Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8c95d322-c071-3161-a9c4-69b943c896ae.roa
File:                     8c95d322-c071-3161-a9c4-69b943c896ae.roa (raw, json)
Hash identifier:          3GsynZ15jGw5YUbakIPRpVcCzO1etHgLrJHOixxErWU=
Subject key identifier:   20:70:AF:5A:EF:D0:63:00:78:E5:D9:30:2E:28:22:5F:B9:71:57:53
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285842B064FC1DA5BACA9B5B128180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8c95d322-c071-3161-a9c4-69b943c896ae.roa
Signing time:             Wed 26 Jul 2023 12:00:00 +0000
ROA not before:           Wed 26 Jul 2023 12:00:00 +0000
ROA not after:            Mon 29 Jul 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.119.0.0/16 maxlen: 16
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b0:64:fc:1d:a5:ba:ca:9b:5b:12:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 26 12:00:00 2023 GMT
            Not After : Jul 29 04:00:00 2024 GMT
        Subject: CN=65c358b5-9889-4326-8f03-e7a9b3a2da1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1d:17:2a:45:4e:8f:cd:f0:84:f0:0e:76:e9:
                    8a:28:50:f3:b5:a0:ec:18:4e:0b:ab:84:d9:74:57:
                    e8:9d:ef:24:41:36:8d:07:95:22:3d:a9:06:ec:1b:
                    a3:10:e2:9a:98:d6:e5:59:05:75:48:d2:02:2f:aa:
                    c9:8a:44:59:d7:ce:65:fd:ed:c9:f0:11:58:a1:57:
                    59:81:0c:6e:1e:df:77:3e:73:30:00:b7:39:e0:cf:
                    0d:f9:6e:11:bd:a1:8f:8e:7f:8d:a7:1d:59:5f:a3:
                    3a:21:fb:8b:57:19:46:5e:85:fc:6a:b3:4d:bc:9f:
                    83:c5:4a:97:88:66:85:32:30:f1:64:f9:66:f7:db:
                    b1:6f:b9:ae:04:a0:34:5d:41:e8:11:23:7d:5d:9a:
                    f7:0e:45:f1:40:a5:96:cb:ef:74:b4:bf:b8:8b:74:
                    8b:5e:a0:a9:e6:6a:31:0b:80:e2:03:c3:fb:ee:bb:
                    00:62:14:0d:0c:20:30:83:42:46:29:39:6a:b1:40:
                    d8:42:c0:d0:39:f2:b2:e6:b7:1e:f4:c6:41:28:49:
                    00:8f:b3:91:f1:c8:72:b1:65:45:84:12:6d:86:9a:
                    5d:b0:b3:77:da:91:6c:ff:97:30:28:c2:8c:8b:96:
                    ef:8a:71:5e:88:47:dd:af:ac:1a:4e:ba:a6:57:85:
                    60:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:70:AF:5A:EF:D0:63:00:78:E5:D9:30:2E:28:22:5F:B9:71:57:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8c95d322-c071-3161-a9c4-69b943c896ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.119.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:0a:fa:84:55:26:f1:51:77:1e:eb:bd:a8:10:f5:d0:88:35:
         04:70:b4:ee:fa:14:55:01:4d:bb:12:48:8b:6d:25:9e:41:a5:
         10:30:9a:24:d9:89:96:9a:f1:0f:63:a8:96:a0:89:30:9a:ef:
         f6:8d:91:47:d5:85:7c:7e:0a:af:61:4d:fd:eb:3e:3a:85:59:
         47:45:a5:6b:53:0f:38:2e:5c:40:02:5f:db:7c:89:24:ec:ff:
         d0:b7:7c:dc:02:e8:69:32:89:a3:41:5e:de:43:75:ec:f2:10:
         0a:ed:89:1e:c8:55:55:e7:95:a6:a8:42:64:8e:02:a8:96:71:
         c5:6b:a6:59:9a:af:e5:a3:7f:f9:54:57:13:aa:93:6c:cd:8a:
         ab:bc:77:bb:25:14:9a:2a:8f:4d:eb:70:c1:ce:4c:9c:b6:f3:
         d7:d7:43:86:f3:f7:00:60:a1:6c:5c:39:96:4f:ea:e6:a3:59:
         50:ed:22:9b:ae:65:37:ec:a4:de:b9:2a:00:12:27:37:b7:91:
         24:38:b4:12:12:bb:bc:9a:4e:16:00:63:fb:37:c8:33:69:99:
         95:48:26:3b:b0:38:cf:35:04:2e:29:18:48:94:91:96:c6:40:
         6b:5a:c2:0c:86:46:b9:82:40:5a:70:89:c3:0e:06:64:5f:c2:
         d1:48:68:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:56:40 2025 by rpki-client