Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0280ddd5-5f9a-302d-abba-56b82f16686c.roa
File:                     0280ddd5-5f9a-302d-abba-56b82f16686c.roa (raw, json)
Hash identifier:          YpXgOi0qJiRXXSaQTRWU9siHmkoFB7Y7VEg6vLWaSLo=
Subject key identifier:   78:55:DE:77:E6:61:05:C0:A7:85:83:B2:3C:42:0E:69:BE:B0:15:BB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7AE3F112334F16E05C35C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0280ddd5-5f9a-302d-abba-56b82f16686c.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.198.32.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ae:3f:11:23:34:f1:6e:05:c3:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=d80486c2-e818-4afb-977a-949a4212cc40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5d:61:30:e7:3c:6a:3d:d0:89:8f:37:7e:eb:
                    38:61:ec:ac:21:7d:ef:b9:f3:1c:00:5f:84:c2:6a:
                    cf:37:fd:b4:0f:10:b8:b9:c7:24:b5:4a:26:ae:fb:
                    c0:7c:12:57:e1:d6:6c:21:49:8c:b6:52:b4:8c:97:
                    42:1c:fb:a8:75:0e:66:f1:89:e7:c6:f4:f2:40:2f:
                    a5:10:aa:05:76:02:54:fc:e7:d5:28:62:b8:ea:d5:
                    e0:eb:f7:22:d1:b8:9d:d5:21:39:9d:5c:08:95:82:
                    08:61:c7:03:f8:9a:c5:01:cd:95:f6:df:ba:2a:1d:
                    bc:ca:9b:bb:99:aa:57:d6:d1:b9:61:b2:26:57:c2:
                    78:8c:f6:a5:88:dc:f0:d5:67:d8:67:95:9a:6e:31:
                    3b:5e:e3:db:78:15:01:37:52:4e:01:4d:fb:25:1e:
                    d7:51:4b:a2:e6:41:a4:c4:18:3a:47:cb:4f:d0:89:
                    7d:7d:ad:01:08:12:86:6c:68:1c:68:e4:7b:de:60:
                    dd:a6:e6:a8:ed:0a:8a:c7:cd:77:b4:da:74:77:95:
                    fd:ad:91:02:a9:af:95:ff:a2:00:a4:59:cb:2a:db:
                    16:c7:f9:05:d5:88:23:c3:a6:ff:85:70:8c:5b:4d:
                    f1:44:75:4c:35:42:40:95:4c:cb:41:e4:f8:12:8f:
                    61:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:55:DE:77:E6:61:05:C0:A7:85:83:B2:3C:42:0E:69:BE:B0:15:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0280ddd5-5f9a-302d-abba-56b82f16686c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.198.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:2a:b9:dd:11:31:12:07:f0:3b:d0:04:74:6a:84:a8:7d:ca:
         52:60:ef:f9:71:92:18:8f:6a:d8:dd:bb:f2:83:4a:ac:32:14:
         9e:0b:53:10:c3:d5:94:31:f4:6d:b3:ef:1e:44:2a:5e:c9:fd:
         13:9e:73:37:09:ce:11:6c:12:c8:fb:0e:a9:b7:0f:24:4a:23:
         2b:7b:b4:24:b3:57:6d:2a:74:38:6c:2a:a8:8b:67:87:6c:55:
         23:68:06:ad:fb:c5:79:12:df:dd:94:cc:2c:9d:2a:3f:2a:4c:
         39:8a:c0:ed:37:de:26:9c:45:3a:fc:5a:e5:4b:39:67:7b:56:
         48:ee:51:25:c9:53:06:8d:54:f9:da:ef:cd:3c:ee:66:54:6a:
         2a:c2:02:73:76:79:19:a8:47:c1:08:9d:fc:1f:14:f7:8a:e6:
         25:f4:c5:18:e7:be:c8:dd:84:b0:4d:9b:08:e3:ab:39:db:0b:
         8b:06:cb:c5:19:16:cb:31:0e:b4:26:c5:c0:01:f9:ab:7d:7a:
         9b:8c:18:21:de:ef:81:86:6a:c1:ba:d3:1d:5d:c3:1a:7f:60:
         d3:5f:e9:12:b2:a6:ff:15:45:16:cf:9e:03:f1:b9:c3:c5:39:
         c4:e5:97:11:dc:d6:cf:8f:51:94:72:45:59:f7:bf:04:00:9a:
         68:21:19:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:37:07 2025 by rpki-client