Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a44a1d0e-0ef6-3e46-a7e5-f4b2cc3c7adb.roa
File:                     a44a1d0e-0ef6-3e46-a7e5-f4b2cc3c7adb.roa (raw, json)
Hash identifier:          GOnbZ0+DDDxSRY/zobgnZOJRnJhuWurHpo5RcxKD4RU=
Subject key identifier:   67:46:BD:79:D1:46:A1:3E:FA:8C:AA:A2:A5:DF:DB:AF:91:83:FF:0D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309EBA0F29352F294F3DAC9C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a44a1d0e-0ef6-3e46-a7e5-f4b2cc3c7adb.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        34.179.0.0/16 maxlen: 16
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:eb:a0:f2:93:52:f2:94:f3:da:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=95a3f874-477b-4e38-b091-c281fa52b360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:80:28:61:51:66:7f:c4:df:22:22:7e:a7:c9:
                    83:78:1d:9e:86:79:8a:6f:b9:44:17:42:f1:00:b8:
                    cf:72:1b:38:3b:21:d5:19:c3:c0:c9:64:18:9e:e9:
                    ef:4b:e1:8a:5b:a9:97:41:9a:c9:f5:8e:6f:d5:13:
                    24:61:64:ec:a1:dc:b6:85:ce:e7:c8:21:b6:76:39:
                    f2:87:e0:21:55:e0:1b:28:ac:de:d2:7c:84:72:84:
                    79:b9:14:54:85:14:5e:ed:09:d0:2f:cc:68:0d:0f:
                    ee:74:75:4c:0b:ef:af:d6:68:6f:f6:99:7e:3f:a3:
                    d6:fc:ff:a3:d4:dc:8e:91:26:68:87:10:4e:13:e4:
                    4a:61:fd:67:37:a9:2e:1a:cd:1b:89:0c:8a:f0:10:
                    6a:40:db:62:49:9c:78:87:97:e5:e6:d9:e1:a8:dd:
                    8a:6c:34:40:11:b1:8d:f9:62:45:89:ec:4f:53:4b:
                    0c:7f:68:7e:e3:01:6e:6a:5f:13:79:74:8c:30:fd:
                    a3:42:06:60:a5:38:ca:ca:27:63:41:9e:9c:ea:4e:
                    00:54:51:21:9a:87:25:b5:2b:05:4c:4e:e6:56:a4:
                    94:cf:e6:fa:0c:ec:45:bc:8b:41:62:11:2c:15:7e:
                    c4:d1:23:b2:d5:84:ac:03:5e:9d:2c:3d:b6:a6:0b:
                    e1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:46:BD:79:D1:46:A1:3E:FA:8C:AA:A2:A5:DF:DB:AF:91:83:FF:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a44a1d0e-0ef6-3e46-a7e5-f4b2cc3c7adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.179.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:96:a8:f6:d1:23:66:1e:34:de:73:ea:66:e7:fd:31:54:07:
         ea:52:54:76:78:bd:36:e0:a1:22:a5:4a:62:7d:da:c6:1a:6d:
         91:8c:e4:ce:d7:25:aa:f2:2a:3b:57:f1:68:13:e8:75:14:64:
         c1:be:5e:5f:6f:f7:d8:7d:54:cb:a0:91:fd:e3:46:b7:b1:f8:
         4a:37:f5:ce:e7:0a:cb:8a:b9:00:c7:5f:d1:ef:fa:de:4a:cc:
         28:e8:8b:5c:7a:7f:74:1f:1c:ae:ae:02:a0:2c:d0:e9:70:03:
         8b:b6:65:45:09:03:b2:31:c3:8b:06:6d:46:c1:98:ed:b1:96:
         4a:08:df:29:51:67:dd:95:bb:88:23:8f:67:4e:75:0a:07:06:
         8f:eb:0f:de:30:88:de:49:b0:c3:09:93:e4:fe:07:c8:d8:7e:
         90:b3:98:87:4b:f7:9b:92:9b:e1:69:e0:94:53:52:32:29:2d:
         e8:d2:a8:09:90:89:ff:8a:11:de:a6:e2:24:92:d5:e2:b0:27:
         92:fb:0b:49:57:49:cc:71:90:d2:7c:6e:c6:b5:d8:e8:f1:5e:
         9d:e4:66:47:98:63:73:b8:96:2f:6a:75:e2:e2:e6:db:26:2d:
         03:c1:fa:40:42:60:1b:0b:9e:c7:45:b8:75:e9:5b:ba:38:89:
         6b:a5:42:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:12:08 2025 by rpki-client