Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de02eef4-e912-3feb-98ea-3f7e5fafaf7b.roa
File:                     de02eef4-e912-3feb-98ea-3f7e5fafaf7b.roa (raw, json)
Hash identifier:          xTIQY3dulXzQGPvRpCjldAGKA749wrvRAq9fbi8twyo=
Subject key identifier:   5F:CE:57:B9:09:E5:54:F7:42:1C:B5:8C:1B:47:34:A5:65:CF:D2:6E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A047A9A7447EFECE4D6AFC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de02eef4-e912-3feb-98ea-3f7e5fafaf7b.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.81.96.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:04:7a:9a:74:47:ef:ec:e4:d6:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ac91511f-92fa-47b6-972c-fc5cb925f26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:bd:82:5f:51:0a:65:1a:63:90:58:f0:c5:
                    0e:b8:54:65:75:ea:c9:1e:09:9a:3e:9e:62:b8:1d:
                    02:63:e8:df:ab:5e:2c:8b:2f:2f:12:bc:b6:44:84:
                    73:5d:60:af:a3:56:04:6e:c6:b5:20:c1:40:3f:58:
                    6b:6a:60:39:59:98:42:2c:4c:14:47:3f:20:61:64:
                    0b:43:6b:19:f1:e9:16:99:24:5d:71:61:72:36:f6:
                    9e:e0:ef:72:f0:bc:19:91:55:de:0b:a5:79:e6:ca:
                    f9:08:05:50:fb:88:3d:a9:9f:58:0d:af:b8:4d:79:
                    79:66:62:34:99:fe:e3:f2:2a:5a:ab:d7:39:b5:4a:
                    bf:44:38:ff:ad:91:b6:45:67:7f:03:d9:6f:d4:a4:
                    dc:58:2c:f1:09:e9:24:76:47:f1:f2:28:8a:18:cf:
                    94:fb:cb:1a:43:99:2e:97:f9:9c:e5:ed:df:12:ee:
                    8b:fc:d5:a6:6d:32:f9:46:7b:ac:d0:99:2b:84:d4:
                    6e:4f:26:b9:91:91:87:a8:e4:bb:ad:70:18:a7:d2:
                    7d:a5:40:37:2a:b0:9b:54:b2:7a:e7:a8:b9:3c:ba:
                    bc:86:6f:7e:09:87:dd:8a:82:13:c0:96:94:05:8b:
                    8e:32:ad:ac:52:f0:02:8a:63:4f:53:a9:30:ca:ea:
                    83:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CE:57:B9:09:E5:54:F7:42:1C:B5:8C:1B:47:34:A5:65:CF:D2:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de02eef4-e912-3feb-98ea-3f7e5fafaf7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.81.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c5:b6:25:ce:96:f5:8b:cc:20:d7:7e:ff:97:20:c1:39:10:
         e7:83:5e:e6:51:39:e5:84:04:34:84:4c:ed:df:f2:8a:55:b3:
         ff:7a:74:49:c4:81:f9:7d:fd:86:d7:7f:f3:54:88:bf:41:67:
         61:d6:cf:27:11:a2:7d:23:b0:f5:0c:e8:11:40:5f:d9:1f:50:
         58:2f:32:32:65:f1:cc:30:3b:04:7c:f0:aa:e5:dd:a2:8b:14:
         65:39:14:d7:55:ed:74:c4:07:3b:e9:5b:00:cb:9c:c3:aa:10:
         3a:71:2c:7a:c0:3f:3e:15:e2:ca:28:8e:29:8b:78:8e:68:f0:
         b8:b0:da:30:2d:5d:24:0f:1f:37:68:17:da:a8:93:33:f1:fe:
         77:10:18:31:4d:a4:44:fe:95:5d:cb:ec:c9:83:48:10:f1:b7:
         5c:27:2d:50:e5:57:60:01:3d:23:17:c1:c8:c5:16:c7:62:6f:
         91:12:2e:8b:63:8b:16:a7:97:35:e7:76:70:76:59:35:2c:e4:
         89:40:d6:85:b3:85:e0:9b:19:bc:fa:06:8a:4e:e8:55:15:20:
         da:a6:8c:12:73:eb:95:81:46:38:d7:47:18:96:69:a2:09:a0:
         54:46:35:1d:00:0d:b4:9e:74:57:54:fb:bc:4d:22:c5:81:ea:
         c9:ca:ab:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:28:20 2025 by rpki-client