Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e430251a-212d-3121-be7d-d05ddad70448.roa
File:                     e430251a-212d-3121-be7d-d05ddad70448.roa (raw, json)
Hash identifier:          PDuRbTGErUJ/ercG1C/RdrXFY8iVY9udhRbIuTfdeSo=
Subject key identifier:   B0:88:44:F2:63:D3:C0:F1:EE:79:D1:53:5E:63:4F:62:27:6D:CE:85
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583D5BF2DF1BEFBD8DE901CF6480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e430251a-212d-3121-be7d-d05ddad70448.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Wed 26 Jun 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.76.0.0/14 maxlen: 14
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5b:f2:df:1b:ef:bd:8d:e9:01:cf:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Jun 26 04:00:00 2024 GMT
        Subject: CN=d5e9baff-0d36-4c80-ba28-96d1e04997ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d3:8e:94:d9:e7:10:f4:f2:c9:bd:b8:4d:c3:
                    59:6c:f8:96:cf:0a:1d:ee:03:11:96:52:c1:22:c8:
                    f4:0f:23:b9:7e:ec:b2:74:f3:b6:94:68:c9:db:2e:
                    e1:f3:15:3b:70:82:d6:43:5b:7d:5b:bb:07:1a:3f:
                    d5:f2:4a:9e:24:0f:65:ee:b9:62:56:c5:d7:93:ed:
                    45:62:6d:3d:d8:42:09:b5:ef:d9:59:18:ac:02:91:
                    50:1c:09:2b:5f:a6:9b:9e:99:c8:18:de:22:0f:21:
                    8d:5a:88:a5:56:f5:f2:b8:19:e5:55:30:3c:e3:82:
                    ed:1c:de:af:cd:fa:5f:fb:55:6b:a8:ab:90:02:38:
                    00:35:1c:49:86:64:cd:10:fd:63:40:74:50:7b:9d:
                    64:3f:d6:7f:1b:15:66:a6:57:18:e4:df:30:f2:9a:
                    06:ab:4e:ba:c6:ec:bf:55:78:c5:0b:e3:dd:5d:e4:
                    92:1f:7f:74:41:9a:fa:fe:41:32:2b:24:b3:f8:7a:
                    02:ef:66:17:0e:c2:27:28:37:3f:18:c8:9e:e2:00:
                    8c:a7:80:82:c2:41:71:76:a4:4f:5b:ec:b5:33:d0:
                    27:68:3d:21:fb:83:18:2f:20:97:e6:61:d9:2e:3a:
                    dd:5e:80:2e:76:be:b1:94:c6:66:96:85:0d:22:c1:
                    79:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:88:44:F2:63:D3:C0:F1:EE:79:D1:53:5E:63:4F:62:27:6D:CE:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e430251a-212d-3121-be7d-d05ddad70448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.76.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:52:dd:e9:86:4b:0a:33:1d:7f:a3:f1:de:f4:97:94:ac:1f:
         36:bc:da:51:21:f0:0d:70:14:7d:ec:da:ca:f5:26:b6:d8:6a:
         86:30:81:87:27:c2:0c:27:3d:a6:b9:46:ba:13:28:1f:3f:09:
         48:b2:ea:95:39:78:57:19:fe:4e:f3:e5:4d:a6:ff:c0:01:fd:
         57:2b:c5:c2:a2:6b:2a:9b:79:47:a1:fd:2c:9c:4a:3a:42:35:
         f8:2c:89:49:b1:f2:c6:b9:12:b3:10:45:9d:c4:14:ad:53:61:
         c2:80:4d:b7:47:e1:c8:bf:c3:bd:82:46:b0:dc:aa:3f:69:58:
         3c:2f:e3:9f:27:87:da:e0:70:a2:14:a0:f1:6b:4a:a6:ba:20:
         d6:69:23:20:42:9d:c2:46:e2:8a:97:40:de:1f:7e:3e:35:8c:
         45:a0:83:ca:f7:ec:b2:8c:2b:3f:2f:b1:19:38:27:57:d1:eb:
         0d:81:0a:a8:62:83:68:c6:91:12:7f:ce:d3:2c:27:8e:7a:2a:
         81:45:92:cb:4e:39:48:ce:62:5d:f6:02:56:93:cf:4c:7a:83:
         49:dc:44:92:06:d7:01:72:62:98:25:4b:45:fa:18:9a:12:ad:
         2e:81:69:9b:d8:91:f2:57:e7:19:8f:f6:3c:a0:d3:fd:20:1a:
         46:e8:1d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:25:24 2025 by rpki-client