Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/985794b4-a3ce-38b5-9d87-142cdd4360df.roa
File:                     985794b4-a3ce-38b5-9d87-142cdd4360df.roa (raw, json)
Hash identifier:          0Wrbv/1btkHjCtFUpq6uFEgYl/C1R6QVpHM6q7/wT1s=
Subject key identifier:   F3:3C:F7:1E:2D:4D:03:CF:B6:2A:FB:D2:3C:38:89:C9:B2:A0:E1:AB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583B816234613B981573A7E0E780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/985794b4-a3ce-38b5-9d87-142cdd4360df.roa
Signing time:             Wed 06 Oct 2021 04:00:00 +0000
ROA not before:           Wed 06 Oct 2021 04:00:00 +0000
ROA not after:            Mon 08 Jan 2024 05:00:00 +0000
asID:                     396982
IP address blocks:        34.165.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:81:62:34:61:3b:98:15:73:a7:e0:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  6 04:00:00 2021 GMT
            Not After : Jan  8 05:00:00 2024 GMT
        Subject: CN=45b74057-84f5-48fc-acb5-d2ac2e25e518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:14:5b:65:db:3b:71:b8:af:b9:9d:f7:3d:71:
                    0c:d5:0e:4b:81:e8:ce:0b:9e:e2:52:38:f6:38:b8:
                    bf:df:26:db:67:fe:ea:6d:aa:5d:af:4c:2c:95:51:
                    b0:41:23:e9:cc:ab:92:5e:c5:29:4d:31:5d:4c:fc:
                    6a:a7:73:f2:3e:cd:c7:cc:e9:6b:dc:63:ab:e3:11:
                    b5:a2:2f:43:e8:31:9b:79:34:76:2e:d8:0e:82:15:
                    0c:ed:eb:ef:a5:56:3e:32:f7:69:80:7c:7c:8c:7c:
                    93:ad:fa:ad:3b:92:92:58:9c:cc:f5:c0:42:92:82:
                    22:91:18:ce:f2:51:75:e5:8d:58:45:e6:10:fb:f0:
                    9d:6b:61:af:9b:42:24:5c:94:21:42:68:d5:65:f4:
                    07:8c:0e:1d:f8:ac:c2:74:11:2d:89:ff:f7:8a:e7:
                    44:d0:0f:ca:2f:09:0c:aa:e6:7d:25:f2:96:0c:5a:
                    ff:40:3e:15:62:42:88:2f:3a:5c:1c:ab:46:65:82:
                    4b:af:ef:47:99:5f:d1:e4:ff:a3:9d:72:dc:22:4f:
                    47:a2:46:c2:47:55:72:16:6b:8d:78:55:d8:51:8e:
                    c1:c6:9c:99:19:a8:98:d7:cc:2c:ac:b4:7c:80:a1:
                    6e:93:53:24:c4:37:ab:44:f2:c2:3c:22:63:dd:f3:
                    27:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3C:F7:1E:2D:4D:03:CF:B6:2A:FB:D2:3C:38:89:C9:B2:A0:E1:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/985794b4-a3ce-38b5-9d87-142cdd4360df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.165.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b2:04:f5:ba:ff:46:d7:2a:72:35:64:a4:d0:49:3d:a7:60:
         38:0a:92:25:97:e0:f4:e6:a2:f9:59:50:ab:a6:de:67:62:4a:
         4a:a0:a6:c7:72:95:c0:fb:fe:52:c7:c9:6d:9f:1a:8c:f0:5a:
         6e:5a:5b:f4:6c:39:9c:81:37:f4:39:28:34:88:35:af:62:c1:
         a3:75:1d:43:06:dd:0a:6d:0c:0d:e5:7d:d7:ca:59:4f:32:36:
         95:37:6a:2e:84:98:c0:3d:85:84:36:6f:82:63:e8:54:28:9f:
         68:d6:a5:ab:d1:5a:7a:fd:bf:2e:e7:22:73:49:ad:7b:bb:73:
         2e:62:96:2c:22:7d:2b:45:af:70:6d:ed:2a:00:9d:df:f7:e9:
         af:81:8e:a3:d2:1f:03:51:4d:c2:9e:73:97:89:7d:de:c9:ee:
         97:ee:62:f1:d1:ea:7d:04:3d:ca:0a:09:0a:3e:d8:8f:47:3a:
         54:31:cd:c4:1b:ef:68:8a:a2:ae:71:86:57:a8:d6:f5:a7:95:
         ff:5c:91:41:66:93:e1:54:d9:a1:e4:c5:71:83:93:e6:21:ca:
         48:33:52:de:dd:a4:6f:a6:3b:8f:54:73:49:c5:13:08:93:48:
         2c:10:38:67:c7:32:dc:b8:93:8a:bb:0e:38:01:56:cd:ec:da:
         74:59:56:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 06:12:14 2024 by rpki-client on console-ams.rpki-client.org