Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/84fee446-c3dc-3456-8f66-e49153e20008.roa
File:                     84fee446-c3dc-3456-8f66-e49153e20008.roa (raw, json)
Hash identifier:          DS+nZNVylJy208PxXwSdR11GgS93f4z/R9pBxsOVY+E=
Subject key identifier:   59:FC:0F:9E:23:B9:2A:4A:26:A5:A8:4C:FE:4E:C3:E1:F6:85:64:03
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7A6F1094D9E0389E6421B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/84fee446-c3dc-3456-8f66-e49153e20008.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.144.139.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a6:f1:09:4d:9e:03:89:e6:42:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=ef0e23b5-b3de-450e-b0eb-d153f3caccff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e3:8c:29:d1:af:14:39:87:1f:8a:dd:07:e4:
                    e6:4a:5d:b1:ba:3f:db:02:5e:c9:b4:ac:9e:64:b5:
                    8b:30:43:7f:4d:17:2f:b7:a6:f6:a5:d2:37:84:76:
                    cb:dd:35:5e:b1:2f:5c:d7:ad:74:b7:dc:36:5b:e7:
                    f9:c4:f6:8e:32:7a:a0:c6:d4:e5:c5:bf:55:b3:ad:
                    7f:1a:95:35:5b:c3:59:24:f7:91:c4:6b:3d:64:39:
                    7b:dd:36:87:c3:97:c9:a1:c8:b6:16:a2:bc:a5:80:
                    50:ff:dc:33:90:c6:aa:f4:97:1e:cf:a3:e9:c8:e1:
                    1f:1c:d3:ff:f9:00:5a:f3:2f:95:c7:91:4e:ae:6f:
                    0c:e7:f5:90:e6:ef:b5:4a:4a:18:a0:48:cf:2c:a3:
                    e2:39:59:24:97:8c:76:46:8a:ab:01:18:1f:07:0f:
                    92:a5:b9:75:b1:92:af:a9:2b:b1:7f:c2:df:b6:9f:
                    a7:15:db:ba:6f:74:fc:93:bd:3f:60:a9:d5:a6:fb:
                    c6:4c:e6:e5:ae:44:14:45:d2:73:db:3f:eb:b9:91:
                    63:4b:41:ea:53:27:77:4f:99:35:a4:c9:8c:f2:d2:
                    f1:d0:fd:c4:58:68:cb:6c:61:3a:c2:15:38:19:12:
                    6b:23:1f:76:63:1b:73:be:c9:fb:e5:ba:cc:eb:89:
                    3d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FC:0F:9E:23:B9:2A:4A:26:A5:A8:4C:FE:4E:C3:E1:F6:85:64:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/84fee446-c3dc-3456-8f66-e49153e20008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.144.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:f0:fd:81:78:5b:16:75:03:77:b1:6d:c5:65:7d:6d:28:b5:
         42:dc:35:99:91:ed:15:f1:49:57:00:e2:ba:9a:f5:43:f1:2e:
         5b:dc:85:32:bc:7d:4c:fd:d8:4c:6b:a9:b8:ed:27:ce:df:7e:
         bc:51:8f:7e:78:2e:0b:04:07:3a:70:6b:eb:c6:0e:70:7f:2a:
         8c:af:d8:c6:54:3c:84:ba:81:f9:c9:01:c1:c0:23:4f:0a:c9:
         8b:bf:44:e0:bc:23:ea:1e:80:c8:5f:74:b5:bc:97:b6:83:e0:
         60:45:83:f9:b9:85:4b:68:a5:62:6d:7a:69:d5:2a:17:09:6c:
         ef:91:54:64:aa:48:fc:e5:b4:b7:0e:a3:c7:64:6e:b9:74:ce:
         a6:67:6b:4f:73:bc:32:09:f8:1c:45:f7:a9:f8:9d:2d:f6:ea:
         68:ca:eb:93:fa:ca:84:b0:4c:62:af:35:59:dd:a7:f7:2d:04:
         7f:14:da:31:8b:89:c5:e7:11:8d:9a:e8:cd:a8:a3:68:09:7f:
         56:e0:67:e1:a6:26:ce:6a:1d:09:d3:76:4a:0a:83:3c:86:c0:
         5d:1d:22:27:be:80:f7:3b:f0:cc:67:6b:38:e5:a1:98:61:42:
         eb:c2:52:15:61:d0:d2:2e:05:1b:25:e6:29:0c:e2:02:3a:d6:
         be:74:f2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:59:05 2025 by rpki-client