Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad620c1e-4a3d-374e-a26b-376c8fb425cb.roa
File:                     ad620c1e-4a3d-374e-a26b-376c8fb425cb.roa (raw, json)
Hash identifier:          9N9QtnxLbHq4EeDbbmwnZq5VHpApBqvOw6gcKBDdWsU=
Subject key identifier:   54:1A:49:50:7B:52:62:3C:BD:00:A6:53:12:E3:B8:C5:DE:BA:13:B3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A072A8EA0C3E2502EF84E40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad620c1e-4a3d-374e-a26b-376c8fb425cb.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.73.208.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:07:2a:8e:a0:c3:e2:50:2e:f8:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=01843c08-be59-4270-9d30-11529cae8dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f7:bf:91:54:15:0a:91:f9:5b:7a:75:b3:2b:
                    00:16:7e:65:72:90:cd:6d:dd:69:66:15:fe:bf:8c:
                    f6:17:9b:df:f8:25:60:18:83:46:f4:97:10:fa:a7:
                    39:4a:cb:9d:80:6a:16:1b:5b:d9:a6:b1:0b:cc:5c:
                    23:e4:26:50:0f:9b:70:9c:97:cf:27:26:e9:eb:80:
                    17:70:4a:8b:5a:65:96:5f:5b:51:4a:2f:48:5a:6c:
                    04:79:0e:2f:16:67:d3:8e:67:9c:63:b7:06:96:09:
                    1a:d7:e9:71:f1:67:69:9a:5d:33:c7:58:ef:f7:d6:
                    c4:8f:16:ea:55:ee:85:4c:ab:8b:3b:f2:06:43:e0:
                    c2:f6:53:7c:4a:4c:59:f5:00:42:b5:06:73:0f:e0:
                    85:53:6e:b6:2a:cc:47:c7:8b:3d:61:26:1b:db:fb:
                    e8:cf:ca:49:9b:a4:07:f4:39:3a:39:e7:38:f6:09:
                    9e:94:1a:e4:d5:99:93:84:2b:8c:1c:7e:5f:7e:2e:
                    bf:c2:bd:d0:c9:55:26:e8:b3:9d:16:a6:60:63:79:
                    bc:e8:62:cb:ee:7d:72:67:a1:62:ab:24:29:c6:5c:
                    52:f4:9a:f6:72:5c:a2:9a:dd:e5:57:cc:73:25:b6:
                    6b:ae:d1:d2:18:d7:fd:0b:1f:57:d0:82:72:e0:2a:
                    2f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1A:49:50:7B:52:62:3C:BD:00:A6:53:12:E3:B8:C5:DE:BA:13:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad620c1e-4a3d-374e-a26b-376c8fb425cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.73.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:a7:31:50:52:e4:cb:3c:00:de:f6:6b:ee:a2:7b:9a:bc:36:
         a1:32:22:d3:32:f8:32:8a:25:b0:fb:a1:54:d8:5b:57:b7:d6:
         ee:7a:dc:51:af:4a:fe:b8:f2:de:e4:1b:5c:e0:70:76:98:85:
         11:92:ba:63:8a:ab:7f:ff:9f:df:ca:f4:ea:2e:77:b3:fc:23:
         65:21:ed:14:65:61:2f:70:89:fc:00:e3:2d:cf:80:88:b2:e2:
         8a:b3:77:3b:47:e1:ba:85:db:94:51:c0:f4:ae:2c:d4:6a:26:
         0d:36:53:a6:93:5e:f3:b0:e6:2e:30:bb:b4:64:0e:d6:2c:d0:
         6f:c0:24:eb:2b:22:f1:bb:93:fc:91:03:56:35:30:35:21:82:
         d2:39:24:66:2c:ef:93:15:b8:5e:b8:59:da:dd:e7:25:a8:ef:
         b4:24:83:d7:5d:08:3c:46:48:0d:a3:02:71:a1:61:e1:63:d7:
         cc:81:25:06:53:48:52:60:7a:f3:6b:2b:06:9f:3f:84:52:bd:
         e5:5a:44:9a:8b:b2:c5:57:c5:be:2b:93:d6:16:97:b7:92:a0:
         c9:f0:b0:be:a8:ac:59:d0:e5:53:9d:10:11:b1:9a:07:99:b9:
         73:d3:54:46:9b:95:fa:6e:1a:c0:4c:ba:2f:a4:13:bf:a5:26:
         1d:c8:c0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:50:38 2025 by rpki-client