Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b9ec879d-a8c2-3fc1-9923-fbb17a0ed5c7.roa
File:                     b9ec879d-a8c2-3fc1-9923-fbb17a0ed5c7.roa (raw, json)
Hash identifier:          RTnDM//KTF+I/0fV/6SKJERuvAEIIhiiGc98U3gY/cc=
Subject key identifier:   79:8D:97:32:6C:04:71:C0:3C:FD:E5:AE:05:6C:E2:43:09:A1:B4:51
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309F12B94602B1E44A283BE00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b9ec879d-a8c2-3fc1-9923-fbb17a0ed5c7.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.75.0.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f1:2b:94:60:2b:1e:44:a2:83:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=a8cd7ee8-df92-4666-ab6c-ca86e2c4872a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f2:d3:73:ed:5d:82:89:03:5c:fb:8e:73:f0:
                    9f:53:00:b2:b8:13:68:f5:7e:bc:f3:88:5a:c4:be:
                    71:d8:05:67:8a:f4:87:55:cf:e4:79:92:d4:24:19:
                    9f:b2:13:d4:33:78:09:9d:8d:8b:ba:1f:d0:01:47:
                    e9:33:35:db:6f:dc:24:eb:ca:b7:ed:4d:6f:3a:3a:
                    44:65:10:1c:4c:35:34:ed:77:9e:0c:79:e5:4e:db:
                    19:8f:b9:24:0b:2c:a2:c1:06:12:23:46:0f:18:83:
                    4a:e5:97:25:7c:5c:69:92:06:db:6b:a9:59:69:04:
                    92:bc:c9:e2:0d:0f:d0:e7:8d:f2:e1:19:8a:b9:8a:
                    97:30:3b:1a:d7:74:66:9e:ac:43:cb:b3:78:8d:db:
                    78:09:c1:d8:f0:c4:f7:3f:a6:22:3b:86:a9:2b:49:
                    87:da:ba:cb:a8:93:04:70:10:ae:63:2a:3f:be:dd:
                    b6:87:16:19:11:fc:d5:ba:97:4c:73:31:c3:ed:84:
                    3d:6f:45:1e:c8:99:b0:0a:fe:f6:11:10:d3:0d:22:
                    e5:e5:a7:24:bc:12:fc:53:43:ed:ba:ab:a8:cb:07:
                    9e:3a:54:76:80:7c:b3:6d:fa:a1:25:5d:66:70:f7:
                    89:16:3c:aa:f2:ff:88:27:91:ec:8b:b6:93:05:e0:
                    ba:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8D:97:32:6C:04:71:C0:3C:FD:E5:AE:05:6C:E2:43:09:A1:B4:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b9ec879d-a8c2-3fc1-9923-fbb17a0ed5c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.75.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:83:00:a0:dd:d5:4e:17:22:4c:fa:8e:0b:34:9e:08:1a:3d:
         b6:b6:64:0c:16:77:13:79:00:2f:20:4a:d5:74:1b:34:d0:95:
         2a:8f:d0:f2:66:4d:a6:cc:9b:e1:29:6c:7d:c8:5f:a1:30:c7:
         38:6f:1b:a5:a9:51:6b:98:db:1c:05:2f:71:46:46:b6:e5:f3:
         ae:9a:08:73:10:03:d7:40:b6:92:06:3a:99:bb:b2:a2:9f:9f:
         94:a3:60:83:b4:7e:d1:4c:08:52:76:27:99:45:a1:d0:ee:26:
         9d:d2:69:c4:53:b2:e5:ca:75:3e:7a:5c:1f:0c:a4:da:d0:e9:
         a5:12:37:24:c2:68:ad:3e:ee:20:0e:87:42:3e:46:01:c1:4c:
         c7:4c:5f:d6:8b:a1:04:61:6d:37:3c:98:ed:54:e2:ec:51:6f:
         09:72:d7:eb:e8:61:d6:3c:64:06:2b:ff:ae:f4:c1:06:81:ee:
         f0:0e:8a:cf:90:f7:a6:e8:ab:d5:90:eb:0a:85:eb:11:a4:99:
         d4:f0:c7:2a:2f:24:b4:29:5b:25:94:97:b8:e0:90:6e:df:4f:
         90:c1:6d:af:d7:76:38:2a:7c:b6:6a:74:1b:7e:37:6c:22:09:
         84:ac:e9:eb:db:e2:d7:3e:ce:d7:04:0e:2d:5e:51:6c:4a:bc:
         93:f3:38:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:45:51 2025 by rpki-client