Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52c85c71-d59f-350f-8ff3-719cc40ed250.roa
File:                     52c85c71-d59f-350f-8ff3-719cc40ed250.roa (raw, json)
Hash identifier:          shdEaQ9fhBo39LG75yN5gXikWG/7mUj0gPdjoHa5N6c=
Subject key identifier:   5A:67:04:FC:7B:09:D9:3C:C1:F0:0B:3B:C7:19:D5:02:0A:61:01:4B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309FC08A8E5C8F40478554F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52c85c71-d59f-350f-8ff3-719cc40ed250.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        34.185.0.0/16 maxlen: 16
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fc:08:a8:e5:c8:f4:04:78:55:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=542d536e-1e88-4816-a491-97a805e8bd6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4c:80:ba:d2:5b:2c:18:dc:39:42:d1:40:ab:
                    6e:05:bc:26:c5:57:ee:5e:0d:2c:6c:a8:93:78:ef:
                    4e:6f:26:ee:8c:fd:f4:0d:0d:ad:08:f1:86:98:36:
                    e5:50:4f:13:02:1f:b1:0c:22:81:26:36:bb:48:96:
                    da:d0:b5:2c:1f:57:33:a1:93:34:25:2e:b3:2c:f7:
                    92:ef:b9:96:f8:f5:a6:88:f6:09:45:70:8f:e7:2d:
                    05:09:8b:35:d3:ed:ed:99:23:70:11:64:28:85:37:
                    d0:8d:48:56:a8:6e:81:5a:cb:76:aa:b9:5f:84:36:
                    a5:38:f8:b3:05:17:cc:78:6f:a8:53:ae:4d:bf:7c:
                    48:f0:01:24:cc:bc:c0:db:bf:4d:6a:85:0d:8b:94:
                    9f:4e:7d:25:a6:0e:f9:de:cb:a3:91:b2:e9:c9:48:
                    00:3f:82:fe:1c:c2:c4:aa:43:fc:05:d0:e2:04:61:
                    4a:11:17:33:57:97:96:fa:2f:95:a6:4e:e9:8a:22:
                    ad:c1:f2:65:d0:52:b6:d3:0f:da:64:5a:82:9d:60:
                    15:1b:f3:e5:88:53:fb:9e:58:ca:5f:4a:79:3d:cd:
                    0b:d0:34:79:fa:4c:81:76:15:ec:6f:81:54:8e:5b:
                    57:75:5c:c8:14:73:fe:32:1a:a8:87:45:26:d4:16:
                    4d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:67:04:FC:7B:09:D9:3C:C1:F0:0B:3B:C7:19:D5:02:0A:61:01:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52c85c71-d59f-350f-8ff3-719cc40ed250.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.185.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:50:99:0b:07:a4:2b:06:b2:43:70:d4:a7:4f:a4:fe:a5:6d:
         b4:bb:38:48:a2:1d:31:03:d7:3e:c5:8e:69:f3:08:0f:f1:ab:
         51:b4:f1:38:83:15:03:d2:b5:7b:b8:2e:5c:80:70:c6:45:82:
         32:49:01:47:21:04:c6:5c:cf:66:9e:95:dd:a8:19:30:d7:b5:
         0f:8c:f6:fd:8c:f5:e0:d2:79:a9:67:f4:a0:9e:0a:79:0b:11:
         a4:87:39:e2:05:91:82:0a:76:df:04:9d:9c:85:9a:22:31:a4:
         e2:78:b9:aa:2d:c7:8a:9a:cf:3e:48:52:06:cc:b5:97:40:c8:
         18:19:aa:01:55:3e:09:44:1d:54:50:32:2a:c1:c3:aa:3f:c9:
         0b:de:14:27:f7:e8:ea:4c:14:88:79:9f:b5:97:28:e0:3a:82:
         64:be:8c:2a:f5:c6:e8:b6:a9:ba:63:36:c1:46:4e:54:f0:a2:
         11:c4:ef:60:d6:b4:5b:cc:a7:6e:fc:7a:45:84:42:83:e1:4e:
         9e:16:3a:1d:21:1b:8c:89:35:ae:7e:08:d2:9c:8b:f9:89:3d:
         56:59:34:53:8b:63:84:d0:f6:81:01:a1:b0:35:82:2d:f4:ea:
         53:7f:98:69:9f:c0:2f:89:d1:7a:d7:4c:a1:8f:22:c4:b6:c6:
         3c:bc:3f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----