Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/397808f8-ba0b-3a0c-809d-75a685001c84.roa
File:                     397808f8-ba0b-3a0c-809d-75a685001c84.roa (raw, json)
Hash identifier:          0UC/f3ugM5GqnI14dgoUiGuEz0BsmF0vRQZfq+Pr/co=
Subject key identifier:   9F:1E:0F:E5:73:31:76:9C:90:4C:95:89:F8:C6:A5:95:D5:54:67:AD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7A802FA323ECF520EFA8100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/397808f8-ba0b-3a0c-809d-75a685001c84.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.67.48.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a8:02:fa:32:3e:cf:52:0e:fa:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=d6c9fc72-4ba5-4c16-8463-be69780b19f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:53:ed:71:1e:56:68:df:6e:e1:e3:a8:c4:63:
                    34:e3:84:d8:8f:b6:c2:a5:97:45:22:25:a7:04:a1:
                    f9:3e:74:eb:6b:8a:56:63:9e:c3:2d:6a:b7:65:b6:
                    94:ef:aa:bd:ca:46:3e:74:81:6c:29:13:12:03:ac:
                    61:6d:f1:48:e3:36:61:3d:26:d8:1f:34:81:41:e4:
                    6c:b6:b0:9a:7e:94:5c:12:1f:33:b7:3b:77:cd:16:
                    52:60:82:54:1d:0e:88:3d:0c:2f:bc:52:bc:25:2a:
                    ef:27:b8:f0:8d:bb:6d:b7:ff:94:7e:34:46:37:07:
                    30:0d:d2:a3:c6:be:84:77:7d:f9:2f:92:76:7a:57:
                    bf:b6:6c:21:98:29:23:82:e7:f5:de:eb:af:a3:e1:
                    73:96:75:69:eb:20:9c:25:1a:95:8f:b2:b9:25:f0:
                    80:7b:8e:10:64:b5:34:17:7e:ee:ad:3d:47:12:36:
                    8b:cb:4f:de:ee:de:5c:fe:47:ab:1f:ed:c4:d3:48:
                    77:56:69:4b:cf:ef:ee:c3:c2:f4:56:19:4d:0a:b4:
                    57:af:41:34:8a:9a:c5:32:3b:bf:be:41:ad:a9:d0:
                    68:4c:40:e7:70:69:58:f9:68:0b:a9:35:28:8a:3f:
                    ce:7a:73:62:2b:b9:86:49:87:87:83:45:ca:9d:39:
                    ec:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1E:0F:E5:73:31:76:9C:90:4C:95:89:F8:C6:A5:95:D5:54:67:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/397808f8-ba0b-3a0c-809d-75a685001c84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.67.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:1d:63:fa:da:6d:5c:22:84:7c:37:bc:d5:ab:e6:2d:41:d9:
         51:93:47:9e:19:42:ff:53:df:bf:02:5f:7d:6c:0a:41:d1:93:
         b1:0b:b6:5a:81:03:66:43:a3:fa:db:da:90:16:4e:95:e7:6b:
         d7:f4:bc:02:9e:91:d2:5d:7d:1b:31:13:aa:15:67:2a:a5:b2:
         b0:89:4e:a5:d6:55:83:05:8d:ba:0a:84:2a:5f:ce:02:67:f7:
         7d:bd:f0:b2:f9:38:38:d2:2f:c0:e0:0c:ac:ac:ff:7e:c6:46:
         26:25:01:ad:e3:85:b8:9b:71:6f:a3:b3:f9:3e:bc:d6:1e:9f:
         11:b6:8e:5d:70:48:69:11:16:be:ed:88:06:ae:8f:e8:b1:ee:
         54:71:44:1a:7c:af:83:28:b3:41:a6:28:7b:9b:60:7a:99:d0:
         83:59:be:6c:4b:76:85:10:75:d7:e1:60:d3:62:3b:4a:ed:c1:
         d2:bd:1e:48:a1:7b:7e:d2:66:6d:a9:db:02:a2:88:85:a9:3a:
         9f:ba:84:4b:0b:4e:be:34:3b:41:57:6e:63:69:d9:fc:f3:45:
         a7:5d:ee:21:48:7f:2a:1e:c9:bf:7a:04:9f:9d:62:8b:f1:be:
         9b:56:99:70:7c:43:9e:47:4e:78:ca:96:8f:aa:a2:01:80:c6:
         95:89:e6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:26:24 2025 by rpki-client