Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ab7f3a64-09a5-3817-8056-a46b23ff4fc6.roa
File:                     ab7f3a64-09a5-3817-8056-a46b23ff4fc6.roa (raw, json)
Hash identifier:          1TBblkzXY5GfOuwez9YAqztyRqS7uE/yfdzGqFnYIwU=
Subject key identifier:   21:E0:1C:26:C1:22:D2:04:36:EE:C0:28:42:99:4F:96:A3:C4:E2:5B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A1FFB9574B00A5AD7A6BA80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ab7f3a64-09a5-3817-8056-a46b23ff4fc6.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.109.208.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1f:fb:95:74:b0:0a:5a:d7:a6:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=6bfdbcee-036b-46ba-9e61-4a0acdbe2caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dc:c3:04:ac:85:51:c3:d5:13:e2:a5:d7:3a:
                    c5:25:e1:0a:6a:81:d8:bc:64:bd:d6:b9:1a:72:a4:
                    73:42:73:67:70:97:42:0f:54:04:0c:3a:96:c2:7b:
                    38:36:32:46:35:ee:15:a7:b3:8a:6d:03:1a:5a:ce:
                    7c:44:f7:c2:55:f7:af:d1:61:e7:4e:ab:e2:ff:0a:
                    2b:04:c6:90:5a:e8:fd:0e:10:85:1e:fa:81:bb:5a:
                    96:99:ef:ad:49:f8:7a:80:f4:2f:44:52:44:bd:a5:
                    5a:f5:cc:3a:a4:02:1b:46:fc:ad:65:a6:f0:c8:9f:
                    80:5e:cc:b6:1c:4e:ff:3d:a1:dd:f4:12:0b:c3:44:
                    64:1b:2b:b0:d9:d9:6d:b1:2e:7c:35:f1:20:44:09:
                    c6:f0:b1:7f:8d:b4:ed:2a:e8:1b:de:f5:94:59:7e:
                    51:e6:a4:01:e6:6d:00:a8:eb:bb:89:0f:4b:82:5e:
                    23:1b:60:d9:74:1e:c0:ed:eb:0e:b3:45:8b:6f:1d:
                    35:1a:4b:f2:47:95:48:9e:da:f1:4b:9f:e0:12:48:
                    c1:87:0c:26:16:fe:41:08:60:66:a4:ea:d7:8e:49:
                    dd:f8:10:c8:d7:0d:70:5c:e1:ca:42:6c:47:25:f3:
                    82:58:fa:44:5d:14:32:2e:1d:0a:dc:62:0c:58:57:
                    75:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E0:1C:26:C1:22:D2:04:36:EE:C0:28:42:99:4F:96:A3:C4:E2:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ab7f3a64-09a5-3817-8056-a46b23ff4fc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.109.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:1f:57:ba:77:a3:0e:33:f7:e1:f3:1b:2c:2a:a5:33:8f:01:
         e3:64:86:f0:2c:89:5e:4d:50:f2:12:a9:b6:eb:4a:bd:ed:9a:
         63:e1:2e:ab:cb:fc:9d:8b:65:4a:9c:99:9c:50:77:6f:d0:7c:
         44:98:9d:0d:7c:2a:d7:7c:5c:3e:39:34:82:f5:83:14:ae:ec:
         9d:95:bf:e3:cb:09:e6:d1:15:f2:bf:f7:24:04:55:f8:8c:a5:
         bf:30:60:66:da:b0:8e:75:f5:54:db:3a:e2:0b:97:33:63:a5:
         dd:1a:fa:f6:8a:41:2b:5f:6f:53:e1:51:5b:55:e2:80:7e:39:
         85:8e:35:6a:bb:14:e9:02:ad:85:b9:36:b3:23:f9:8e:24:29:
         c3:be:b8:7e:f2:18:1d:73:3e:cd:48:ff:fb:78:16:07:ec:b3:
         f8:12:09:98:2d:64:ae:4d:c3:aa:28:46:76:c2:f0:93:b6:ec:
         f1:f2:b7:bb:24:24:4c:8b:78:1b:60:69:21:77:e4:42:d0:81:
         49:85:d8:c1:1a:3d:de:1a:38:fa:a5:37:9c:e7:31:e1:fc:6f:
         1b:50:31:1d:db:74:c2:93:1c:fe:d8:70:83:78:12:45:3f:58:
         d1:f4:79:64:cc:a9:fe:9a:9d:f6:4f:32:af:91:51:18:60:e3:
         31:26:d1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----