Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7931f11c-c752-3dae-86ef-1f711cb1298a.roa
File:                     7931f11c-c752-3dae-86ef-1f711cb1298a.roa (raw, json)
Hash identifier:          /FGxIIJmQi7sARqpMjyGpGOlHs9wheto/2fDxJpFJr4=
Subject key identifier:   22:8A:AA:22:13:2C:46:D9:70:00:67:3E:EC:0A:E4:79:56:FD:DA:C8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847FF4A6C8EADAAAA8812F55000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7931f11c-c752-3dae-86ef-1f711cb1298a.roa
Signing time:             Mon 25 Nov 2024 14:00:39 +0000
ROA not before:           Mon 25 Nov 2024 14:00:39 +0000
ROA not after:            Sun 23 Feb 2025 14:00:39 +0000
asID:                     19527
IP address blocks:        34.124.104.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:4a:6c:8e:ad:aa:aa:88:12:f5:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 25 14:00:39 2024 GMT
            Not After : Feb 23 14:00:39 2025 GMT
        Subject: CN=fd518c37-b98f-4f31-bdc9-b8a33c621517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:4a:7b:f6:9a:32:3f:8d:e5:e0:5f:1c:ee:
                    82:a8:2a:60:7b:f9:e0:b0:14:49:26:5e:d1:06:1d:
                    7c:de:59:f4:96:c9:c4:3d:bc:7a:8c:0e:b3:eb:ef:
                    8b:75:6d:6e:c3:32:74:6b:75:0d:15:b9:c1:88:70:
                    6f:c8:8e:0f:f8:2d:09:58:b2:85:ee:f8:18:05:54:
                    a7:13:56:d0:31:8a:4e:52:4b:47:d5:68:9c:9d:0a:
                    5d:b1:5a:ce:1a:62:90:51:87:b6:db:df:6c:0e:b2:
                    8d:93:e6:f3:ed:42:0b:46:d7:05:a6:41:70:c0:de:
                    88:1c:9f:c1:c2:15:5d:bf:0b:0f:8e:a1:5f:22:f3:
                    b3:63:7f:7c:06:5f:af:4d:27:9e:05:c6:41:89:89:
                    0c:f9:2c:24:31:d5:4a:8c:f4:d7:a1:07:a0:75:67:
                    7d:0a:5e:b4:4b:af:6b:8c:e2:30:00:72:ec:e0:e0:
                    bd:d3:01:7c:f6:c4:b1:10:ee:a6:fb:23:00:60:98:
                    f4:e3:64:8d:65:b6:7a:4f:15:4d:04:56:f1:3a:f0:
                    e2:51:a8:75:42:c6:43:29:31:2e:bc:77:73:77:f5:
                    b2:39:28:6b:14:09:c5:58:67:19:78:20:9a:b3:1e:
                    6a:0d:7c:a9:60:39:4a:78:e5:63:ef:46:7a:fe:ad:
                    a0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8A:AA:22:13:2C:46:D9:70:00:67:3E:EC:0A:E4:79:56:FD:DA:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7931f11c-c752-3dae-86ef-1f711cb1298a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.124.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e2:63:55:a1:bc:0f:d9:26:bb:29:61:1d:01:f7:70:45:1d:
         40:49:ed:1b:fe:0d:e1:9d:50:9a:5c:96:20:ca:16:27:34:cc:
         92:47:88:ee:eb:6c:f1:40:8b:42:2b:bd:66:33:13:8e:86:0b:
         81:a0:16:e6:70:92:ce:73:17:d0:1e:25:7e:d5:b5:3a:5b:4c:
         50:24:74:eb:3c:4b:c3:1f:1c:2a:4b:9e:1a:bd:5b:85:b4:18:
         14:0a:92:29:69:0f:93:79:f4:78:89:22:f3:c2:ca:b1:b1:12:
         c4:46:f8:a3:b3:92:53:54:6b:03:72:bb:c0:05:89:5d:66:7d:
         bf:2b:3f:61:11:26:6e:df:c4:7d:fb:ce:f3:76:19:3e:32:b4:
         ef:5e:7e:f7:c8:79:04:ff:ac:ec:1c:41:50:51:41:a6:be:8e:
         d3:81:9a:ba:43:b7:c8:d0:ae:7f:1f:77:c7:c3:76:df:e6:a6:
         f1:d3:16:da:e7:e4:96:3f:7c:ea:73:44:f1:eb:1f:b4:42:20:
         31:a8:11:f9:c0:79:64:f7:7c:a0:22:37:c0:a8:84:4d:80:51:
         07:db:4e:46:cd:16:75:d4:17:9e:b6:bd:e3:5e:a3:de:52:1b:
         7f:d0:c9:af:1c:e2:79:87:78:40:6e:90:0d:f6:c9:54:f1:d8:
         46:77:67:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:22:13 2025 by rpki-client