Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/51181729-66af-336e-b593-827eeea58955.roa
File:                     51181729-66af-336e-b593-827eeea58955.roa (raw, json)
Hash identifier:          mSe3Q+mRPkqyr4zDjtOhvvwSeL3JJEAvFMEZqwJG4rQ=
Subject key identifier:   49:E5:40:80:72:32:A9:91:57:33:24:FA:44:D4:C7:D8:20:42:79:F1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309EDDA182A9D96E7C41F85C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/51181729-66af-336e-b593-827eeea58955.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        34.98.150.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ed:da:18:2a:9d:96:e7:c4:1f:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=0441dff0-ec77-4300-9ba5-db923707a6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b8:e6:c4:9f:31:62:86:c1:31:59:a8:23:5f:
                    a7:f4:43:e8:46:6e:da:11:31:9a:69:12:e7:57:06:
                    bf:70:3c:5c:53:40:41:90:9d:b3:92:fd:a7:13:20:
                    37:33:b0:24:a8:63:c1:fb:41:c1:15:e4:62:60:ee:
                    ff:ca:15:9e:f8:e3:37:dc:64:0e:d4:c3:03:af:3e:
                    b2:f9:1f:de:09:de:e4:26:3c:08:66:45:ff:be:24:
                    3a:5d:6e:cd:bc:e9:56:06:a0:b8:f7:7c:e3:c4:2d:
                    cf:d9:8b:84:7c:19:f5:a2:c4:dd:a0:77:3e:bf:f3:
                    69:8d:29:52:8e:ea:f4:a2:88:2a:65:f2:8d:f2:c2:
                    9a:b2:07:3a:98:82:69:78:63:ed:b6:a3:ab:9a:93:
                    df:1a:98:38:09:c4:b8:dd:e3:85:03:60:84:63:b7:
                    77:54:90:a7:ab:31:8f:f6:e2:60:a3:a3:98:7e:3d:
                    34:de:56:af:85:29:22:63:ba:7c:c7:b0:81:29:93:
                    08:1d:01:dc:59:c2:d4:33:8c:2e:f4:b9:5d:e7:93:
                    c0:d0:8e:fa:6f:42:8a:a5:ce:b1:e3:a4:93:e3:70:
                    4a:23:85:63:0a:b1:a0:7e:6a:35:09:c9:3c:5f:72:
                    de:9e:9a:28:ad:d2:6c:01:df:43:f7:2a:84:6c:7c:
                    c7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E5:40:80:72:32:A9:91:57:33:24:FA:44:D4:C7:D8:20:42:79:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/51181729-66af-336e-b593-827eeea58955.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.98.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ff:ed:f9:e8:fb:25:26:f2:48:5a:f1:c6:81:af:c7:4f:bd:
         ec:98:0e:47:03:a2:4e:54:9e:20:7e:62:30:8d:79:b6:e5:04:
         3e:3a:18:f4:57:19:bb:8b:80:91:46:39:4e:66:d3:a2:13:39:
         32:7a:68:84:d1:11:b7:80:36:e5:1c:08:63:f6:35:56:7e:88:
         fe:c2:cf:65:03:23:9e:87:71:97:de:19:3c:55:f9:af:11:5c:
         10:b7:9f:88:8d:5a:90:b0:50:24:a6:6a:db:e0:9f:d6:55:1a:
         71:bd:bd:a8:f8:45:11:b5:dd:f8:ab:09:be:7c:7a:ad:80:73:
         f1:12:f9:74:00:61:61:98:f1:a4:b9:5a:f5:ae:04:58:aa:43:
         0d:1b:f6:1f:fa:fd:6c:62:2e:35:f5:3c:f7:40:7b:22:42:d5:
         91:5b:3a:4a:5e:fa:83:db:8b:12:18:1f:fa:6e:95:3a:7b:08:
         7f:33:bc:b0:57:3d:eb:34:a2:ce:dc:ba:5c:ec:ed:73:3d:f5:
         6b:73:1a:c7:51:0d:b7:7e:fd:a4:78:0f:53:16:e9:6e:f8:6d:
         fd:6c:4c:b8:fb:5e:44:db:8b:67:c2:d7:96:01:94:af:f2:04:
         0f:bd:5f:a0:68:c3:71:b4:26:ef:97:a5:77:31:9b:3e:ab:ac:
         73:d6:6a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:39:26 2025 by rpki-client