Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ffe3327-fc15-3b8c-ad93-d872daeeec91.roa
File:                     6ffe3327-fc15-3b8c-ad93-d872daeeec91.roa (raw, json)
Hash identifier:          vk0b/gvttByVnLxoMU8VzHxrK4xmrfY64DhpfqlyRpA=
Subject key identifier:   EB:B2:23:58:64:DB:0F:5C:50:B5:7A:61:2E:DB:EB:00:CC:1C:44:CF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A1C0CBFE325CA0C06B0BF80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ffe3327-fc15-3b8c-ad93-d872daeeec91.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.151.240.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1c:0c:bf:e3:25:ca:0c:06:b0:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=62b182da-3d29-43d9-9cfa-8d5f17cf9ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:50:74:fc:ac:c1:ff:f4:19:33:77:55:6b:a8:
                    5a:8e:72:e8:7a:4f:87:f7:40:15:0b:1d:e5:12:f8:
                    dc:02:62:3f:27:0a:d3:85:c6:42:01:d8:ae:a0:e1:
                    59:d2:b7:4d:f0:e7:f5:eb:41:36:dd:8b:a7:d5:0b:
                    de:d0:19:4c:33:e8:06:84:22:1f:e7:05:70:d7:25:
                    63:aa:0a:93:e7:a7:70:c9:ae:9a:6b:de:27:d7:11:
                    28:23:bd:f0:1c:b1:cb:8b:d5:a2:ca:42:b6:d1:35:
                    99:7a:34:ec:80:6e:21:16:b5:e0:09:6c:ee:c8:c1:
                    d8:70:65:bf:40:55:e7:6b:4e:e6:8c:45:be:98:b5:
                    69:43:0f:09:e1:a1:2b:c2:74:9a:63:fb:4f:e1:c8:
                    60:c6:8b:2d:23:4a:ac:0f:40:43:84:86:5e:c5:05:
                    cd:73:aa:83:fb:ff:ca:21:cc:ec:b2:71:83:04:7e:
                    7a:54:cc:88:94:f1:c4:9f:1a:73:1e:16:a9:e9:73:
                    e1:5b:f8:79:1c:10:a5:ae:4d:5c:8b:aa:f4:e9:d7:
                    bb:99:47:f0:bf:6c:8d:de:b5:73:d4:a1:13:01:ae:
                    e4:b9:ce:8d:79:7c:f9:81:91:c6:d4:7f:35:10:69:
                    75:c4:80:e5:19:7d:a4:ee:18:0f:65:af:1b:ad:97:
                    f3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B2:23:58:64:DB:0F:5C:50:B5:7A:61:2E:DB:EB:00:CC:1C:44:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ffe3327-fc15-3b8c-ad93-d872daeeec91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.151.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:ae:df:c1:49:3e:2f:8b:f2:7e:b8:6e:3b:db:d2:66:d6:48:
         d4:1f:d4:71:04:9c:a2:05:0f:03:32:b5:3d:a1:46:b5:cd:6a:
         3c:9b:8f:23:e9:f7:f8:bf:bb:88:9d:dd:63:99:48:27:00:0d:
         79:d4:d5:05:cc:ce:15:93:ac:8f:02:db:74:a2:fc:bc:e8:9d:
         8e:37:43:69:bb:67:6f:16:b2:a1:ba:9b:d8:8b:ae:2e:5b:01:
         2b:05:cc:19:4e:03:93:09:d1:68:c9:44:1d:f8:a6:b8:d8:62:
         32:dd:e7:c5:aa:60:f6:76:77:cc:37:39:7e:4b:88:0f:54:6d:
         d2:e5:81:19:58:59:56:5c:83:bf:de:43:44:aa:ff:b0:43:ba:
         fc:ac:5b:29:fb:31:e0:e1:6f:f1:66:b7:c5:e7:6e:7a:a4:47:
         c1:6c:23:56:2a:38:e0:51:b2:88:ae:d3:3c:2f:53:0f:8f:5a:
         3c:7e:9a:d6:e5:a6:4a:3b:fb:27:c4:c1:1a:bd:8c:f1:f2:d8:
         fa:35:b1:a3:f9:b0:57:75:a0:4a:d3:d0:0f:90:dc:f1:76:b5:
         e5:e2:ee:53:b9:3e:bf:8a:99:7e:d7:8e:92:6c:45:b8:be:74:
         2e:06:ea:c6:cf:ea:d6:36:29:84:f8:d6:bb:1a:24:f6:af:2f:
         42:8d:b4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:59:03 2025 by rpki-client