Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eb5ad4a3-6b91-3c68-8806-f54e1150986f.roa
File:                     eb5ad4a3-6b91-3c68-8806-f54e1150986f.roa (raw, json)
Hash identifier:          R+wpY9Qss+CpuJ73w75a/VoPqG8WFlcLW0Eov5D0PL8=
Subject key identifier:   79:6D:43:E6:59:34:E8:CA:73:E8:11:86:70:3D:9B:FC:CE:99:1C:4B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309F7AE364DCE316B6E650D40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eb5ad4a3-6b91-3c68-8806-f54e1150986f.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        34.142.0.0/16 maxlen: 16
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f7:ae:36:4d:ce:31:6b:6e:65:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=d3f86570-d809-4e01-8ad1-9681e6621dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:d8:f0:50:74:d0:57:f7:e6:e8:aa:19:c0:
                    0c:3c:a0:8c:b3:74:c3:b7:0e:24:eb:2d:ca:d0:de:
                    61:c8:f7:13:b1:37:70:f0:55:f5:99:51:28:61:0d:
                    61:f6:85:58:21:b8:22:c8:03:83:b2:7d:f7:09:9d:
                    d8:86:21:96:0e:0b:1e:f5:7c:9e:dc:9e:43:ab:18:
                    a5:f4:58:14:21:3a:65:e6:7c:06:13:d4:d6:55:c7:
                    78:e7:aa:3d:41:be:c3:50:9b:b7:41:fe:64:93:ab:
                    44:1e:ad:7c:ed:e0:20:79:c4:87:4f:84:a8:b6:e3:
                    2e:fc:e3:54:1a:10:e4:e3:0e:c1:90:d0:00:22:f9:
                    22:b7:13:c7:ee:58:b0:4e:1f:0a:ad:1c:2b:17:15:
                    ac:7f:5b:3e:b0:95:e0:d1:e9:64:f5:99:de:aa:97:
                    60:d8:3d:c4:bc:21:a4:60:22:c8:16:41:63:88:4d:
                    c5:b0:ab:60:5b:28:2b:8e:67:4b:06:6e:93:11:c2:
                    24:fb:e8:d8:04:f2:58:f3:9f:ad:12:7d:3e:76:cc:
                    33:7b:28:1c:f9:c9:ac:55:73:66:79:4a:76:85:cf:
                    cc:50:ca:93:ae:e1:6d:6c:4d:ab:25:cb:f4:5e:2a:
                    91:de:54:b4:1c:ee:81:38:d3:82:63:b1:cc:b1:cc:
                    d7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6D:43:E6:59:34:E8:CA:73:E8:11:86:70:3D:9B:FC:CE:99:1C:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eb5ad4a3-6b91-3c68-8806-f54e1150986f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.142.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:31:a1:5f:df:9c:52:32:6c:bc:d5:dd:a3:6e:de:fb:4c:37:
         6c:89:50:30:3b:de:ef:64:5c:45:83:fc:74:b1:14:fb:e4:fb:
         45:39:17:23:25:da:f8:c0:62:c9:ad:e2:e9:6b:50:98:a5:d9:
         de:5f:ab:2f:e7:e8:c3:9e:18:8c:22:9f:a0:d0:fb:0f:89:5f:
         af:9c:08:77:34:68:ca:2f:f1:aa:a4:64:de:e7:e9:b3:9c:68:
         62:fe:e8:81:40:12:72:48:ef:74:87:5c:e3:d8:50:51:05:4d:
         73:07:32:af:06:2e:02:01:f2:b0:29:b8:a0:cc:2d:46:28:20:
         6c:4c:fa:b8:c0:9b:9f:c2:db:d9:c8:1e:c4:17:65:a4:c7:ea:
         91:0e:b2:72:03:36:b2:7e:d8:b9:a4:b0:36:3f:d7:d9:ae:71:
         c6:bd:0f:2c:4c:cc:3f:ac:10:eb:ad:de:85:18:70:c5:90:55:
         33:f7:94:d5:e4:e1:b8:b2:93:24:3d:1f:5b:cd:1d:a2:07:09:
         c9:d0:0d:a7:2f:ac:70:a6:72:53:39:35:d0:4a:89:b8:f9:e4:
         05:cc:41:2a:1a:d8:ff:bb:d1:27:ef:a2:92:1a:9e:7f:2a:91:
         84:1f:d0:1b:06:fa:ca:c7:0e:ca:4a:a9:f7:bd:fb:b7:3b:ec:
         5d:ee:0e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:09:38 2025 by rpki-client