Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3dbc769f-c67d-35b5-95ba-154485c6a612.roa
File:                     3dbc769f-c67d-35b5-95ba-154485c6a612.roa (raw, json)
Hash identifier:          VSmVabSlkMsZY+mqCjb0gIoKIk/IHvPzXKR274ZxCYA=
Subject key identifier:   90:90:A0:BB:F2:C9:29:F6:B3:5B:EE:68:04:DA:65:F3:1D:D6:8E:BF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309FDF1AE77E45D0FE469B680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3dbc769f-c67d-35b5-95ba-154485c6a612.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.83.160.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fd:f1:ae:77:e4:5d:0f:e4:69:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=c729005a-cd1d-457c-86f1-4f43e2bb821e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e9:16:09:59:e3:eb:46:17:47:24:39:9a:a1:
                    83:4e:e4:c5:b6:6f:2a:ee:2a:5a:c6:c7:f7:33:43:
                    5a:bf:a3:78:82:a0:88:0d:57:d7:4e:d2:57:df:ff:
                    8c:74:0f:12:06:19:42:82:f7:2c:07:ba:13:26:4a:
                    4c:0d:1c:20:87:74:c8:e0:62:02:b2:e4:e2:80:b8:
                    08:16:22:89:e4:e0:1d:45:49:40:a1:b0:50:f6:66:
                    53:37:ae:a5:37:8d:df:b9:d0:85:37:de:11:49:34:
                    b5:7e:3a:1e:b0:7c:14:5b:1a:17:4a:2b:48:8d:79:
                    0a:59:c9:34:d0:d3:7f:f5:f0:c6:a0:e5:81:70:f2:
                    2f:3d:1e:2e:44:85:58:81:dc:d7:97:ee:df:7e:01:
                    0c:ae:2c:89:3d:a3:02:8a:59:79:3e:29:3d:fd:3e:
                    2c:17:c4:88:4d:08:ba:b7:d0:ca:a2:2c:4e:a8:ed:
                    6c:86:f5:cc:12:d8:a2:0e:fe:6d:68:a9:17:01:ef:
                    51:3b:47:6a:80:5b:a6:d9:d5:3b:09:aa:29:d4:76:
                    b4:a8:66:cb:8f:03:35:80:33:4a:c7:3c:45:a6:90:
                    9f:37:8b:41:65:0a:01:72:46:f4:5e:95:2c:82:6b:
                    61:60:58:09:e7:ca:96:44:75:ec:3f:a4:b5:90:78:
                    b0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:90:A0:BB:F2:C9:29:F6:B3:5B:EE:68:04:DA:65:F3:1D:D6:8E:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3dbc769f-c67d-35b5-95ba-154485c6a612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.83.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:c2:82:fb:2e:77:e8:0d:0a:6c:c4:3c:e6:02:84:a4:69:52:
         74:fa:24:93:bc:39:16:e1:85:bd:50:01:09:71:23:c6:1a:ea:
         e7:2e:ac:15:e7:a9:34:15:85:4d:0d:f9:c4:80:8c:0b:fd:2d:
         f7:56:b4:7d:4e:b7:1e:73:98:75:a9:03:fd:a2:40:36:fc:3d:
         0c:70:98:fa:63:2b:0b:7e:b3:23:bd:3f:51:e8:1b:59:95:17:
         98:96:34:b6:9c:64:73:83:10:89:1e:62:f2:9d:99:c0:23:10:
         39:4d:53:8a:93:b9:ca:3a:0f:d2:c0:34:37:84:e6:be:22:0b:
         61:3b:64:2c:fd:df:bf:80:02:c1:0f:8f:96:00:3e:88:d5:c9:
         4e:23:04:0c:14:43:86:9e:f0:f2:2b:1d:96:bf:c3:28:6f:13:
         76:32:f0:b1:42:46:03:7f:49:31:26:a7:57:49:5c:7c:e9:3d:
         15:87:51:15:bf:2f:de:2a:7e:c5:15:84:f5:92:a7:e1:9b:cf:
         65:22:0d:54:1f:cd:d4:98:ec:71:f0:9f:ee:10:c4:f7:46:25:
         8f:fa:c7:7f:80:0b:4f:f0:4c:02:81:e8:c3:66:ef:c9:29:2c:
         33:e0:4d:96:d8:76:93:06:75:4b:a5:b0:cc:fb:47:98:b7:47:
         cb:31:29:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:57:31 2025 by rpki-client