Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/100db586-b37c-36c0-b9a5-69dd190e511f.roa
File:                     100db586-b37c-36c0-b9a5-69dd190e511f.roa (raw, json)
Hash identifier:          IW+WC+koU1LA3JNVDUe4t7Aqi8dQtg+AwKgNS70WlUM=
Subject key identifier:   68:6C:19:14:BD:69:1F:58:67:0A:56:F2:AF:08:D0:10:54:4E:5A:24
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7B5E61525B528F288080C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/100db586-b37c-36c0-b9a5-69dd190e511f.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.132.240.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b5:e6:15:25:b5:28:f2:88:08:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=8da8aa06-ad1d-4d23-8623-5dc74c7d1a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a2:66:6f:97:48:8b:6c:6f:14:9d:09:d2:db:
                    87:dd:ce:6f:e5:76:d6:68:dc:8a:79:73:71:54:c2:
                    df:95:1c:c1:3b:6a:11:52:24:80:31:5e:f4:80:e6:
                    ad:a8:77:aa:97:2a:4f:53:b5:df:c0:1b:02:de:0f:
                    6d:95:b1:75:82:a5:af:73:a6:7c:80:f7:e9:f5:a5:
                    84:63:03:dd:20:49:12:53:09:91:df:dc:46:d6:0b:
                    9e:82:61:f0:6f:91:8d:47:b6:bd:78:1b:23:ef:1f:
                    85:fe:7a:ea:63:01:79:ea:33:0a:5f:5e:2d:24:e6:
                    2a:b6:85:9e:39:5c:1e:8e:27:d2:58:12:85:2b:b2:
                    1d:71:2c:99:46:1a:d0:ab:ef:48:ce:27:bd:bc:7a:
                    0d:f4:3c:5e:12:f1:2f:a0:37:4a:cb:f5:b4:b3:b2:
                    a5:d0:3b:ac:c1:09:e3:87:a2:a0:d5:97:0e:b7:3a:
                    74:e3:a8:3d:28:50:e5:e5:6b:18:99:0e:4f:a6:66:
                    21:67:d9:7a:f5:44:d3:a1:8f:1a:5a:26:14:bc:61:
                    ad:db:b7:f9:1f:fa:7e:0f:92:1c:dc:28:1f:c6:f2:
                    84:d6:14:61:b2:04:06:14:ed:5f:0a:96:95:96:4e:
                    96:75:74:b4:5a:01:e0:d0:e6:a0:77:5e:78:11:6c:
                    bc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6C:19:14:BD:69:1F:58:67:0A:56:F2:AF:08:D0:10:54:4E:5A:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/100db586-b37c-36c0-b9a5-69dd190e511f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.132.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:c0:cc:eb:8a:d4:f8:32:d5:35:d4:db:d9:22:87:68:d3:1b:
         69:f2:63:92:97:18:30:e8:6b:78:1f:57:b0:ca:3e:94:55:eb:
         d9:cd:35:6a:c8:82:c4:1c:e6:3e:27:54:c9:9c:b2:24:13:30:
         79:a1:2c:3c:0d:ce:fe:d1:c5:9f:0e:1b:42:89:ca:2e:e7:05:
         42:bc:f4:16:f3:8b:e5:77:6f:a4:29:a5:18:d7:14:47:a6:aa:
         84:9f:83:b6:7d:0e:f6:82:40:5d:f4:3f:25:64:84:8f:74:2d:
         fa:52:54:f2:c9:4b:07:85:27:26:cf:e8:10:51:74:e1:0a:e4:
         c7:55:1f:8c:d8:47:95:f1:5c:af:44:19:10:93:0b:9c:bd:b5:
         66:12:94:81:b5:82:5c:a8:6b:56:86:a1:28:3f:5d:03:4a:a8:
         42:ca:dc:44:13:74:ea:9f:4e:b9:49:87:49:5c:54:03:a8:ff:
         f7:04:90:66:38:e2:85:04:5f:ac:51:dc:4a:fe:c6:36:67:a7:
         f3:62:b3:be:e7:11:22:86:b1:0f:39:aa:f9:c7:61:77:0b:0c:
         24:db:38:51:61:c7:ee:f0:c5:03:e3:8a:e5:c6:d6:9f:07:a4:
         68:e0:78:4c:42:03:58:3e:28:9f:50:b6:ef:46:ee:be:71:3a:
         8c:37:95:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:55:27 2025 by rpki-client