Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b7b03dc3-53cb-3fd7-8bc1-6a3cbcfd8608.roa
File:                     b7b03dc3-53cb-3fd7-8bc1-6a3cbcfd8608.roa (raw, json)
Hash identifier:          MoA2fHUOdOcqFiDqzJ+Jms9g85Wz4aQR+gRdAuRKSKE=
Subject key identifier:   59:49:ED:5D:96:50:A6:76:15:BD:DC:0E:9E:15:08:9A:6E:D2:4F:97
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285842BE85B8AC493DB90DCDB13940
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b7b03dc3-53cb-3fd7-8bc1-6a3cbcfd8608.roa
Signing time:             Mon 31 Jul 2023 12:00:00 +0000
ROA not before:           Mon 31 Jul 2023 12:00:00 +0000
ROA not after:            Sun 29 Sep 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.154.160.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:be:85:b8:ac:49:3d:b9:0d:cd:b1:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 31 12:00:00 2023 GMT
            Not After : Sep 29 04:00:00 2024 GMT
        Subject: CN=0016cdaf-2c26-4702-b78c-5da909a978a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3c:3e:9f:0d:a9:cf:81:e1:64:a7:f2:d2:1c:
                    b7:c8:d3:fb:fb:d6:13:d7:1c:f6:dd:94:09:72:81:
                    5d:38:31:99:c5:49:79:e9:4c:46:06:87:50:8e:84:
                    54:e7:1f:1e:f8:b9:05:ee:ad:64:11:26:4a:7e:44:
                    ad:7b:11:89:34:7a:b2:d4:3e:2d:a8:52:27:43:27:
                    36:9a:4e:45:17:e0:81:1d:03:27:4b:43:5e:04:9f:
                    67:07:e5:92:44:19:8d:0a:41:62:f2:4b:39:4b:ba:
                    74:94:f5:55:fb:96:e6:9f:af:82:72:53:fb:5f:2d:
                    09:5c:41:94:a5:90:d0:c2:80:7d:a1:5f:96:a1:43:
                    57:65:25:c2:e7:d2:ec:af:8a:22:55:dd:a0:1b:5f:
                    75:ee:f4:e7:ca:df:f4:07:8d:30:25:25:c2:c1:34:
                    53:1a:5b:b2:73:ef:72:49:f5:dc:e7:5c:e0:21:c5:
                    b3:7f:ff:9c:bb:e7:fa:13:b9:fd:40:f0:8f:d4:27:
                    8b:75:c8:61:3a:b8:6f:51:eb:5e:72:77:a1:02:a3:
                    62:78:29:48:5b:3e:b1:be:8c:62:f3:f4:ed:1e:d8:
                    a2:9b:a2:df:bc:24:29:79:fd:b2:16:58:fc:ad:e5:
                    0b:04:04:56:1f:b7:e2:9f:5a:c2:ca:61:23:1e:18:
                    f8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:49:ED:5D:96:50:A6:76:15:BD:DC:0E:9E:15:08:9A:6E:D2:4F:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b7b03dc3-53cb-3fd7-8bc1-6a3cbcfd8608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.154.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:dc:b2:4e:33:e2:3b:de:cf:31:cb:0a:ab:e2:f5:13:6f:1f:
         47:5c:e7:bb:b7:4c:0a:fb:ad:96:27:4d:21:a0:d1:04:3c:56:
         75:8e:d6:c2:eb:ca:16:12:ea:b6:77:be:47:78:48:9f:53:42:
         81:e2:c5:5e:8f:10:64:03:20:1a:09:52:84:76:da:32:d3:89:
         0d:05:ea:ed:5b:56:c1:21:82:12:09:ac:cd:84:68:90:2d:93:
         eb:9b:14:d3:82:75:f7:b5:79:00:99:26:46:0c:10:82:45:c0:
         82:e1:f9:0a:f7:39:4d:9d:45:b2:2f:55:63:77:52:1d:35:44:
         78:89:19:79:0b:37:bc:88:af:bc:ed:70:fe:f9:c4:53:7e:3e:
         73:77:7a:32:bf:c4:ab:d0:55:30:00:f4:f2:18:a2:e9:fa:12:
         dd:39:b5:31:bb:80:c7:c0:60:63:a3:71:0c:34:f5:8e:af:99:
         64:6d:85:0d:13:10:93:72:72:c6:20:5b:af:8a:03:95:66:0d:
         06:0b:22:97:7d:74:1a:78:96:2d:8d:77:22:0c:77:b2:a7:9a:
         77:c2:6e:b3:ef:fe:7a:f7:a0:ab:76:87:50:b4:b9:5e:7c:31:
         91:77:bd:d1:f6:25:88:b4:65:08:2a:0e:c7:9e:50:9b:b6:f2:
         3e:65:e2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:57:25 2025 by rpki-client