Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/54f34e0a-b2cb-31d5-83a6-3b10c8040813.roa
File:                     54f34e0a-b2cb-31d5-83a6-3b10c8040813.roa (raw, json)
Hash identifier:          xEZN1RnGyzn5ZcZg18p3duvUkJ9l1Mmr62oKHokLk38=
Subject key identifier:   16:2F:F1:72:09:68:A0:E9:03:10:59:B5:E3:99:9A:15:04:73:65:13
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A2710498D87C9873B20C600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/54f34e0a-b2cb-31d5-83a6-3b10c8040813.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.146.48.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:27:10:49:8d:87:c9:87:3b:20:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ae378a21-e16b-48de-ac8c-cc3c33643842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:60:2c:27:c4:ec:75:6c:41:7a:d0:6d:75:d4:
                    01:d8:8c:3a:d9:6a:b6:97:d9:e2:2c:49:d5:53:db:
                    f6:bb:b2:cc:c5:b9:94:d4:13:34:d2:80:28:b3:53:
                    18:88:39:1d:16:4a:63:dc:2d:a0:8e:fb:56:a9:24:
                    46:d5:df:b9:a6:67:12:9a:1b:84:38:e5:7f:4a:70:
                    e2:99:6f:16:0e:74:f5:f9:40:8d:23:52:fd:ca:5e:
                    76:1a:7c:c0:92:69:6c:bb:81:8e:64:9a:bd:8a:b1:
                    0e:f2:9c:77:b7:de:b1:e1:6f:81:70:df:ba:f6:7f:
                    1d:cf:ba:71:e7:df:32:48:ab:55:cf:d2:fb:bc:6c:
                    7b:50:ed:6a:96:19:1e:20:a6:22:e8:e5:71:4e:62:
                    13:02:43:38:62:50:6e:63:ff:36:84:53:a4:e2:2d:
                    87:59:da:05:f3:ef:89:8d:e4:6f:c3:d0:9e:10:66:
                    be:ec:20:51:88:f6:95:d5:7d:89:70:3b:e2:95:9c:
                    d5:b4:4c:36:b3:42:9b:b2:47:59:d2:ff:cd:45:c7:
                    6e:af:89:0b:cb:c6:8d:e0:a1:cd:20:69:84:12:41:
                    30:17:51:3f:a5:bc:8f:48:ee:da:b5:b2:6e:6a:4b:
                    2a:80:e1:8b:1d:1e:4d:b7:8e:7c:e3:cf:aa:21:9f:
                    d9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2F:F1:72:09:68:A0:E9:03:10:59:B5:E3:99:9A:15:04:73:65:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/54f34e0a-b2cb-31d5-83a6-3b10c8040813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.146.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:d1:db:c8:48:b9:43:f9:0f:a9:6e:c7:4d:70:30:1a:b9:bc:
         c1:de:24:ca:29:98:6c:7a:24:78:a5:53:d3:f7:46:60:d1:b5:
         1c:ba:d4:3b:93:3e:91:7f:fe:37:9f:85:40:fd:92:9a:d3:28:
         35:1f:7a:b0:8a:5e:3d:fe:9e:32:b0:a1:af:ca:19:8b:26:41:
         13:d4:9d:10:45:17:ba:51:34:7f:cd:a3:df:73:a7:64:f7:ec:
         99:5b:67:44:79:79:27:d0:8f:11:2d:b4:64:09:8d:15:f8:83:
         c4:5e:df:ad:38:01:2a:31:3e:fe:ff:62:f1:0b:e9:96:ee:14:
         11:04:91:81:40:fd:e1:b8:27:aa:81:25:6e:52:16:f8:10:1c:
         e4:51:30:c8:f9:b2:26:09:f3:98:96:35:1f:25:79:ae:be:8e:
         df:56:33:61:8b:86:f0:6e:46:5a:30:37:07:4c:a2:98:b1:27:
         22:b2:c9:15:19:48:83:ae:73:28:dd:34:f8:bc:d2:d8:9b:0d:
         6e:60:91:14:90:cf:cf:6a:7f:ce:0e:26:71:01:63:2a:0c:70:
         00:62:7c:ab:9f:97:ab:89:ea:1c:f0:54:ff:ff:f0:10:3d:d9:
         b1:cb:5e:49:e9:8a:c3:b9:9e:96:95:e8:e7:11:79:86:f4:de:
         df:37:08:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKJxBJjYfJhzsgxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YWUzNzhhMjEtZTE2Yi00OGRlLWFjOGMtY2MzYzMzNjQzODQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WAsJ8TsdWxBetBtddQB2Iw62Wq2l9niLEnV
U9v2u7LMxbmU1BM00oAos1MYiDkdFkpj3C2gjvtWqSRG1d+5pmcSmhuEOOV/SnDi
mW8WDnT1+UCNI1L9yl52GnzAkmlsu4GOZJq9irEO8px3t96x4W+BcN+69n8dz7px
598ySKtVz9L7vGx7UO1qlhkeIKYi6OVxTmITAkM4YlBuY/82hFOk4i2HWdoF8++J
jeRvw9CeEGa+7CBRiPaV1X2JcDvilZzVtEw2s0KbskdZ0v/NRcdur4kLy8aN4KHN
IGmEEkEwF1E/pbyPSO7atbJuaksqgOGLHR5Nt45848+qIZ/ZUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBYv8XIJaKDpAxBZteOZmhUEc2UTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTRmMzRlMGEtYjJjYi0z
MWQ1LTgzYTYtM2IxMGM4MDQwODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpIwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGjR28hIuUP5D6lux01wMBq5vMHeJMopmGx6JHilU9P3RmDRtRy61DuT
PpF//jefhUD9kprTKDUferCKXj3+njKwoa/KGYsmQRPUnRBFF7pRNH/No99zp2T3
7JlbZ0R5eSfQjxEttGQJjRX4g8Re3604ASoxPv7/YvEL6ZbuFBEEkYFA/eG4J6qB
JW5SFvgQHORRMMj5siYJ85iWNR8lea6+jt9WM2GLhvBuRlowNwdMopixJyKyyRUZ
SIOucyjdNPi80tibDW5gkRSQz89qf84OJnEBYyoMcABifKufl6uJ6hzwVP//8BA9
2bHLXknpisO5npaV6OcReYb03t83CC8=
-----END CERTIFICATE-----
Generated at Sat May 10 14:47:53 2025 by rpki-client