Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9d6c3e90-e6d2-36a2-9f38-4bfbaa03b52e.roa
File:                     9d6c3e90-e6d2-36a2-9f38-4bfbaa03b52e.roa (raw, json)
Hash identifier:          ELyzLLGg0aVvmGCc15TyFfaJixPNIztlsBgdjFMCAzE=
Subject key identifier:   C0:B1:C7:EC:B4:AC:39:D3:B6:3A:B2:14:02:F1:D1:87:A7:5F:38:65
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285842BF1433F6B4F721500541A100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9d6c3e90-e6d2-36a2-9f38-4bfbaa03b52e.roa
Signing time:             Mon 31 Jul 2023 12:00:00 +0000
ROA not before:           Mon 31 Jul 2023 12:00:00 +0000
ROA not after:            Thu 12 Dec 2024 05:00:00 +0000
asID:                     19527
IP address blocks:        34.0.230.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:bf:14:33:f6:b4:f7:21:50:05:41:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 31 12:00:00 2023 GMT
            Not After : Dec 12 05:00:00 2024 GMT
        Subject: CN=40716fcf-008f-4993-ad61-f181efe72039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fc:38:69:13:29:18:e1:4e:19:bf:91:8c:34:
                    58:56:ed:7b:a4:27:62:94:e9:2b:e0:da:a1:ff:94:
                    c7:1b:38:36:4b:03:d7:6f:45:a0:0d:6e:17:14:da:
                    d4:92:15:a0:f1:bf:89:ed:bb:10:51:3e:61:b7:97:
                    61:17:d5:8d:8e:f1:9b:6a:cb:68:8e:66:34:a6:f5:
                    22:9d:ac:65:99:01:bf:62:cd:ea:b4:04:60:54:50:
                    a1:e5:15:1e:aa:0e:75:79:25:2f:68:74:36:01:13:
                    21:4f:bb:87:03:fa:d2:ab:9f:64:d2:38:8d:1f:6f:
                    59:f2:d2:cb:f6:22:4d:3c:88:20:04:e7:2f:ba:eb:
                    c6:40:0c:e7:90:e7:fb:c0:4d:e5:70:36:4d:13:7b:
                    a6:77:58:6a:85:c2:81:17:ba:2c:e7:59:c7:f1:06:
                    d9:b1:16:7e:2c:dd:12:bb:45:83:c0:d8:19:f8:7e:
                    da:5b:ee:d2:20:c3:2b:0f:f7:66:a0:2e:73:84:01:
                    dd:6b:59:a7:32:54:5b:d9:d2:e7:ce:f8:40:8d:a6:
                    18:e6:9d:7e:81:eb:69:5b:e3:79:f7:05:e4:1c:24:
                    97:89:f0:53:c2:f0:dd:83:59:64:48:b8:87:0c:b8:
                    f1:6e:36:1e:91:0e:5f:9b:96:5c:95:33:d2:a0:a6:
                    5e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B1:C7:EC:B4:AC:39:D3:B6:3A:B2:14:02:F1:D1:87:A7:5F:38:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9d6c3e90-e6d2-36a2-9f38-4bfbaa03b52e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:82:59:79:88:21:f1:ce:52:98:14:21:c1:a7:83:59:21:75:
         8a:5c:76:de:89:e9:58:61:d0:55:3f:6f:fa:6e:7b:6f:17:f3:
         74:20:24:d0:ff:54:b2:3b:8c:27:14:24:46:4e:ad:84:d8:f3:
         32:db:a6:3c:3c:ca:40:f4:b6:65:34:48:f3:1d:c5:53:54:b6:
         4a:4f:32:d5:01:92:20:a5:aa:70:70:84:7f:cc:01:b3:40:e5:
         05:89:24:7f:95:d8:33:c7:08:74:1b:05:28:f7:f6:ef:43:c5:
         54:9e:61:f0:f5:24:aa:2f:02:d9:70:0e:ce:39:57:44:c1:12:
         4a:63:a8:f9:f6:cb:d3:94:a0:21:c9:9f:d2:39:f0:e8:87:68:
         14:01:dd:a6:75:bb:07:b0:73:71:7e:d0:46:1c:ef:d8:6a:fd:
         84:5c:92:0d:a0:d9:26:a7:66:46:be:f7:77:08:08:88:10:e4:
         b6:33:36:02:27:11:bb:b1:ab:e0:38:c6:9f:3f:01:de:3c:0d:
         41:bc:ac:13:aa:7a:e2:cf:f5:43:39:9d:ef:7b:e5:04:49:cc:
         10:40:c1:96:29:e4:1a:89:c3:de:1f:20:b8:50:ba:6b:7a:eb:
         4f:1b:ae:d6:3e:b4:b8:90:1b:35:88:c7:f5:0c:1e:4b:57:aa:
         56:54:ac:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:27:30 2025 by rpki-client