Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9fa74155-f09c-3af7-aa9f-b15174141e8f.roa
File:                     9fa74155-f09c-3af7-aa9f-b15174141e8f.roa (raw, json)
Hash identifier:          SpflJ3UDypFb3QMp2Pg7zndiZIni8WgAkefheIqFuAM=
Subject key identifier:   9B:82:3E:F9:48:C6:49:C7:A5:C4:C9:0A:88:B6:F3:09:89:31:3B:0B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A1D8734352F49874BE5F080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9fa74155-f09c-3af7-aa9f-b15174141e8f.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.70.208.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1d:87:34:35:2f:49:87:4b:e5:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=34847a3d-3e02-404c-bbd0-25302a31f93c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b6:91:77:f3:89:6b:ff:50:a6:45:5a:66:9b:
                    1a:73:19:16:2d:af:cf:8b:4f:cd:9b:db:6f:19:29:
                    77:52:c8:76:6a:83:96:fe:d3:92:ef:1e:8b:7a:7a:
                    71:77:ab:09:76:a7:45:37:82:a2:cc:1c:f9:6f:5e:
                    22:6b:c3:ee:d5:60:d4:72:94:24:7d:85:b1:2a:84:
                    b6:f5:48:19:8f:75:0a:39:7d:94:06:5a:58:03:1a:
                    ac:71:78:63:5a:88:b2:73:1f:48:82:1d:aa:ae:a1:
                    54:1d:24:42:ce:b6:3c:73:00:1f:eb:db:79:26:87:
                    83:82:2d:7f:b3:8c:42:17:1e:ec:27:b6:f5:b5:bc:
                    95:4c:06:fe:cb:65:44:06:87:2a:fa:c2:ae:76:3f:
                    de:54:d9:20:97:78:dc:be:06:74:a5:81:68:82:f8:
                    fa:fc:ad:e3:49:52:f3:c4:c2:31:29:77:19:1d:94:
                    be:a6:0a:fd:97:90:f9:70:17:3b:f5:34:e1:11:6d:
                    63:a1:32:bc:d4:59:6e:50:74:05:a7:5f:86:2f:dd:
                    f4:ea:35:a0:8b:16:3b:05:ec:d0:1b:c2:23:d4:3c:
                    84:e2:01:45:b0:d4:83:30:95:63:99:01:75:c4:21:
                    db:16:5a:72:04:84:92:7f:79:3d:d2:8c:6c:0a:63:
                    db:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:82:3E:F9:48:C6:49:C7:A5:C4:C9:0A:88:B6:F3:09:89:31:3B:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9fa74155-f09c-3af7-aa9f-b15174141e8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.70.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:cb:a9:8f:f0:1a:22:78:03:23:cb:3e:15:cf:ff:d9:a7:7e:
         11:a9:bc:98:41:05:4c:af:8f:f7:67:79:4b:75:24:22:1a:2f:
         da:c8:51:97:7a:00:4e:cb:fa:24:1a:49:aa:a8:69:d9:73:d6:
         4a:18:e7:4d:7d:6f:e8:a3:2a:86:e3:94:6b:de:e6:f9:b2:1a:
         77:9d:23:86:e7:31:6b:5b:0e:4c:04:40:49:f4:79:f9:48:60:
         42:a0:25:6b:34:2a:0c:ee:af:f5:82:c9:4b:88:ae:52:eb:c6:
         d2:4f:d0:d8:ec:d4:4b:18:a6:3e:b5:84:29:cb:a4:a7:c6:e8:
         60:d4:12:38:84:5e:bd:6f:c7:9d:6b:62:13:9e:34:c9:c1:cf:
         ac:86:29:e3:cc:f0:24:39:95:1f:bf:ec:47:7f:74:d6:9a:7d:
         2f:4e:5b:dd:ab:3b:cb:cb:65:00:1d:fb:37:33:23:f1:9d:1f:
         98:6b:87:95:93:f7:9c:ab:b2:e9:02:ff:e6:7e:c1:d0:13:51:
         f8:e7:05:e3:94:b2:ee:28:ac:f3:b6:fa:92:39:cc:ec:5e:6c:
         02:a5:c2:a1:c6:0a:e0:60:f6:88:7a:6f:d1:b6:af:b0:8f:8f:
         1e:9d:fa:59:5b:bb:17:9b:3b:3b:52:b7:a1:8c:2c:65:64:fd:
         d3:f2:07:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:46:19 2025 by rpki-client