Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fdee3ca0-a126-399d-8a82-77acd7278bcc.roa
File:                     fdee3ca0-a126-399d-8a82-77acd7278bcc.roa (raw, json)
Hash identifier:          /+q6MjNSs9PDEPYKIgbgn3dPu57skOuCEOIbpsTTE4o=
Subject key identifier:   91:1F:8B:79:75:5E:E8:E8:5C:03:64:94:8E:0C:76:A3:17:E9:E2:DE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A080245F10E8783972AC880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fdee3ca0-a126-399d-8a82-77acd7278bcc.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.64.132.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:08:02:45:f1:0e:87:83:97:2a:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=001d8ed7-b823-400e-bd73-ee7ab4e29ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e9:2e:6a:d8:ef:38:a5:97:d8:10:08:e9:40:
                    cb:79:51:e6:e5:c3:84:ba:ef:ae:f9:d0:db:e5:a5:
                    8a:5e:33:1f:5c:82:7a:15:24:55:40:bf:4a:34:ec:
                    34:77:86:5a:4c:b6:34:c2:f5:64:b5:8e:d7:7d:f6:
                    36:17:f2:e9:b5:b6:c0:a1:bf:5f:3a:ee:ed:a3:bc:
                    ba:41:ec:4a:f1:09:63:9c:a1:ac:94:45:3d:b3:83:
                    b5:11:7e:92:4f:0e:1f:20:95:cf:40:55:47:b4:1f:
                    01:46:3e:08:7d:de:2b:67:e2:75:f4:d4:68:8a:81:
                    a2:db:bd:32:d5:31:40:32:7f:73:66:f8:8d:d9:f6:
                    f4:20:4f:46:d9:51:7a:cd:37:40:ef:12:61:4b:cb:
                    19:fb:1a:f9:a3:2f:d5:0f:ce:42:f7:cf:78:28:f2:
                    02:97:b0:e5:ce:9e:14:f6:0b:13:82:8f:38:8a:f4:
                    08:48:21:89:e7:76:a7:32:71:d9:1a:78:0f:76:b6:
                    c1:51:5c:55:08:b6:24:0b:d7:5e:45:e0:0c:69:a7:
                    5d:94:50:c8:6c:1c:70:ae:6f:77:f4:40:5d:77:0f:
                    11:77:ed:4c:88:8d:fc:d0:38:3c:ba:91:e6:86:a7:
                    8e:f9:bc:c4:c0:55:a2:96:55:a0:0a:8d:e5:8b:d0:
                    f7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1F:8B:79:75:5E:E8:E8:5C:03:64:94:8E:0C:76:A3:17:E9:E2:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fdee3ca0-a126-399d-8a82-77acd7278bcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.64.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c1:f6:c8:2d:9b:9c:dc:38:a1:60:2f:bb:7a:d0:64:e2:a7:
         b8:8d:6e:25:78:47:7c:96:63:af:95:35:62:4d:3e:f7:19:91:
         f2:28:18:c0:96:9b:b2:fe:50:19:cc:72:c5:b0:b7:25:6c:7a:
         7a:fe:be:49:81:75:0a:f9:36:f2:49:78:a2:9a:48:00:58:ac:
         f1:dc:08:7b:0b:80:06:f8:78:d9:0f:f3:a7:de:c1:72:5a:94:
         1b:1e:44:f7:ee:4f:54:38:a5:e4:68:47:db:89:e9:28:7e:4c:
         34:29:89:e3:c6:24:b4:4b:a7:87:42:5a:78:58:a4:da:ea:bf:
         57:19:89:95:76:0c:c6:08:e1:b0:5b:74:46:34:65:11:af:0e:
         19:85:aa:54:87:3c:9b:ee:fd:5b:df:2c:8d:01:92:fe:c2:02:
         79:62:06:c7:4a:2b:f0:d4:39:78:c7:68:95:c2:1c:af:9c:bd:
         02:8a:02:f1:68:88:4e:d6:0f:8a:d0:f1:d9:f0:36:12:42:d5:
         cb:60:3e:c5:74:f2:8f:11:05:4e:7a:c6:b3:77:dc:cd:06:8e:
         c5:dd:de:80:38:01:ab:d0:f0:88:80:65:49:08:34:9c:da:24:
         8c:db:0e:6d:03:1b:9b:24:b4:9e:b3:d5:b3:9f:a4:92:fb:55:
         d2:e5:f0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:38:01 2025 by rpki-client