Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fe0d632d-e0fc-3260-8096-4fe046cf7701.roa
File:                     fe0d632d-e0fc-3260-8096-4fe046cf7701.roa (raw, json)
Hash identifier:          hLAmZtUD8rJQipXfUQFLERVjYLHPqaDcXRlVsoUdgBk=
Subject key identifier:   9D:F9:A1:BC:B1:51:FB:92:B2:70:CB:1B:28:51:84:7E:1A:AB:AA:88
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583E25A6A118F8C1FFDA38BC9E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fe0d632d-e0fc-3260-8096-4fe046cf7701.roa
Signing time:             Sun 05 Jun 2022 12:00:00 +0000
ROA not before:           Sun 05 Jun 2022 12:00:00 +0000
ROA not after:            Sat 07 Sep 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.8.0.0/13 maxlen: 13
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:25:a6:a1:18:f8:c1:ff:da:38:bc:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  5 12:00:00 2022 GMT
            Not After : Sep  7 04:00:00 2024 GMT
        Subject: CN=47427806-f2c6-4291-9462-0c2a6c8823d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7f:bf:4e:2f:ec:56:0d:84:39:b5:d0:ae:b3:
                    bc:a0:88:8e:d6:d9:50:00:8f:6d:b9:71:f8:15:71:
                    15:e9:0f:e3:ab:de:16:68:eb:6f:59:f2:77:49:c2:
                    a6:6d:90:06:4c:c3:5f:9a:b1:99:26:31:14:09:08:
                    5d:10:e5:7a:37:db:f2:4d:be:47:46:bf:81:fc:61:
                    d1:88:7c:09:c2:e3:33:b5:a2:4c:e8:52:9c:60:a6:
                    bc:0d:92:99:cc:ba:4a:ef:e2:5d:a6:34:20:72:fc:
                    47:78:e6:e4:3d:22:05:95:7f:aa:59:bf:75:72:30:
                    06:ec:04:54:c1:47:6e:3b:d1:60:3d:56:dd:dd:e4:
                    0c:0f:44:b5:b2:72:c2:7e:aa:56:30:1b:a1:85:00:
                    b2:88:90:0b:ee:68:d5:93:c5:bf:96:a1:38:61:e8:
                    fe:4f:31:01:37:61:36:59:9f:10:4b:e6:8a:8e:7e:
                    a8:6f:20:8c:89:ee:bb:af:ae:e6:87:64:45:b3:f5:
                    57:65:2c:4b:a8:39:95:e6:fe:7d:58:27:82:66:22:
                    91:d7:90:18:75:b2:be:34:8a:7f:fc:1d:57:2f:e6:
                    17:40:40:9e:53:9b:48:d8:26:e4:53:8b:b7:30:0a:
                    f2:b6:ca:2f:e5:ed:33:19:30:6c:31:39:70:03:f5:
                    34:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F9:A1:BC:B1:51:FB:92:B2:70:CB:1B:28:51:84:7E:1A:AB:AA:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fe0d632d-e0fc-3260-8096-4fe046cf7701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.8.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:b6:14:3a:50:85:57:cf:2e:a4:26:b9:3d:56:da:03:dc:aa:
         a7:03:9b:64:8b:20:a1:86:aa:8e:70:51:70:67:81:16:3f:63:
         61:f5:e3:10:7f:34:ee:fe:d2:c1:b5:e3:38:c7:f9:17:de:2c:
         28:94:fb:a2:ab:51:18:1e:9f:45:92:33:33:8a:c4:91:05:b7:
         5e:c9:5c:df:3b:11:12:20:40:e8:99:63:a3:88:58:e5:1f:8a:
         3e:1f:af:e0:72:1b:cc:0e:50:a2:d9:b3:dd:9c:71:d5:27:2b:
         ec:9e:d7:51:64:e0:a5:b9:52:07:09:42:40:1e:da:f7:15:6c:
         63:71:36:22:91:d5:e4:02:2f:f6:d1:26:51:6f:69:5e:aa:14:
         3c:eb:a1:17:a8:1f:bc:32:dc:ae:71:ac:3f:9c:fc:a9:eb:6b:
         12:a1:d2:cb:f8:76:03:29:73:e5:ef:d2:0d:e7:c2:71:c3:30:
         60:31:5b:97:f9:2d:7e:c1:90:db:a4:7e:62:d1:0d:f2:63:ee:
         5c:ca:55:6c:37:f6:47:d4:07:04:a6:3d:6d:d2:c5:c8:5d:68:
         66:6a:a4:b4:2d:88:fc:02:81:63:93:51:bb:24:a9:63:8a:3b:
         bb:53:0e:22:b4:31:ce:b0:b9:08:6a:7d:1c:1a:d7:04:ea:8e:
         dd:e2:90:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:36:00 2025 by rpki-client