Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6e4b6aad-8e78-3c15-8255-6b064df399cf.roa
File:                     6e4b6aad-8e78-3c15-8255-6b064df399cf.roa (raw, json)
Hash identifier:          3HpGzEYMXUrNsHVS3vwjR4DteUMhcCij0sTg4SICqWE=
Subject key identifier:   21:4E:73:AE:3C:E3:60:70:E2:2A:6A:03:10:A8:63:C2:E4:E4:3B:C0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309FAAFEE9C425E479C779390
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6e4b6aad-8e78-3c15-8255-6b064df399cf.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.124.88.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fa:af:ee:9c:42:5e:47:9c:77:93:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=1c80a8cd-777c-4630-a533-7ae61e6f2dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b7:11:26:68:73:2e:70:00:01:40:a5:74:90:
                    cb:84:0a:6e:27:79:47:e0:fb:84:46:c1:ec:00:48:
                    f7:73:2c:d3:a1:5c:73:1d:28:8a:ca:87:06:48:92:
                    ad:68:42:d6:ff:64:e0:4b:2d:b3:4d:b0:b0:a6:b6:
                    6b:b8:4f:5e:e7:c8:47:f0:cd:7c:1f:12:0e:22:40:
                    e8:01:e4:61:bc:a5:c2:ec:46:5a:37:5a:3d:8e:a2:
                    c7:c1:d6:cb:70:85:06:b6:e6:29:de:76:d9:aa:04:
                    20:86:b3:06:e9:20:75:e4:6b:0a:0a:46:0d:fc:b1:
                    c4:51:10:a1:d2:10:7a:e4:bd:d5:bf:96:d7:75:57:
                    11:ba:ec:5f:6c:c0:40:78:65:4d:10:12:40:aa:3d:
                    2b:f9:63:a9:e2:6c:fb:37:68:77:76:eb:c1:b1:34:
                    09:2c:2c:1a:a0:25:0e:04:c1:f2:85:80:8a:a4:b9:
                    8c:0b:53:c7:cc:56:80:7c:91:70:b7:a6:f5:31:25:
                    47:57:20:5c:a0:15:09:43:15:bb:1e:3f:7e:87:20:
                    94:2a:a5:e2:8d:74:e7:f8:68:0c:b1:a3:f3:f0:08:
                    82:e7:78:89:7e:84:95:71:c7:6a:5e:fa:65:f5:cd:
                    85:38:41:f4:c5:e3:25:05:87:8f:07:a3:9e:e9:fc:
                    e1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4E:73:AE:3C:E3:60:70:E2:2A:6A:03:10:A8:63:C2:E4:E4:3B:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6e4b6aad-8e78-3c15-8255-6b064df399cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.124.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:88:6b:81:fe:9e:f7:8c:aa:ce:6b:44:eb:07:af:3c:ef:e5:
         0a:56:95:14:ac:bf:78:94:b7:ed:c8:b1:20:cc:62:4f:40:b0:
         df:69:85:cf:34:df:91:88:b2:56:fa:51:75:ba:1b:c8:4d:14:
         2c:1d:1e:4c:3d:13:c6:5d:22:a4:40:ce:94:2c:59:e4:17:a4:
         a0:7d:ea:cb:44:4a:35:1a:e6:72:30:ad:47:d7:7d:99:6f:51:
         13:3a:1d:8a:b0:db:47:db:9c:dc:2c:bd:2a:c3:c1:86:dd:82:
         08:d5:b0:b9:70:15:2b:fc:04:56:41:18:90:a9:4d:f3:96:75:
         4b:02:64:a1:58:35:50:46:40:bb:3b:74:34:18:11:9c:17:39:
         5a:2f:e5:2d:79:71:8f:12:1d:98:68:6f:15:f9:87:3b:b0:83:
         29:97:77:c0:4e:89:22:fb:4e:41:93:2d:6c:1b:b2:56:3d:f7:
         f1:02:ec:10:5f:59:a8:ed:42:18:5c:53:0b:21:99:07:ad:56:
         4d:54:70:e9:71:c7:03:a9:aa:9a:5b:ef:06:54:f3:b4:e2:4e:
         54:81:ac:ec:1e:1b:24:ff:d2:25:e3:41:64:67:e7:be:47:89:
         d1:23:1b:2f:95:02:1e:9e:9e:ca:3c:7b:10:76:f4:0f:af:3a:
         19:a7:ae:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:38:02 2025 by rpki-client