Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/65c1c416-df4c-3ee7-a5a6-99ce0fbddfaa.roa
File:                     65c1c416-df4c-3ee7-a5a6-99ce0fbddfaa.roa (raw, json)
Hash identifier:          r3WchJS9+GNTh23TRWl26krmRzYjjo84bipzqY4chBQ=
Subject key identifier:   E0:79:EB:D8:6A:FB:81:0C:C0:65:11:5C:A8:09:AC:51:FE:78:AD:5B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A0B8A9861E2DB05713DF080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/65c1c416-df4c-3ee7-a5a6-99ce0fbddfaa.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.78.96.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0b:8a:98:61:e2:db:05:71:3d:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=e4ef26a0-0044-4822-82e2-83f926ff59f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:fe:0b:b0:e9:81:0c:34:2d:24:b5:03:fc:
                    cd:d7:a4:67:7d:35:1e:c0:f1:65:0f:5c:18:42:14:
                    da:17:36:8f:7e:36:a2:f3:95:54:37:c5:a0:f4:57:
                    9a:b8:a8:9d:2c:f9:84:b0:d8:a8:25:84:d4:f2:06:
                    80:b4:fb:a7:b1:a6:f2:9a:79:40:62:03:cc:9e:b0:
                    17:e1:05:d7:c2:07:ae:5c:e2:d8:c8:d9:f3:f2:5b:
                    16:f9:7c:1b:35:a2:8d:f2:2b:0e:42:66:f1:bf:b9:
                    2a:90:0d:bd:86:1f:7b:1f:c1:aa:9f:68:d9:4f:1c:
                    29:98:d8:71:91:f6:1d:ad:8f:e6:98:91:f6:a3:7b:
                    5e:54:04:cc:db:a9:bd:87:83:76:ef:ca:69:e0:1d:
                    b5:b7:9f:9b:96:ad:a7:e5:27:55:ef:41:81:7f:61:
                    ba:0f:ba:19:e4:31:51:3e:3c:e7:73:7f:b9:e7:71:
                    b6:2d:7f:c2:94:8d:aa:eb:94:8f:9b:27:2a:24:d5:
                    d2:6d:67:6f:c9:42:b9:1e:2d:ea:be:db:c0:4e:ac:
                    98:8a:33:f5:ca:03:f5:9b:ec:f7:94:08:7d:53:69:
                    bb:11:3a:f9:c6:9f:53:6b:ed:88:1b:c6:b2:1c:93:
                    8f:bf:cd:67:07:1b:b5:b2:c8:73:06:8f:9f:4d:7b:
                    1d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:79:EB:D8:6A:FB:81:0C:C0:65:11:5C:A8:09:AC:51:FE:78:AD:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/65c1c416-df4c-3ee7-a5a6-99ce0fbddfaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.78.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:00:cb:c4:dc:46:1a:33:f0:22:af:6a:78:e8:76:ab:15:3a:
         72:cd:e8:9c:2d:a9:c6:72:e2:b1:19:57:eb:5e:fa:7a:c3:57:
         d3:2d:b9:a5:5e:75:1e:65:63:63:36:77:eb:5f:69:33:b7:da:
         67:b6:10:79:e3:09:ee:77:9a:ad:19:63:11:05:60:08:c6:41:
         c2:38:89:5a:89:d8:57:fb:18:92:5d:7b:95:e3:82:24:68:fd:
         56:59:f9:c2:22:cf:9b:db:87:48:29:9c:56:3d:3f:bc:dd:37:
         ba:07:84:b3:49:cf:4d:f3:42:0c:26:04:62:88:38:ec:49:6c:
         77:53:e2:88:bc:22:1c:bf:58:5c:4e:78:da:d3:99:29:5a:2d:
         27:d9:ea:7d:3f:c0:aa:22:f8:67:86:ae:81:58:d1:cb:67:7d:
         93:74:15:b4:5b:0f:15:4e:d7:ce:0e:61:e6:f6:f9:0d:81:c8:
         45:98:ca:8c:d6:18:20:d0:0b:99:df:fb:72:b5:45:96:f5:55:
         23:68:d1:06:cf:8c:29:91:5e:1d:7d:e8:d1:7e:75:66:49:8e:
         a1:8a:2d:5a:1d:1b:e5:f1:73:ef:a2:53:61:52:5a:d0:bb:13:
         79:02:1f:09:84:0b:47:4e:df:a2:0f:4b:a6:ba:fa:0b:5a:f8:
         c2:85:41:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:33:31 2025 by rpki-client