Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4eb7f54-2ec8-3f60-8f05-5c681d53fc26.roa
File:                     b4eb7f54-2ec8-3f60-8f05-5c681d53fc26.roa (raw, json)
Hash identifier:          lnMBLbIpjzr2vnWFMJULAARzADweVf6uJfBYjkK2sfM=
Subject key identifier:   EB:ED:29:00:BE:DD:79:59:B0:19:C3:DC:4B:22:82:AF:17:C1:00:DC
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A156E18570485E441421F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4eb7f54-2ec8-3f60-8f05-5c681d53fc26.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.94.48.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:15:6e:18:57:04:85:e4:41:42:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=2943302a-b9e7-4bd8-9beb-49864f45e14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:25:3d:31:ff:07:68:60:b4:02:52:10:3b:42:
                    65:95:2e:f6:c2:4b:d9:3d:42:11:4f:ee:db:9d:10:
                    9c:38:5c:0a:a1:85:6e:29:6f:ba:05:1e:6d:f6:c0:
                    ea:a8:29:ec:a2:9b:30:3a:37:f2:2e:d1:de:18:4c:
                    00:58:fa:ea:4a:ec:fd:66:b1:1e:8f:1e:cc:c0:88:
                    68:f6:65:c1:06:ac:40:12:a4:b3:12:a7:68:ee:2a:
                    fa:c6:10:7a:09:50:91:33:0d:ab:bc:82:14:e3:ec:
                    42:6f:9f:33:6b:01:2e:6f:12:a4:bd:2b:56:9b:8a:
                    b0:09:c1:17:a8:cc:f9:04:7f:3b:21:26:a7:fa:dd:
                    b4:cf:9e:53:8d:ba:0f:d7:3d:d1:8b:21:84:e7:8e:
                    39:ef:66:e0:2c:9f:d9:11:6c:f9:a4:7b:dc:39:05:
                    09:c1:38:9b:40:99:d2:55:0c:f7:9b:af:23:f6:8a:
                    48:2a:04:ee:1a:ce:50:b3:d3:e7:5a:58:50:d3:e7:
                    fe:f4:56:9b:46:31:81:d6:88:69:ff:ca:47:d8:2c:
                    bf:54:77:76:f5:48:08:f3:2f:a2:42:e7:d2:9e:00:
                    6e:95:c3:e8:fd:18:9b:03:bb:27:7a:f1:7b:e4:3b:
                    f4:33:81:12:3b:dd:43:68:da:73:48:86:b3:2b:ae:
                    7c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:ED:29:00:BE:DD:79:59:B0:19:C3:DC:4B:22:82:AF:17:C1:00:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4eb7f54-2ec8-3f60-8f05-5c681d53fc26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.94.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:eb:55:4f:88:80:75:60:f1:3d:f6:a0:11:31:8b:78:28:9a:
         09:00:e5:bc:ed:9c:b0:17:77:11:a6:cf:5c:6b:5f:b0:a1:d3:
         93:e2:99:e9:b8:da:cb:27:d7:fd:60:21:e2:6b:23:07:9f:47:
         b2:da:bc:96:b8:0b:ee:6b:90:29:5e:37:d4:3a:89:c1:41:0d:
         84:4e:88:ee:db:87:78:40:c0:67:60:53:6d:17:8e:3c:d2:11:
         c1:69:4e:6d:0a:9c:fa:74:f7:cf:9b:ef:ec:4f:55:1f:d7:3b:
         5c:db:06:be:22:3c:d9:70:aa:12:ff:04:fe:06:59:f9:8d:7c:
         dd:0f:91:98:e8:3a:0c:24:d9:42:4b:1b:dd:12:11:00:15:82:
         88:3a:ed:7c:0c:37:b6:54:5e:64:dc:fc:df:8f:5e:84:50:a9:
         08:d0:29:cf:15:35:f5:7b:a9:dc:1b:94:eb:d9:3a:31:d0:05:
         6d:3f:00:5a:11:13:ec:9d:b2:9f:7f:e0:26:0f:0f:e0:8c:b4:
         7d:db:b3:22:96:31:1f:f2:3d:66:6c:23:8d:37:9b:fe:81:04:
         da:c3:d4:3c:bd:00:30:69:7a:5b:b0:76:9f:d0:29:c8:d6:0d:
         0f:86:f5:64:e3:4c:a4:29:da:38:38:96:8d:97:f6:a6:69:d6:
         e1:d6:37:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:05:04 2025 by rpki-client