Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d8d395b-7c94-3f91-a0e6-78828c807fdf.roa
File:                     8d8d395b-7c94-3f91-a0e6-78828c807fdf.roa (raw, json)
Hash identifier:          /LvXUOSNMoU8ukpb+eQAQeyLgWWTTt8kXEIV6Hpg5Qc=
Subject key identifier:   25:F2:C0:FD:E0:97:41:D7:FD:98:59:DA:22:ED:D4:36:88:BC:DF:0F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309F790894A13251FED604500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d8d395b-7c94-3f91-a0e6-78828c807fdf.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.106.96.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f7:90:89:4a:13:25:1f:ed:60:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=08bbef49-6191-4ab4-a900-816245ae9a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b3:8c:b5:0e:40:fb:20:aa:3d:ec:c1:20:f0:
                    ff:d5:6e:86:90:ce:9d:0b:2e:d3:e9:95:44:d1:52:
                    35:e3:8e:bc:51:c4:67:31:30:a9:11:e7:2a:fd:bc:
                    c0:9c:43:34:72:50:0d:21:31:4d:e3:5a:4c:92:26:
                    a1:da:11:71:0a:c1:9a:3b:7f:ee:94:80:07:c3:24:
                    2f:98:55:6f:62:88:fd:8e:bb:4c:90:a2:cd:e6:db:
                    08:d5:a3:73:2e:5c:71:ed:ba:73:d2:e3:0c:e3:8e:
                    74:c4:ac:22:5f:61:50:22:21:1e:11:48:5f:96:4e:
                    f2:c1:b5:d7:a8:f5:35:bc:71:80:d5:54:13:77:55:
                    00:81:1a:53:88:dc:71:6d:db:a2:70:b6:95:1e:25:
                    74:3c:ff:bc:cf:9f:d2:0b:37:60:26:e4:3e:00:77:
                    9b:7f:17:80:89:b6:82:d8:53:eb:c0:2c:f4:7e:cf:
                    01:ae:cd:41:fd:b1:7f:65:10:4d:9a:f7:b6:65:28:
                    01:57:5e:91:79:4a:89:06:74:97:9c:e1:6a:ad:7b:
                    06:3f:2d:dc:25:ab:e2:7f:35:01:fd:be:55:45:53:
                    7c:5e:9c:22:ab:3a:18:6b:c5:01:58:5e:7b:33:40:
                    32:1f:0e:26:ba:ab:7b:45:7e:9a:ea:f8:9e:e1:3f:
                    a2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F2:C0:FD:E0:97:41:D7:FD:98:59:DA:22:ED:D4:36:88:BC:DF:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d8d395b-7c94-3f91-a0e6-78828c807fdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.106.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:2a:61:c7:a1:20:a3:57:dc:31:7b:46:2c:8a:2e:e0:fa:6d:
         a3:15:34:dd:8a:41:9f:6b:0e:55:79:1c:89:b7:dd:1f:75:64:
         62:84:bf:40:d1:03:9c:18:0d:96:38:6d:ff:c2:03:a0:fd:03:
         57:12:8e:48:94:62:00:fe:29:e4:e7:70:b3:2f:e4:39:a8:da:
         70:45:91:4f:8b:ca:f9:b5:b0:74:d4:47:6e:76:04:f2:7d:f3:
         4b:33:db:b4:8e:c1:5e:7b:2b:be:58:ef:c0:8e:c8:4d:29:f2:
         4c:50:7f:37:58:e7:38:fa:1c:4a:ce:e6:7c:d0:f6:81:25:f2:
         aa:bb:f1:dc:cb:e4:86:ab:9f:fb:45:bf:65:93:c9:9d:77:4d:
         8f:2a:cb:ff:c5:e3:97:e5:c6:b0:0e:cd:ac:fc:bb:85:18:e9:
         b4:4d:f8:14:68:af:8f:b1:10:e3:a3:e1:33:bd:57:bc:41:97:
         00:78:bb:dc:26:04:a4:ea:1b:15:6d:57:b9:71:62:4d:2f:60:
         1e:f2:6d:9e:f7:0f:86:a9:7d:4b:ce:45:6f:ce:89:24:ad:17:
         15:3a:8c:81:23:47:c9:7e:9d:4f:b7:46:54:45:31:a0:06:22:
         58:a8:ee:48:a5:58:8d:08:b1:6b:6e:01:5e:e9:61:48:da:c2:
         31:7e:a3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----