Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/82bedf17-cfd1-318a-b12e-cde57f468c95.roa
File:                     82bedf17-cfd1-318a-b12e-cde57f468c95.roa (raw, json)
Hash identifier:          3sJIbAiThMLb2sumSku4bOla7wvePLcFf7NPl8p8ozA=
Subject key identifier:   78:6A:DC:FF:87:44:AE:63:B8:31:15:4D:5C:A4:64:BE:83:2C:EA:F6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7A04052AB4B31D558E1F7C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/82bedf17-cfd1-318a-b12e-cde57f468c95.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.102.48.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a0:40:52:ab:4b:31:d5:58:e1:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=d8be5b27-2a91-4bcd-8497-c79d7fb41a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1d:dc:c5:ba:ff:59:63:58:13:d6:16:80:6c:
                    62:7e:10:09:8a:0b:db:17:3e:3c:57:b2:e2:4e:99:
                    24:8e:9c:e1:7c:af:49:c3:0c:d7:7c:95:89:da:2b:
                    04:9a:91:b2:f8:29:82:d4:28:b3:54:73:a1:43:ad:
                    f3:16:ac:74:52:f6:37:2a:20:fe:dc:de:a0:fe:2b:
                    65:5a:80:bc:52:da:35:b5:52:9f:ab:d7:53:fa:6a:
                    0f:d6:14:c4:04:bb:e0:4d:9d:d7:10:c9:ff:b5:9a:
                    a5:70:67:6b:03:73:22:80:09:b8:d2:ad:49:8b:bd:
                    5f:b9:a4:68:82:b9:ce:e3:a1:ae:2a:4e:65:5b:c4:
                    b7:6f:c7:74:36:cc:3c:d3:37:cd:07:0a:fd:4d:59:
                    73:aa:91:d4:d4:de:3d:41:9a:16:9d:27:0d:29:42:
                    37:fa:f6:05:00:b9:6d:6e:9b:5f:15:12:c3:91:a3:
                    03:c0:83:cc:98:4a:62:29:a7:fc:90:5c:fd:2d:9a:
                    93:57:6a:2d:3e:b5:b3:cf:28:bf:0b:53:25:c1:f0:
                    49:f5:e1:2f:75:78:5d:1e:6b:8f:fa:d7:bf:1f:a0:
                    ef:92:a5:38:0f:75:0b:33:73:5d:c0:74:50:92:6e:
                    c1:7d:b5:d0:46:b5:67:26:4c:24:fb:a2:3e:e6:38:
                    46:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6A:DC:FF:87:44:AE:63:B8:31:15:4D:5C:A4:64:BE:83:2C:EA:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/82bedf17-cfd1-318a-b12e-cde57f468c95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.102.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:2c:b0:d8:41:56:2d:83:2c:ab:a2:e1:38:af:c7:1a:45:c9:
         ad:81:a4:e8:fe:74:c5:1b:1a:99:0e:f3:08:82:2b:30:31:0f:
         66:3d:76:53:11:6f:bb:c0:7a:aa:17:38:3d:cb:43:92:29:26:
         29:97:7c:34:0c:53:bc:1d:fd:1c:67:e6:60:b1:30:d1:bc:17:
         85:3f:ed:ef:fb:15:ce:e1:95:31:4a:ee:68:e0:0c:69:a4:0b:
         a6:4a:e9:06:78:a7:65:0c:b8:88:e9:14:02:da:85:fd:7f:bc:
         88:4d:a4:9b:a7:45:68:aa:bc:74:d0:9a:2f:03:6b:d3:fe:95:
         b8:bf:b2:da:04:48:b1:90:c6:ec:ef:c9:96:90:be:9d:b6:94:
         a8:ac:6c:15:28:cf:a4:16:29:ce:9f:82:1d:b8:d1:56:41:3c:
         a1:37:9c:be:ce:6b:25:59:82:9b:51:55:49:59:1b:4d:e0:0e:
         1e:3a:e4:c4:60:3e:9a:78:8b:bd:de:40:f7:36:27:f3:a9:58:
         62:ca:74:86:52:1b:84:11:23:ae:38:9f:21:7e:8b:2c:ce:1b:
         62:9a:ff:cb:b9:b6:23:37:02:da:13:95:29:8d:9d:cb:56:19:
         83:d7:61:19:6c:01:2c:f6:b9:64:1b:44:21:b6:b0:1d:4f:ad:
         9a:bd:71:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:44:41 2025 by rpki-client