:94:
         46:f4:06:0b:d8:78:9d:c2:f2:fa:92:62:1b:c9:61:05:7c:e8:
         33:a6:2a:ab:f7:9a:05:80:d8:78:1a:af:1e:56:c4:66:c4:ab:
         57:44:2f:26:d4:36:32:f3:88:73:ac:2c:f4:6d:82:eb:c7:37:
         19:c2:8b:bc:69:15:3c:65:cc:2b:0e:81:13:26:17:0e:dd:80:
         50:9a:04:08:5f:fb:13:f5:53:ee:ee:6f:b7:be:18:da:4f:94:
         9f:0c:66:49:5a:39:da:54:b3:f7:3a:6a:05:91:01:6a:02:11:
         a0:51:93:68:c6:0d:06:28:3f:73:33:fa:67:b8:8a:2d:ef:88:
         85:7a:27:4f:c0:22:34:a6:9f:7a:ef:95:cb:26:b5:0b:04:26:
         bf:00:04:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:59:33 2025 by rpki-client