Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a562f8a-11df-3615-9dbd-73861cac307b.roa
File:                     3a562f8a-11df-3615-9dbd-73861cac307b.roa (raw, json)
Hash identifier:          Z3cKGobbKdjC8LVOSDh/SwgEUPjGB6ZIcqY5zgken9Y=
Subject key identifier:   3C:2E:53:F3:2A:F9:04:BD:BA:7E:30:20:37:C4:95:FD:C5:62:B7:70
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A0E22FD1C4B35111A31B700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a562f8a-11df-3615-9dbd-73861cac307b.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.82.0.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0e:22:fd:1c:4b:35:11:1a:31:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=b3d39369-9883-4741-9f2a-4b5636d1c155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bf:eb:6a:d3:ae:d9:57:34:69:47:f8:ce:c4:
                    fc:1d:8c:2a:e0:52:2b:53:38:b4:d2:3e:87:b5:11:
                    4d:94:86:86:8c:8d:ff:41:f9:a1:0b:73:c1:22:6f:
                    d6:eb:90:5f:c3:15:77:99:dd:11:3d:64:51:c1:85:
                    d5:e7:91:02:b1:ef:52:18:e8:d4:fc:6a:88:63:28:
                    47:c4:1b:5f:ac:4b:e7:3f:33:44:62:69:ac:1f:18:
                    b3:f9:ec:a8:09:be:9b:50:20:2e:ad:76:8a:3a:4a:
                    4c:67:46:28:54:99:bf:6c:86:9a:1d:83:8a:37:42:
                    2e:af:92:47:96:ae:d1:97:13:16:6b:58:0e:bd:da:
                    d5:d2:25:8e:50:a7:44:fc:48:c1:22:86:e0:4e:59:
                    77:15:df:95:ca:6d:57:c8:e2:ad:e8:a1:36:4c:79:
                    e0:e7:cf:b7:22:5e:63:39:db:5d:0d:46:7d:a1:d3:
                    4f:36:df:3f:8e:b6:f7:82:fd:d8:c9:13:d7:4d:e5:
                    b3:1f:8d:25:5f:75:49:c0:94:61:34:c6:60:0b:b4:
                    87:ce:a8:32:ac:bb:18:26:e5:e5:55:f8:0e:4b:73:
                    19:dc:9a:d9:33:60:bd:72:4e:dd:27:53:2c:c8:cd:
                    c0:f9:41:70:4e:f4:94:9b:c6:32:c2:d6:2d:28:47:
                    28:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2E:53:F3:2A:F9:04:BD:BA:7E:30:20:37:C4:95:FD:C5:62:B7:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a562f8a-11df-3615-9dbd-73861cac307b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.82.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:86:82:96:1f:49:31:26:4d:31:80:39:55:a3:6c:ea:32:27:
         80:82:bb:9b:6d:d0:27:34:48:fc:c8:00:89:bb:34:bb:96:24:
         e4:df:13:0d:74:54:c6:af:24:80:3a:72:48:90:67:68:bb:5a:
         e7:b1:73:03:0e:31:e5:3a:e9:d1:9c:31:d3:ea:77:2c:1c:fc:
         86:d0:60:14:04:3b:ff:18:73:21:1e:12:cd:d8:e3:58:7e:1d:
         ce:ad:22:11:25:13:41:6c:68:54:bc:09:06:e6:37:82:79:33:
         cd:f0:e0:32:40:0a:20:ae:48:14:bb:e5:2d:e1:22:fc:48:50:
         16:03:a2:ef:d8:52:9e:aa:0e:27:ed:5c:e1:2f:56:ea:ef:e5:
         40:16:ff:83:e9:16:35:f1:57:10:62:86:2f:51:a6:d9:56:b4:
         6a:e9:41:c5:c0:3d:bf:95:db:2d:8d:03:0a:da:7b:a5:8d:67:
         08:87:84:5e:a1:72:90:6d:35:ed:85:3a:6e:79:b0:a9:c2:33:
         ed:71:c0:77:16:af:ed:75:90:b9:54:03:ad:d0:84:12:67:7a:
         65:3f:ef:e7:64:47:e3:c9:93:ad:d3:2b:e1:47:e4:2c:3d:41:
         8d:51:5c:e3:7d:a7:b7:51:52:81:32:54:c4:b2:19:fd:da:bb:
         0b:4a:ac:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:35:38 2025 by rpki-client