Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ea31906-80ea-3607-9abd-97cc7279fdc2.roa
File:                     4ea31906-80ea-3607-9abd-97cc7279fdc2.roa (raw, json)
Hash identifier:          AHE8BRyMHbiZ1TZGyvTxFOt0Zy2FgSqrFzqpLBwBeNk=
Subject key identifier:   9D:E2:53:E7:96:3D:B7:AA:B2:6D:7C:BB:B8:CF:CC:42:CC:01:77:6E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A06233211F8F8C3DC22A180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ea31906-80ea-3607-9abd-97cc7279fdc2.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.76.160.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:06:23:32:11:f8:f8:c3:dc:22:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=7b8e843b-acb2-4606-90a9-449e20ef7546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:0f:4a:e3:84:9f:cf:40:e6:55:e4:eb:ea:
                    48:aa:d8:1f:3d:61:29:85:9d:5d:88:05:12:08:7a:
                    8d:62:0d:2e:b3:59:c4:08:43:ff:1c:85:bc:06:08:
                    7e:d6:9f:29:b1:64:d0:fb:1f:b6:22:07:ef:89:98:
                    fd:a3:a2:af:2b:fb:96:c6:46:fb:5d:4a:04:a2:30:
                    17:6c:01:e1:08:a1:c9:fe:58:76:0d:a2:c2:d7:ac:
                    e8:0b:0b:80:37:0b:2b:44:d4:8f:ce:d4:51:3a:e5:
                    58:c5:7c:26:8e:f9:63:f7:ee:97:9a:c9:f0:32:4d:
                    77:75:54:8c:1d:35:e9:7c:0c:90:e8:27:cf:ba:3c:
                    b9:97:9f:cb:5e:47:10:fc:49:32:77:b2:0c:f2:75:
                    aa:c5:65:c6:12:74:bc:8a:24:21:85:56:b6:c7:7a:
                    75:66:34:37:dd:f2:b2:bb:80:72:9d:9b:9b:bb:d7:
                    09:66:b0:8d:9b:e0:2b:b4:f0:8e:cc:63:f0:1a:fd:
                    2d:32:1a:10:32:d3:80:96:ee:c9:48:e2:4c:9b:e3:
                    ac:66:41:a4:29:47:f8:22:ae:0d:b6:a3:8d:45:f0:
                    b9:6c:10:43:7e:8b:99:13:d5:53:64:5c:02:c5:50:
                    57:1b:11:9d:05:c1:8e:44:9c:c9:b2:24:91:42:86:
                    03:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E2:53:E7:96:3D:B7:AA:B2:6D:7C:BB:B8:CF:CC:42:CC:01:77:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ea31906-80ea-3607-9abd-97cc7279fdc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.76.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:47:5e:8d:06:2d:31:22:d7:ab:b8:c5:17:11:23:f3:ab:06:
         d1:3d:a9:93:7c:0c:4a:96:da:f5:5d:30:91:8c:ec:2c:b3:a0:
         6c:2c:5e:b7:5d:a7:20:91:b7:76:b9:22:8f:7e:a1:cb:73:eb:
         62:22:5f:3f:32:ea:73:af:7a:81:b0:1e:29:ce:17:4f:c6:b3:
         72:d5:a2:c7:fc:0b:d0:65:51:e6:fa:25:a4:72:9c:fd:da:72:
         0d:2b:54:65:96:96:5e:6f:d3:4c:2b:41:e3:f1:b3:66:c5:19:
         8d:1a:4c:95:65:25:6c:b9:d0:cc:52:bd:af:65:fb:b6:3c:d6:
         46:98:00:00:a0:5c:e4:e5:2b:fe:14:a2:e2:a9:81:8f:79:66:
         d5:aa:1e:58:f1:cf:bd:49:70:0d:82:70:5b:8c:b9:29:11:db:
         73:ad:92:ce:9c:bb:10:85:52:b4:dc:d0:23:1c:f2:49:5d:09:
         60:02:7f:c1:f1:ee:7c:a9:79:4d:df:3a:24:66:bc:d5:56:14:
         f3:84:a4:31:e6:a6:89:6b:ad:50:c5:8e:f3:b5:53:7d:8c:d8:
         c0:ab:49:48:8e:8f:79:33:a7:66:ae:ed:c5:77:f9:24:91:a4:
         62:d6:d2:ba:6b:31:61:36:f2:01:dc:5c:b1:2c:29:55:98:28:
         34:8a:bb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:01:27 2025 by rpki-client