Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/218af7c2-cce2-31fe-b5cd-3a490136957e.roa
File:                     218af7c2-cce2-31fe-b5cd-3a490136957e.roa (raw, json)
Hash identifier:          pVvY98j9ZqHervclOTC16t+0waQ3Qv7OYhE7oqGySMc=
Subject key identifier:   4D:D9:F8:88:FF:A5:6D:79:6D:ED:24:B3:E0:A7:00:28:7C:72:DF:69
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7BB5897D62ED8DEAB14A8C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/218af7c2-cce2-31fe-b5cd-3a490136957e.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.154.160.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bb:58:97:d6:2e:d8:de:ab:14:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=f6b1a370-a5e6-4124-90c4-a8aa236f6160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bc:3e:cf:6c:a3:d9:8d:5f:77:2c:a3:6e:57:
                    86:bd:17:8a:68:65:04:e7:6f:41:d6:76:90:c3:ac:
                    d5:00:4a:99:3d:6a:1d:37:c6:c8:fb:34:d9:82:06:
                    46:de:3c:54:d8:4f:b8:e1:3b:95:33:54:3f:33:0c:
                    40:2c:9d:60:c9:92:99:9c:74:c2:40:3b:42:5a:3b:
                    e1:33:e3:19:32:68:3b:95:d9:13:06:1b:11:79:a0:
                    8d:8b:f0:86:7f:79:65:1b:3d:5c:b2:24:34:2c:2c:
                    2a:a6:57:18:f1:d3:8e:38:a3:11:62:69:a1:41:31:
                    60:c9:5c:e5:3f:bf:b6:03:37:2e:4f:fc:31:a2:6b:
                    9d:28:e2:4d:f9:79:3f:d2:4b:4f:0c:6b:7a:eb:5b:
                    1d:1c:70:c2:8d:41:0a:d5:00:34:72:63:88:c4:1d:
                    da:f8:56:a1:bb:1f:56:0b:1a:64:31:47:8d:76:8b:
                    ef:e2:4a:54:9c:2e:51:f4:46:af:19:74:b2:7a:26:
                    33:e2:b5:c0:b4:a9:f4:4a:ee:28:db:ad:ba:fe:7d:
                    88:51:e0:13:e5:ad:aa:ee:3b:10:b2:0f:b7:db:1d:
                    33:64:df:8d:c5:e5:4b:7e:95:f2:86:88:55:ea:30:
                    89:12:ac:55:53:99:d2:4c:d2:97:9d:68:1f:ab:4d:
                    dc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D9:F8:88:FF:A5:6D:79:6D:ED:24:B3:E0:A7:00:28:7C:72:DF:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/218af7c2-cce2-31fe-b5cd-3a490136957e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.154.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:b9:a1:c6:de:ab:0b:d7:16:6a:71:d9:a9:10:a5:6f:4d:4e:
         39:a7:a9:2d:f2:bd:00:d0:3a:bd:0b:78:1d:c5:ff:4b:c8:21:
         dc:4d:10:1d:76:45:0f:43:3a:c7:12:b2:6e:73:c5:dd:3e:86:
         08:35:89:bb:1e:d9:a1:97:74:d4:b0:3d:76:a0:32:da:11:2a:
         31:55:10:5a:9d:e0:70:29:2c:d8:30:63:f7:7e:8c:d0:cf:f5:
         7d:e5:2c:ee:4e:c7:bf:c5:79:e6:6c:a3:d2:32:4b:be:3a:02:
         5f:50:c1:02:52:87:2a:35:bc:38:34:a1:99:56:8b:97:b0:56:
         87:c1:99:fb:39:f7:0b:9d:6b:81:7a:21:9f:31:70:02:a6:99:
         35:7f:99:f4:44:30:2f:21:b8:a7:ad:40:99:6b:11:d1:27:43:
         ce:74:f7:99:f9:7b:30:35:aa:f2:3b:10:a1:9c:81:9f:6b:47:
         a5:be:5b:03:6b:a9:52:e9:30:7c:be:20:d9:5b:63:01:01:7e:
         d5:7b:21:72:86:2e:e1:e2:2c:ff:c4:cf:c2:59:13:c4:61:e5:
         dc:ce:65:c5:c3:a5:87:62:a5:47:d0:d3:a9:53:0e:c7:51:df:
         32:06:eb:89:ad:a6:b2:83:82:ec:6c:6e:66:f8:6a:8a:cb:1a:
         7a:c6:9e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:37:13 2025 by rpki-client