Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8fc5ebd-c8d2-3dd2-bcd7-fd5f0b38a44e.roa
File:                     f8fc5ebd-c8d2-3dd2-bcd7-fd5f0b38a44e.roa (raw, json)
Hash identifier:          EwZUiv8jhixT4CmXU3hxVyG1pig0axmEMEbdeOjDDxY=
Subject key identifier:   C1:A6:E2:C5:A0:B8:BE:28:88:F2:E3:89:2F:AB:71:65:D0:E3:45:C0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7B212F9523946F536866300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8fc5ebd-c8d2-3dd2-bcd7-fd5f0b38a44e.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.89.208.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b2:12:f9:52:39:46:f5:36:86:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=68dfe1c6-d450-4436-a592-53831b07c6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fb:c1:0d:b7:16:18:40:83:f1:f0:8b:7f:b6:
                    27:52:f3:3b:a2:95:cc:12:41:fe:1c:50:90:4e:04:
                    c7:87:a4:64:3f:0b:cf:06:05:8b:b3:64:f3:5f:1b:
                    85:8e:e4:0f:24:35:eb:6d:a9:e0:3c:10:c1:de:cf:
                    12:6c:aa:d6:f5:df:c6:bf:80:da:56:b6:86:62:90:
                    a7:32:b0:af:7b:41:0c:e6:d3:7b:54:e2:42:8c:38:
                    a0:04:df:f8:92:e6:6b:14:05:07:0d:f9:fa:8e:3b:
                    68:48:96:2c:df:fd:4f:a7:59:02:20:9d:8b:33:28:
                    12:c1:d8:04:3f:79:d7:c3:b5:92:65:43:e9:d5:11:
                    c2:b0:0c:47:9e:5a:17:a9:57:93:1a:4d:b9:f0:5d:
                    8e:3b:b3:46:02:9f:86:2c:64:c6:73:4e:36:c6:02:
                    b2:24:29:fa:65:99:ae:19:19:f5:7a:94:1c:6b:ab:
                    63:f4:ab:b3:a5:72:f6:f3:dc:65:45:bb:e8:68:92:
                    f3:37:e2:c3:90:01:f1:5d:0b:b0:76:a1:14:20:48:
                    9a:67:18:6a:af:ad:ac:ba:2b:e4:64:e6:8a:6f:f3:
                    ce:d2:03:1a:80:53:e7:f5:05:bf:fc:d7:2b:86:ed:
                    03:78:69:36:72:ca:cb:1d:47:59:2e:d2:c0:78:bb:
                    1e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A6:E2:C5:A0:B8:BE:28:88:F2:E3:89:2F:AB:71:65:D0:E3:45:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8fc5ebd-c8d2-3dd2-bcd7-fd5f0b38a44e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.89.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:b1:c1:a3:74:3f:7b:65:98:16:dc:1d:50:ef:48:89:86:b0:
         f7:61:40:ed:de:18:b1:0d:28:9b:5b:a7:f9:c6:44:89:27:8f:
         91:89:18:8c:69:51:b3:25:bb:ee:14:dd:19:96:2b:a4:5f:fe:
         e0:16:21:5f:6b:c2:6e:09:1e:82:a9:ef:2f:ec:36:c1:1b:4a:
         01:80:72:fa:a4:e8:33:0d:4f:aa:98:9a:10:96:01:6a:e9:5f:
         be:2c:d2:21:14:a5:5c:df:de:f3:98:fd:92:ad:b6:82:41:83:
         6f:13:66:c4:f4:9c:9a:65:e3:07:76:e2:7a:1a:75:57:41:0a:
         9c:e0:b4:52:4f:96:36:87:cb:4d:5d:ff:b5:c9:e0:37:30:c6:
         f8:14:63:6c:52:82:01:44:3c:c4:c0:6b:98:95:18:27:7a:8a:
         b9:21:70:24:75:ef:48:a0:60:b8:a1:5e:4d:51:ff:26:7f:ba:
         5a:bb:75:12:4f:97:9a:b6:5e:ab:cb:76:10:03:a0:92:3e:63:
         bf:86:54:65:e0:b2:bb:60:62:98:81:a8:c7:21:f3:85:bf:b8:
         5e:98:7a:52:3e:27:15:9c:f8:e1:a4:aa:94:c8:e3:01:18:03:
         b0:21:80:20:8c:e6:a6:b5:f9:a1:37:f0:39:bb:f6:10:d2:f3:
         8f:ce:b9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org