Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6a8bc11e-9f5b-3162-b26a-0ce861e44028.roa
File:                     6a8bc11e-9f5b-3162-b26a-0ce861e44028.roa (raw, json)
Hash identifier:          2x8VmxW+dyh4yfvr1NXzg5GPU611Eu8Np2zXKIHBxZU=
Subject key identifier:   65:DA:77:C2:1B:85:DE:30:40:B8:EC:38:CB:C5:CB:2B:0D:4C:B4:97
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A1E861D3B551F9F9914FE60
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6a8bc11e-9f5b-3162-b26a-0ce861e44028.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.103.80.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1e:86:1d:3b:55:1f:9f:99:14:fe:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=6efc49e6-4d96-4c6b-bfbf-7ed443c8914f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:36:28:80:ea:18:3b:1d:fd:ed:4a:e4:6d:32:
                    e5:87:2d:c2:ed:fe:09:55:d7:cc:a2:aa:be:1c:a0:
                    76:31:a0:83:1a:cd:64:9c:25:d2:28:44:8c:de:9c:
                    4d:06:97:a7:9d:75:42:ee:a6:8b:82:e3:df:de:3c:
                    15:08:ea:87:cc:07:9e:dc:6c:dc:1e:e9:92:e3:7d:
                    d3:eb:2e:7c:1b:14:cb:cd:5d:00:32:e0:80:7b:7f:
                    c3:a9:93:00:73:bf:32:ae:9c:5f:9f:ab:3d:66:dc:
                    5b:e3:32:b4:12:f5:db:30:98:42:0e:36:13:02:20:
                    0d:49:e7:4a:2a:28:2b:81:88:f5:20:66:1d:a7:fd:
                    da:ee:24:d8:b8:05:22:c0:b9:11:7b:53:e6:42:93:
                    27:43:a1:23:e0:1b:1d:75:4b:88:54:a3:37:80:09:
                    0b:8a:cb:3c:a2:a2:e2:77:0a:c0:87:37:71:44:b7:
                    f8:a0:a8:00:40:ef:f0:c2:b5:94:49:79:12:89:15:
                    51:f9:83:49:b9:9f:cf:41:25:b2:43:9a:ad:ee:1a:
                    c0:a3:a4:e5:db:fb:63:d2:f9:7d:63:0c:12:34:14:
                    ff:9d:4a:8a:a4:22:89:cb:90:60:51:13:a6:a5:e5:
                    13:25:8e:cd:a1:6a:af:1f:b2:d6:5a:2a:44:98:65:
                    95:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DA:77:C2:1B:85:DE:30:40:B8:EC:38:CB:C5:CB:2B:0D:4C:B4:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6a8bc11e-9f5b-3162-b26a-0ce861e44028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.103.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:18:c0:f0:a3:06:67:36:66:a9:fe:bb:4b:68:b0:57:29:81:
         f2:6e:a8:0b:c9:cd:10:7a:b6:d8:73:2b:5a:4c:d6:d8:d7:de:
         03:bc:34:c3:bf:42:0e:1e:4e:5b:d6:6f:be:48:7c:a4:db:95:
         ba:5a:af:85:90:ea:4a:b4:95:ff:22:d5:f4:81:53:42:43:2b:
         e6:70:92:30:d2:e5:f6:a9:94:fe:44:fe:ab:10:5c:fe:4f:de:
         a7:88:c6:ae:11:67:f7:b4:94:88:34:b8:7e:41:7f:9e:22:c6:
         79:74:f4:5f:e4:27:bd:99:90:33:81:72:53:88:de:e4:fd:18:
         8f:e4:3c:8f:b3:af:c3:11:ad:04:df:20:d5:f1:17:ef:d5:85:
         f3:cd:92:29:0a:19:94:58:2f:12:15:fe:42:f5:ea:2a:30:50:
         c5:32:40:62:55:f5:2a:6b:4d:38:56:46:04:00:6f:32:b0:75:
         4a:bb:84:5e:0f:a9:2d:08:9c:c3:8f:25:0e:a4:cc:4a:f8:91:
         33:54:a2:29:65:af:35:32:4b:9b:12:e5:40:3b:54:32:91:bc:
         97:14:68:4d:86:8c:1e:dc:db:52:94:b0:ed:74:70:9c:a5:68:
         0b:f6:8b:72:76:71:d4:d5:3e:4c:21:c3:ee:f2:84:d1:d0:7a:
         c6:13:d8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:35:47 2025 by rpki-client