Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5e32f5a-29cf-36b2-8388-e78348412c50.roa
File:                     d5e32f5a-29cf-36b2-8388-e78348412c50.roa (raw, json)
Hash identifier:          ZOy8Fu+od7jSblmw7KpMug10qwqi6Nskx6heQJJBfS8=
Subject key identifier:   1A:8F:34:B5:69:0E:97:AF:56:D3:79:AB:57:96:42:88:C7:4F:55:D0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A24BE01B79DEDFAD97DEF10
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5e32f5a-29cf-36b2-8388-e78348412c50.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.105.240.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:24:be:01:b7:9d:ed:fa:d9:7d:ef:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=d4c904be-13e3-4c91-b7f1-8314ca5b038f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:dc:e4:d3:3f:77:39:89:26:64:ec:1f:db:
                    f8:47:65:3a:6c:43:64:66:59:d1:77:d1:45:2c:ae:
                    71:fe:a2:25:ab:8c:d1:e0:be:33:c4:d3:e0:1e:21:
                    a2:38:96:a4:b5:ee:b5:c6:a5:89:13:18:89:7b:64:
                    36:2a:58:18:c3:cf:94:ef:68:ba:2b:a7:6c:86:72:
                    9d:5c:34:94:32:36:d3:1a:96:5d:a1:44:85:2e:8d:
                    7e:ef:3f:ed:8a:51:69:ef:20:80:ac:d9:f2:e6:1d:
                    1e:84:f0:84:a3:6e:51:48:3b:a5:dd:5e:e0:40:86:
                    dd:62:2e:a6:39:5a:66:56:ce:21:5a:ac:9c:3e:32:
                    79:1d:a7:cc:72:0b:b3:36:7d:8d:9d:38:04:0a:f2:
                    e5:2d:f2:3b:a2:b0:4c:89:86:b3:75:41:b6:88:43:
                    21:00:cf:04:4f:62:3c:4b:5f:70:c2:11:ae:07:ac:
                    0d:f4:d1:ec:46:05:28:b9:b8:8b:8e:7e:b5:61:a3:
                    03:9d:12:f5:61:f4:3a:6b:d0:70:69:e7:f0:18:a1:
                    d3:94:67:35:88:5e:a9:e5:cf:f4:01:fc:f8:cd:d8:
                    6a:c6:4e:2b:d7:84:03:8e:5c:a3:21:90:5b:50:c2:
                    28:6b:93:da:e1:fe:04:7f:1f:1e:e4:54:92:99:5d:
                    13:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8F:34:B5:69:0E:97:AF:56:D3:79:AB:57:96:42:88:C7:4F:55:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5e32f5a-29cf-36b2-8388-e78348412c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.105.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:39:a3:a4:cb:df:c7:47:d8:ce:65:9a:39:27:1b:84:19:54:
         7d:21:da:52:b5:b5:2a:5b:ee:61:a5:c0:e3:54:02:45:7c:5f:
         93:e9:8f:de:5a:1d:50:e5:15:0b:4b:b8:e9:36:2e:8e:34:c0:
         2d:de:3b:ac:77:53:5c:fb:4e:51:68:81:cb:b6:f1:65:1f:56:
         bc:dd:89:c2:62:3a:92:db:fc:bf:79:3d:c0:37:f2:b5:ef:d6:
         58:25:53:36:9a:a9:87:18:de:49:5f:11:c8:b1:7a:ac:0d:e8:
         9d:2b:5b:71:9b:52:6c:30:cf:fb:6e:62:c0:8a:b7:e7:ad:92:
         03:fd:e5:52:0b:40:fd:70:de:03:90:dc:48:d0:eb:ca:3c:1c:
         a3:89:8f:2f:92:c8:64:08:ef:15:ef:42:b6:24:29:9d:5d:36:
         69:43:0f:28:f6:66:30:bd:83:0e:e0:a7:b7:d0:82:14:cf:42:
         a1:10:7b:0a:37:33:b8:bf:66:77:28:ab:58:df:d6:61:c6:4d:
         ec:42:6c:27:a9:3a:37:8e:ac:b4:1d:bc:1c:98:e6:4f:e2:e9:
         ab:9f:1e:75:4e:58:ab:2d:17:7e:a0:c8:d3:e5:a1:67:61:e4:
         e8:59:bf:ed:53:79:ed:37:36:a3:79:a8:c1:65:84:5f:c5:24:
         cc:69:d6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:39:07 2025 by rpki-client