Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e00c123-cd9d-36b5-841a-c42bf8fa61cd.roa
File:                     8e00c123-cd9d-36b5-841a-c42bf8fa61cd.roa (raw, json)
Hash identifier:          9RMJM+uq7dJQtxe56nrI9pf5iKo7/ccqBpTaoqXLhgM=
Subject key identifier:   F2:A9:DB:C5:F5:75:F4:06:79:B2:F9:73:A3:D7:9D:02:D5:2B:8D:1F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583E91D4B29A0D8FBCA654EC1C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e00c123-cd9d-36b5-841a-c42bf8fa61cd.roa
Signing time:             Wed 13 Jul 2022 12:00:00 +0000
ROA not before:           Wed 13 Jul 2022 12:00:00 +0000
ROA not after:            Tue 15 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.178.0.0/17 maxlen: 17
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:91:d4:b2:9a:0d:8f:bc:a6:54:ec:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 13 12:00:00 2022 GMT
            Not After : Oct 15 04:00:00 2024 GMT
        Subject: CN=7fea6881-9274-4027-a1b4-737ba090d382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c1:e0:30:af:2d:4f:cc:24:49:20:5e:ef:cc:
                    9b:2b:54:51:90:33:a6:01:92:03:9f:23:1f:9f:ce:
                    5d:5b:9f:e1:8e:35:15:67:f9:79:28:da:df:fd:a8:
                    8e:2e:ad:37:30:b8:1a:7d:ca:0b:59:ae:e2:de:51:
                    6d:01:7c:c0:f3:dc:0e:8e:85:a6:38:cc:58:6b:c7:
                    bb:59:7b:cb:85:f6:d7:20:f1:7f:ea:3b:73:99:54:
                    c8:58:a1:82:68:ca:36:93:6d:c3:1a:a2:30:44:19:
                    d3:7b:42:b2:6b:b3:3b:88:1a:c8:5c:f4:9f:8d:a7:
                    5f:08:9b:0e:32:6f:cd:db:07:bb:06:2d:54:c9:56:
                    01:ad:45:6a:0f:b3:8b:f8:dc:5a:cd:49:70:d1:0f:
                    eb:62:12:f5:1a:24:6f:f9:73:50:3b:97:3b:f5:b7:
                    0f:97:a9:af:23:26:8a:a7:10:36:29:32:bc:b1:47:
                    36:ff:a9:0c:29:c1:ca:ff:cf:de:5b:18:14:17:7e:
                    5d:73:9f:41:22:f9:10:b8:ed:79:b9:24:c5:dd:cf:
                    ce:b6:b3:e5:42:cb:a6:56:8b:08:e3:0a:95:05:99:
                    51:ad:28:c1:67:b9:5e:2c:b1:09:62:5f:cb:ae:d5:
                    e6:30:e0:0f:dd:34:66:d1:23:a0:a8:f1:fc:87:e0:
                    31:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A9:DB:C5:F5:75:F4:06:79:B2:F9:73:A3:D7:9D:02:D5:2B:8D:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e00c123-cd9d-36b5-841a-c42bf8fa61cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.178.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ad:8a:26:4b:02:27:d6:f4:43:99:25:65:93:1d:fa:b7:63:
         2f:17:88:5e:fc:87:b0:85:e5:32:31:24:a2:63:b6:d1:6a:de:
         bf:20:15:07:ef:b7:a9:77:bb:68:5e:37:49:68:50:f7:3f:39:
         38:19:61:14:ba:de:d2:03:93:56:e2:c9:49:af:22:fc:52:87:
         4f:9a:e4:1b:18:b9:5c:12:7b:ec:12:f1:63:b4:b1:70:7f:ec:
         0b:77:94:12:9f:69:a6:a0:53:14:2a:a7:c0:82:3c:ea:f5:2c:
         52:ac:52:23:12:a6:69:83:91:fd:ca:c9:df:9f:34:2d:d6:7c:
         27:3a:17:37:a1:38:06:b0:da:32:56:0f:8a:05:84:9d:fc:37:
         94:9f:d6:7b:73:d3:78:2a:07:1d:5d:13:ba:ff:7d:46:ae:0f:
         f7:10:6e:74:00:27:e7:3a:f1:a9:45:b2:f4:ad:21:be:c9:e4:
         35:a5:2c:ec:0c:5b:0d:76:df:c5:e1:f8:60:63:42:29:31:3f:
         12:67:8a:4e:f5:60:6c:e8:7b:2d:37:da:bb:6c:09:a9:f1:f9:
         41:88:7b:de:f2:aa:56:50:59:2d:2a:f3:7c:f5:eb:45:e9:a6:
         e5:e2:e1:60:1f:72:34:78:e7:b3:14:fd:55:ae:ed:06:3b:d1:
         96:2f:94:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:47:42 2025 by rpki-client