Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2c2ed5a-a131-3764-baef-cafef237c2cd.roa
File:                     a2c2ed5a-a131-3764-baef-cafef237c2cd.roa (raw, json)
Hash identifier:          myWuFL6Do8ScxvSIsur4U/wBH3lwRo7MsQzWYx0DWT8=
Subject key identifier:   42:5A:85:B7:2D:34:97:E7:5F:87:8D:80:C4:9E:19:41:DD:D6:CC:68
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309F923D69F579BBED6AEDE00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2c2ed5a-a131-3764-baef-cafef237c2cd.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        130.211.240.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f9:23:d6:9f:57:9b:be:d6:ae:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=33254f67-ceb7-47c8-8b19-d3777da88e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1d:31:cf:fa:68:ec:cb:e2:9c:4f:17:3f:a0:
                    e2:c4:91:af:b1:5b:ca:45:50:33:de:43:4f:0f:14:
                    0e:79:a2:22:36:97:8b:01:97:fd:ba:e0:24:5f:c6:
                    da:82:5d:d4:32:3b:b7:d5:43:21:5f:e2:47:f1:65:
                    7b:7c:eb:98:e3:db:be:8e:4a:5e:5b:a8:35:34:6f:
                    df:a8:72:fb:cb:50:06:a2:cb:68:b7:77:99:22:8f:
                    c8:ba:bf:1f:76:23:b5:ed:88:19:af:46:1a:91:ee:
                    59:5d:b0:27:67:41:53:8d:4d:8c:a0:2a:38:a2:b9:
                    e7:d9:88:c5:6f:dd:45:13:be:df:a5:53:98:1a:89:
                    bc:ec:ad:1e:ec:ab:6f:5b:b4:38:de:c8:ca:d9:a8:
                    d6:6f:c2:b7:e5:c1:c2:b8:f7:29:6a:d2:c4:1d:6e:
                    09:70:09:93:4b:31:00:30:93:ad:5e:c3:ba:d5:23:
                    5b:aa:89:bf:3c:35:d6:20:ff:1e:5f:6f:e1:8a:95:
                    b2:52:ba:10:02:c6:21:17:c6:47:bc:df:ca:d3:62:
                    09:3a:9d:29:f2:2c:f5:d4:56:c0:56:b3:61:6d:4c:
                    5b:bd:ea:fa:e3:4e:67:b8:19:a3:35:c5:2d:94:23:
                    ea:7a:d4:e7:a0:c3:39:99:48:e2:2c:6b:ba:9c:8c:
                    89:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5A:85:B7:2D:34:97:E7:5F:87:8D:80:C4:9E:19:41:DD:D6:CC:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2c2ed5a-a131-3764-baef-cafef237c2cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.211.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b4:f4:a2:26:c6:c9:48:eb:2a:9e:d8:31:7b:03:dc:db:c9:
         32:44:dc:5b:b5:d9:a5:dc:d9:f2:f4:78:e1:ad:bd:4d:dc:2a:
         a6:8d:ad:d4:6e:e2:8f:47:b5:2d:a5:16:1f:4b:29:2d:fe:4f:
         3c:36:67:e9:c1:52:7f:58:3b:f2:d2:db:d2:56:2c:b2:10:af:
         f2:ba:3c:74:36:fb:d9:36:b1:ed:be:34:a7:69:5e:74:d9:0a:
         b0:a4:25:b7:cf:35:e5:e7:7c:66:0a:8a:44:d4:d3:5c:61:cd:
         62:33:4b:0d:05:76:ac:18:89:bb:ea:dd:ab:6b:d1:a6:00:17:
         59:d7:75:7d:0f:bf:72:a6:6d:ad:1d:2f:e3:e8:2f:a5:2d:fe:
         57:db:08:32:96:8f:16:dc:0b:d3:f0:23:c8:11:77:1b:62:30:
         20:5a:44:c6:71:ac:6b:56:71:ab:9d:48:d6:9b:ec:57:3c:be:
         d8:44:ab:f6:ca:24:61:76:c4:9a:dc:f5:be:71:ff:1b:c5:72:
         e9:41:a3:34:6d:ae:13:3e:6c:8d:d9:e5:c3:de:54:b8:fb:08:
         a5:4c:fe:13:6f:f9:bd:be:4e:7a:c2:90:fa:43:44:76:bf:3a:
         fe:31:4c:0b:16:6d:93:11:5c:75:9f:d3:cc:80:fc:82:80:5d:
         63:16:47:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:36:59 2025 by rpki-client