Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40978652-3c79-33e2-bbd7-a7aac48bf2ac.roa
File:                     40978652-3c79-33e2-bbd7-a7aac48bf2ac.roa (raw, json)
Hash identifier:          cUzUXtAH6NhdbTbA9fHOSWMqCQrg4C48Xe+rui2Niqk=
Subject key identifier:   43:5F:AB:7D:38:48:11:90:56:4F:73:0C:77:5B:D9:1D:CB:7F:07:40
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309EDEF509093091260B3CE00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40978652-3c79-33e2-bbd7-a7aac48bf2ac.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.104.208.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ed:ef:50:90:93:09:12:60:b3:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=3cdef2e8-ec0e-460b-86fb-9c0b11fe4f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6f:f2:5f:19:5d:83:3f:af:1c:52:08:69:65:
                    5f:c7:3b:df:fe:9a:8e:59:a2:3e:3a:3c:b9:9a:9f:
                    0b:1c:3e:14:2e:7e:98:ae:c7:0f:08:76:6d:3d:a3:
                    f3:27:5f:e3:a5:c9:be:a8:40:15:68:4e:29:00:13:
                    07:81:14:34:bf:1e:05:ad:21:fe:96:7b:c5:47:96:
                    cb:f9:c9:ec:4c:8a:49:62:94:10:fd:03:d1:10:e5:
                    97:53:fa:a9:b7:75:15:90:76:f9:bc:97:7d:ca:14:
                    d3:ed:e6:7b:ad:b1:7c:cb:b5:84:80:5d:4d:7e:e5:
                    f6:fe:30:79:76:51:f6:61:4f:ed:09:35:ad:1e:9b:
                    32:85:26:70:75:64:61:c5:97:a1:0e:8a:f9:4f:db:
                    a1:bc:e4:65:a1:d1:45:9c:2d:de:8c:a7:25:0b:e7:
                    ca:27:74:96:ca:4c:75:a7:1d:12:ba:73:44:17:da:
                    8a:d1:b6:ef:8f:61:e5:74:80:26:60:2e:09:9d:3a:
                    62:22:53:ef:f7:7e:81:ff:d9:dd:a8:52:8c:fb:7c:
                    b2:1c:8d:1b:15:74:90:15:e5:1d:c1:ba:16:bc:02:
                    28:dc:e0:71:05:31:3a:d7:e5:96:be:c9:30:2a:fc:
                    8f:85:ce:b1:0f:7e:89:d6:f3:49:b9:c2:17:65:40:
                    71:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5F:AB:7D:38:48:11:90:56:4F:73:0C:77:5B:D9:1D:CB:7F:07:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40978652-3c79-33e2-bbd7-a7aac48bf2ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.104.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:d2:35:0b:30:2d:35:28:a2:04:50:79:ea:ec:de:53:c3:13:
         0d:ab:ae:a9:cc:7b:7e:e6:64:94:df:8c:09:c0:a9:1b:1b:cd:
         ae:24:4d:56:54:9a:43:3f:c5:8b:78:bf:5a:12:8b:88:19:34:
         75:30:da:9f:53:e2:5e:28:66:2b:28:3c:9b:e4:c2:7c:22:49:
         c1:70:4f:cb:b7:a2:d4:2d:11:a5:71:93:40:0b:71:10:49:fb:
         78:2c:3e:de:d8:ad:c1:7e:2e:cd:cf:ba:e5:34:5a:0f:48:dc:
         07:73:98:7b:f4:31:99:4e:e7:ec:65:13:54:4f:6f:52:dd:63:
         1f:1a:17:57:ab:0c:ed:83:03:c7:4d:66:87:6c:36:18:85:1b:
         11:cf:0b:6d:e3:96:d2:78:da:79:b6:34:9e:b0:35:82:0d:59:
         89:f4:27:23:48:41:45:2c:f7:e6:2a:72:81:e0:c3:cc:a4:44:
         c0:45:69:22:f4:2d:7f:1f:be:71:a9:57:fd:ee:ae:60:81:b0:
         c7:10:32:79:6e:56:80:eb:fb:13:cb:2f:0a:62:4b:5e:a6:df:
         04:cf:04:f8:13:7a:3b:13:64:21:d2:5c:5f:c3:dc:09:ac:8d:
         9a:e3:ed:13:6a:e0:32:6f:5e:d1:b1:74:49:04:58:77:8d:9a:
         3c:c1:3d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:50:47 2025 by rpki-client