Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8eab7d6-78e5-356d-b733-713bb4f013a4.roa
File:                     e8eab7d6-78e5-356d-b733-713bb4f013a4.roa (raw, json)
Hash identifier:          /Mzpi6eHqT0R9X1+DEolXugOaUX5UbLGXtfwkdWGuOA=
Subject key identifier:   4A:E4:0F:99:BE:B6:27:B5:39:8C:DE:B0:60:72:95:24:26:69:27:3B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A18916772393C6C0B10A880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8eab7d6-78e5-356d-b733-713bb4f013a4.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        34.130.0.0/16 maxlen: 16
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:18:91:67:72:39:3c:6c:0b:10:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=95474838-49f9-448b-9c3f-abb6b8919c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fc:42:77:97:5f:2f:6e:f6:be:6f:a2:e1:c9:
                    74:33:09:7d:ea:92:3d:1e:bd:cb:4f:47:07:d4:87:
                    f2:71:41:b4:f4:9e:d9:09:e2:f1:61:6e:c5:d9:27:
                    f9:15:67:f2:a5:83:54:14:d6:b1:d1:86:12:d8:7f:
                    a3:52:78:cc:7b:fc:39:5b:14:a2:2e:c6:54:8f:6f:
                    cd:c9:de:9b:d3:3b:57:79:40:04:89:6d:6b:d2:d8:
                    35:d5:6c:36:ff:33:0b:3d:39:17:c9:7f:09:bc:c5:
                    be:6b:94:b2:77:2c:52:a2:59:f8:49:35:0b:64:84:
                    51:00:1f:f6:87:d0:1e:d0:c4:f8:2d:3f:21:55:5e:
                    83:91:d6:7f:10:b7:91:29:85:71:b1:9b:d8:1f:5e:
                    68:b1:a7:e5:08:97:8c:d7:1a:56:5e:f8:e4:31:ac:
                    32:2a:80:96:f2:84:c8:cf:f9:ce:6e:cf:13:a6:21:
                    f9:bc:94:6b:bf:d5:97:c6:52:99:0b:03:ed:ed:03:
                    e1:27:9b:59:3b:1c:b3:be:6f:62:51:ac:db:b5:2d:
                    44:09:5b:b6:85:da:e6:71:5f:03:19:6e:9e:ab:91:
                    1f:d1:b9:be:34:63:b6:8d:05:33:37:92:83:a2:09:
                    9e:18:18:e9:7c:72:b2:25:c0:58:45:32:de:61:0c:
                    74:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E4:0F:99:BE:B6:27:B5:39:8C:DE:B0:60:72:95:24:26:69:27:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8eab7d6-78e5-356d-b733-713bb4f013a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.130.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:dd:6e:39:9c:e2:9e:2d:31:4e:1e:d5:d0:13:6d:49:77:f6:
         07:22:dc:a4:be:02:11:c0:14:73:35:3f:7d:fd:db:63:6b:7a:
         c6:70:5e:6d:b8:4d:11:70:b2:4e:1b:d5:08:43:f2:08:ad:24:
         63:eb:79:cb:bb:6b:b1:41:58:c0:91:c3:10:6a:ab:ac:bd:91:
         bd:e8:74:86:ba:be:2b:94:ef:23:9f:27:b2:22:1e:73:ec:c9:
         45:32:c6:17:34:8a:ed:90:fb:36:ed:e8:a0:d5:be:ec:c0:b8:
         3f:2a:55:19:0a:e5:2c:08:7a:bc:2e:90:c6:fa:f9:e3:05:75:
         6f:64:ae:61:98:f2:1c:47:6b:e6:31:ef:5a:d8:f1:b9:0b:f0:
         93:b7:f1:4e:32:ff:5e:4a:5c:e3:a1:74:49:9e:8e:3a:6a:e7:
         2a:79:d2:65:8d:c0:bd:02:cd:99:42:b0:bb:90:70:fa:74:cc:
         51:78:ba:1e:42:a8:c3:55:34:c9:e2:5d:94:bb:4b:61:b6:d8:
         57:0a:bd:f2:a6:6f:6f:41:25:62:7c:5b:4d:35:8c:f2:88:d2:
         3e:77:cc:68:64:3b:b9:ca:bd:90:17:35:43:e4:62:6a:b6:84:
         81:98:29:9c:aa:8e:08:83:6c:16:0a:3c:fc:42:e0:60:8a:cc:
         a9:39:cc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:26:01 2025 by rpki-client