Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5ebebd20-08fb-3296-8067-b18cb70a238a.roa
File:                     5ebebd20-08fb-3296-8067-b18cb70a238a.roa (raw, json)
Hash identifier:          dsc2ULgV0fKU7xQ2GVDZLJ6hTofTQu8ROd5ujUfMbkI=
Subject key identifier:   1C:DB:52:8C:9C:6E:03:CB:12:FD:D9:8E:B4:BD:E2:1A:9D:9F:11:92
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285843B2A711AF9B3D7E97D89A2180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5ebebd20-08fb-3296-8067-b18cb70a238a.roa
Signing time:             Fri 27 Oct 2023 21:00:14 +0000
ROA not before:           Fri 27 Oct 2023 21:00:14 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     19527
IP address blocks:        34.1.67.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:b2:a7:11:af:9b:3d:7e:97:d8:9a:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 27 21:00:14 2023 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=c125a82f-62f9-48b8-91f1-210549694cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:bb:37:41:08:e3:2a:41:c1:5d:7a:a2:c2:
                    e4:85:cd:7d:7d:f3:38:9b:60:6b:cd:6d:d4:27:e9:
                    30:90:a5:bc:e0:fd:e0:1b:5f:8b:d9:49:87:04:dc:
                    68:83:f1:07:24:b6:ec:6b:f0:fd:83:f3:fd:82:e1:
                    1c:96:cb:f7:5d:22:41:48:0f:e8:e0:d5:02:51:9f:
                    96:0c:36:2c:e8:36:f1:69:fb:1b:11:9f:16:d2:ea:
                    6c:e3:84:b9:7b:31:a2:45:b5:0c:be:5e:1f:06:38:
                    13:91:64:7d:9a:1e:20:56:2e:e0:4a:b9:75:a7:a6:
                    27:91:67:b6:25:4c:cb:6c:50:e4:87:7b:8f:21:20:
                    54:4d:17:eb:c7:12:d6:a1:18:8e:b6:1d:d2:e6:e4:
                    98:bf:d8:4d:71:6d:83:71:0d:bc:3e:d2:89:20:52:
                    77:a8:34:11:2e:af:3a:f3:8c:96:25:c3:0c:0b:d7:
                    60:4d:d7:88:df:d2:19:74:d9:ce:fc:3e:21:0b:76:
                    43:5e:d4:02:2f:b0:dd:68:94:a8:89:60:93:80:3a:
                    de:01:1d:bd:ef:c4:74:55:26:15:8a:22:c7:9b:7d:
                    8b:02:ce:eb:ce:23:cc:a9:3e:36:c9:0d:7a:4f:5d:
                    72:fa:ac:c3:fd:e6:ef:d5:ec:f7:ef:01:31:4d:24:
                    39:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DB:52:8C:9C:6E:03:CB:12:FD:D9:8E:B4:BD:E2:1A:9D:9F:11:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5ebebd20-08fb-3296-8067-b18cb70a238a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:5a:3d:fe:c0:d5:ea:f8:e4:85:ed:23:f4:3e:79:75:88:5b:
         8e:11:3c:11:13:38:a2:62:d6:01:ce:7b:fc:95:b8:07:03:25:
         03:11:b3:99:16:e1:fb:12:a6:71:c7:37:ba:bb:55:5c:e9:e8:
         3c:1e:ae:31:68:80:ff:9c:10:3f:b2:1f:bf:28:7e:ca:24:63:
         00:86:29:31:69:0c:91:e7:d2:b1:db:f0:65:62:a5:55:e5:16:
         96:24:b2:56:5e:f7:e5:33:f3:42:71:50:2d:c1:05:b3:8a:34:
         5e:0f:cc:de:a2:da:e0:b0:6f:5f:d2:fd:5b:3d:bc:67:01:df:
         d0:61:ad:ad:72:3e:55:60:5b:a2:cd:9c:dc:af:ce:ff:c4:16:
         15:be:32:1b:03:d4:44:b9:04:ad:6a:d9:81:52:03:65:b9:19:
         7f:16:66:c2:d7:09:2f:fb:a4:e2:50:fd:8b:79:89:a4:71:17:
         79:4e:51:b7:b2:12:46:d9:a2:15:4e:ca:61:ab:13:4e:e4:da:
         dc:af:31:95:66:1a:68:73:d2:3a:9b:e4:86:3a:00:e0:da:aa:
         7a:76:7d:f1:87:18:b6:f5:de:62:68:a6:32:18:ec:c8:b7:1d:
         79:d7:b7:c0:88:ef:2b:b2:b7:14:24:d9:05:bc:0c:ac:56:19:
         7f:b8:ed:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----