Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0c198471-1f8a-3899-bf5f-7ec14568f7bb.roa
File:                     0c198471-1f8a-3899-bf5f-7ec14568f7bb.roa (raw, json)
Hash identifier:          FAxndZKufF0FpSNw/db/Y0vI2uxZ6OLyU5rJuX5gKCg=
Subject key identifier:   E7:37:FC:5E:27:C7:4F:9C:1C:8B:CD:9A:9D:60:88:B6:24:DB:94:31
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7AE088494F003CF38B8CA10
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0c198471-1f8a-3899-bf5f-7ec14568f7bb.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.75.240.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ae:08:84:94:f0:03:cf:38:b8:ca:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=9e087fa5-ff20-41d6-93e0-90e4abd90d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:cf:b8:32:cb:e8:84:ac:46:db:7c:44:ca:
                    d6:df:4c:3c:7b:c5:31:a9:ab:c1:83:6d:51:c2:8b:
                    16:32:9a:2e:d5:f9:45:fd:8a:94:75:74:fd:f4:71:
                    a6:1c:54:51:a6:3e:91:03:20:ef:d9:35:73:d6:39:
                    ed:9c:a4:f1:ea:1c:65:b4:e0:3a:0e:aa:cb:8d:ea:
                    b7:91:65:6c:eb:d0:84:41:1d:e2:ac:ab:a1:ae:ae:
                    f3:2b:60:c6:ad:b2:35:69:4f:e4:b4:81:ee:40:2e:
                    f4:60:74:9d:ce:50:da:66:86:6f:36:0a:65:4b:76:
                    38:38:1d:35:d1:2e:0c:2b:84:46:1d:01:04:4e:00:
                    5b:3f:00:3b:26:06:78:db:82:f3:10:38:ce:76:b8:
                    87:f4:dd:62:ee:8a:ca:3a:1d:f9:3c:39:cf:01:8b:
                    02:e6:9d:93:1c:37:b7:f7:60:d2:e3:01:d5:03:97:
                    38:7c:89:f5:d2:27:93:cf:e4:ab:ff:4d:38:7f:cd:
                    60:88:df:58:3a:ae:c4:fe:3c:2c:a5:70:6b:3d:23:
                    69:71:44:1e:c1:34:36:4f:02:28:3a:d7:61:b5:a1:
                    84:7b:1b:e0:2a:e7:1f:04:2f:61:8f:2c:6a:4b:31:
                    d9:07:fb:bb:f6:2b:28:7d:29:a6:91:b5:76:28:ad:
                    3b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:37:FC:5E:27:C7:4F:9C:1C:8B:CD:9A:9D:60:88:B6:24:DB:94:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0c198471-1f8a-3899-bf5f-7ec14568f7bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.75.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:9f:86:25:43:ae:f8:d5:3a:3b:a8:5c:fe:71:24:2d:3f:a6:
         1b:91:6c:34:ad:ca:f3:39:87:9c:ed:9d:fd:aa:2a:58:23:95:
         d2:28:75:ab:81:39:61:9d:30:7d:22:29:2a:cf:79:a1:74:9c:
         44:95:22:c9:e9:36:43:13:f9:0e:3c:c1:28:e9:f4:5c:e5:3e:
         3e:6c:e5:bc:11:8f:fb:34:14:8e:f4:2d:dd:9f:c2:94:bc:1e:
         c8:b7:8f:00:75:24:ad:90:7d:d3:86:fa:c5:6e:0d:df:c0:50:
         f5:1b:cd:4e:c5:b0:06:38:15:cf:ec:31:d7:e0:ab:6e:30:36:
         91:77:1d:40:07:55:3f:d4:4b:0b:be:c4:c0:1f:9a:4f:93:32:
         9f:44:8c:a2:06:e2:e2:e3:b0:85:62:a5:e8:b5:89:77:9f:6f:
         19:49:b5:1f:a3:e7:d5:30:b0:78:81:1d:82:9a:cd:5b:6c:f8:
         7b:f1:d4:b8:fc:33:bf:d3:2e:5c:6d:25:6e:43:94:10:ab:be:
         f7:37:1a:50:55:9c:87:db:f2:59:e4:e7:e0:e4:f0:60:7d:95:
         e4:9c:ed:ba:4f:6d:20:e4:e6:f4:89:43:2f:42:45:db:7d:4c:
         2b:67:c2:87:6c:0e:3b:9a:86:d3:4d:11:e0:54:d9:89:dd:8b:
         c1:26:2b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:55:26 2025 by rpki-client