Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90f7e636-8077-3073-a7f7-73cd89d54d9d.roa
File:                     90f7e636-8077-3073-a7f7-73cd89d54d9d.roa (raw, json)
Hash identifier:          7eDfaB+9wtqKbkFqud7yVR6OTr2vvLbRg8QBFVcDY4U=
Subject key identifier:   4C:05:E0:FE:29:32:15:66:5B:41:6F:AC:B1:B6:83:63:5C:AC:B6:EA
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A0E2727FB0C738389E1CF80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90f7e636-8077-3073-a7f7-73cd89d54d9d.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.148.224.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0e:27:27:fb:0c:73:83:89:e1:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=72120972-34ff-41e4-aede-fca374f92c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:45:68:d3:31:96:e1:2a:21:47:47:59:5c:e8:
                    11:9c:9f:e5:62:53:0f:df:04:46:24:42:53:c0:24:
                    25:80:61:24:be:04:e2:26:09:0e:02:05:9c:32:92:
                    bb:9f:ee:f5:64:32:48:79:8b:d7:c1:19:ae:77:6d:
                    99:f4:70:55:17:99:18:bc:42:60:25:63:b7:53:22:
                    8f:51:9d:7f:43:02:50:35:a8:1d:1d:d4:40:ec:76:
                    3f:03:80:37:ec:23:75:dd:ab:9c:8c:48:8e:16:c2:
                    7f:bf:1a:1d:83:30:29:eb:db:df:66:ab:03:16:c0:
                    36:89:f9:c8:e4:1b:a4:f6:91:ee:97:7a:6e:9f:9a:
                    1f:46:c4:31:7e:2c:d9:36:a8:40:56:6d:81:38:45:
                    67:d3:1c:de:30:28:04:01:0d:d6:c6:4b:6f:8f:3c:
                    bc:de:6d:c8:4f:78:58:d0:3f:46:a7:9c:86:c2:84:
                    73:41:f5:8f:ec:be:ff:65:56:3d:e7:3c:0c:01:df:
                    48:2f:5c:40:9c:0a:63:3d:ac:35:32:9a:2c:1a:ac:
                    d6:3a:77:77:64:63:97:aa:50:76:31:bb:7f:09:aa:
                    d4:0d:e8:5e:a9:8d:d1:8a:7a:2d:b1:e7:1d:40:2e:
                    46:b8:4a:f6:f9:43:0b:b3:10:72:63:d7:0d:16:bf:
                    ac:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:05:E0:FE:29:32:15:66:5B:41:6F:AC:B1:B6:83:63:5C:AC:B6:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90f7e636-8077-3073-a7f7-73cd89d54d9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.148.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:46:0d:52:62:71:e9:30:f8:0c:cf:7e:67:55:c9:18:e1:74:
         3a:84:9f:77:c9:91:a3:f1:3d:44:e0:6b:21:1d:b0:c9:14:ef:
         51:49:fc:40:f1:de:db:c9:24:3d:d9:fb:bc:a9:36:5c:b2:db:
         f8:ec:f9:9c:da:5e:d4:9f:96:82:dd:71:e3:8f:ca:e2:23:c0:
         6e:7b:e2:0f:dd:1f:1c:57:ee:07:47:97:a1:ab:55:e0:4e:81:
         b3:e2:d0:b2:8a:16:d9:51:ad:94:df:19:44:da:3e:1d:a2:ab:
         13:9e:7c:54:46:f6:33:b3:c7:64:4d:6b:d0:2b:3e:b3:df:75:
         f5:4d:48:f4:04:ec:d2:1a:5c:57:4b:29:85:36:4c:df:91:ad:
         c5:b6:2f:46:0b:39:eb:f9:74:46:08:15:4e:7f:0d:2a:88:2d:
         da:7d:51:fe:1d:c9:e9:65:e5:9f:27:70:2f:94:a1:85:24:4d:
         4f:97:1d:e4:6d:ad:2d:90:aa:c4:61:fb:7c:1d:d8:bc:66:04:
         cf:8c:ca:05:12:a3:e7:4c:96:af:d2:67:e0:83:e9:cf:4a:e8:
         fa:dd:eb:7a:44:46:73:c3:a6:6f:ff:6e:09:27:66:ad:89:b1:
         87:10:db:89:79:3c:a4:31:02:ef:35:26:48:3f:01:9f:ce:c9:
         84:f2:22:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:48:59 2025 by rpki-client