Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cc9fa266-e910-3dae-b235-dd5f87139688.roa
File:                     cc9fa266-e910-3dae-b235-dd5f87139688.roa (raw, json)
Hash identifier:          VpEEd1J/sjxoyDf/WoKYBbgfFAGneiEv6UC75kXMtDI=
Subject key identifier:   2A:44:E5:2D:55:B8:9B:D0:9F:30:22:55:D0:66:18:DF:A8:0B:67:B1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A134CCE103ADEAF3C592E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cc9fa266-e910-3dae-b235-dd5f87139688.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.69.48.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:13:4c:ce:10:3a:de:af:3c:59:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=f5b5b902-0a13-4453-a0ba-a6ffb85f2816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a6:6b:50:0f:a9:23:bf:5b:3a:59:66:e8:2a:
                    7d:e1:7f:2f:b3:2a:81:a5:9a:76:04:0b:2a:e6:75:
                    f8:ee:18:54:d0:ed:e4:ac:89:e0:45:23:9b:66:13:
                    1d:95:76:6a:7f:10:95:dc:46:38:f8:a0:71:69:c1:
                    b2:d8:ee:b0:76:fa:a4:3d:0e:75:95:3c:00:25:b5:
                    c7:06:ad:c6:09:95:f7:1f:47:12:f4:eb:75:e9:4e:
                    20:d1:d2:7f:22:b0:bf:a3:9d:13:5d:b4:41:97:08:
                    fa:c4:f4:4e:a3:23:82:98:72:cb:d0:69:e4:0b:d9:
                    00:bb:5f:e5:40:0c:01:80:54:44:48:20:73:7c:79:
                    74:73:97:49:d2:13:f1:99:51:96:06:20:52:b2:21:
                    a4:da:2f:4f:65:2c:7a:7f:44:87:71:c2:2b:6e:8c:
                    e0:8b:45:64:84:c0:93:8b:72:cb:ac:ab:3d:b0:a2:
                    31:17:91:f4:f1:f5:02:0b:51:19:7a:d5:57:db:45:
                    b4:09:3c:ba:6c:17:81:4f:2f:3f:3f:67:5a:58:5a:
                    28:a6:72:16:49:a5:39:db:5c:0c:e9:1c:a2:81:28:
                    f5:11:bd:b7:36:d7:4c:e6:09:c3:9a:23:b7:43:3c:
                    0a:0d:50:d0:37:38:42:fb:d6:a8:44:a5:12:a8:de:
                    db:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:44:E5:2D:55:B8:9B:D0:9F:30:22:55:D0:66:18:DF:A8:0B:67:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cc9fa266-e910-3dae-b235-dd5f87139688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.69.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:3a:7e:ae:d9:55:73:3b:49:fd:29:75:eb:51:d2:9a:c4:87:
         bb:4f:65:fa:eb:c4:c8:c5:21:eb:44:9f:28:61:67:14:78:84:
         64:76:40:05:12:37:d3:9f:ef:27:e9:f7:af:72:10:47:37:3b:
         80:75:11:f3:fa:1e:ea:47:f4:1f:f2:e8:db:42:09:08:8d:4a:
         09:17:c0:ba:39:dc:8f:fc:f6:ba:5f:21:1e:25:ab:c9:79:33:
         2c:34:1d:47:ec:8f:67:6d:84:0e:a6:91:cc:0a:d3:57:9f:26:
         e0:7e:5a:f3:17:fd:00:6f:3d:a8:be:33:16:04:4a:22:0a:a6:
         ea:df:9a:b5:b2:7b:b4:37:16:5a:a8:b6:c9:d0:d2:e0:f7:76:
         cd:18:75:b4:9f:70:a1:32:11:69:60:99:57:4b:be:6c:f3:85:
         68:47:b2:1e:c2:1d:a7:06:63:e2:ca:bd:e0:d4:b1:0c:da:84:
         e7:a5:b8:26:09:17:a7:8d:0f:a9:15:c3:27:77:f5:45:fc:37:
         88:60:c2:60:14:7c:4d:a0:3b:2a:4b:d7:e9:2e:ab:56:0a:ef:
         8f:c0:fa:cd:d6:f8:44:76:1a:3f:b6:40:f5:2a:6b:58:71:08:
         30:a2:3b:6d:81:0c:fd:f8:23:a0:92:be:9d:5e:76:91:b9:5a:
         45:d0:e3:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKE0zOEDrerzxZLgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjViNWI5MDItMGExMy00NDUzLWEwYmEtYTZmZmI4NWYyODE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaZrUA+pI79bOllm6Cp94X8vsyqBpZp2BAsq
5nX47hhU0O3krIngRSObZhMdlXZqfxCV3EY4+KBxacGy2O6wdvqkPQ51lTwAJbXH
Bq3GCZX3H0cS9Ot16U4g0dJ/IrC/o50TXbRBlwj6xPROoyOCmHLL0GnkC9kAu1/l
QAwBgFRESCBzfHl0c5dJ0hPxmVGWBiBSsiGk2i9PZSx6f0SHccIrbozgi0VkhMCT
i3LLrKs9sKIxF5H08fUCC1EZetVX20W0CTy6bBeBTy8/P2daWFoopnIWSaU521wM
6RyigSj1Eb23NtdM5gnDmiO3QzwKDVDQNzhC+9aoRKUSqN7bSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCpE5S1VuJvQnzAiVdBmGN+oC2exMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2M5ZmEyNjYtZTkxMC0z
ZGFlLWIyMzUtZGQ1Zjg3MTM5Njg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkUwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAA6fq7ZVXM7Sf0pdetR0prEh7tPZfrrxMjFIetEnyhhZxR4hGR2QAUS
N9Of7yfp969yEEc3O4B1EfP6HupH9B/y6NtCCQiNSgkXwLo53I/89rpfIR4lq8l5
Myw0HUfsj2dthA6mkcwK01efJuB+WvMX/QBvPai+MxYESiIKpurfmrWye7Q3Flqo
tsnQ0uD3ds0YdbSfcKEyEWlgmVdLvmzzhWhHsh7CHacGY+LKveDUsQzahOeluCYJ
F6eND6kVwyd39UX8N4hgwmAUfE2gOypL1+kuq1YK74/A+s3W+ER2Gj+2QPUqa1hx
CDCiO22BDP34I6CSvp1edpG5WkXQ400=
-----END CERTIFICATE-----
Generated at Sat May 10 12:47:43 2025 by rpki-client