Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1c321bc-81f2-3a9d-a1f1-3b858fed1f9e.roa
File:                     b1c321bc-81f2-3a9d-a1f1-3b858fed1f9e.roa (raw, json)
Hash identifier:          W/sCvKxAATAtOiX5f+fp+Y12/WImCs5qRj93eOJwSus=
Subject key identifier:   85:B3:6C:D7:7C:AF:AA:B9:5D:56:BF:DF:B2:5B:4A:86:D2:8A:6E:F9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7A6577B5B47687681958100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1c321bc-81f2-3a9d-a1f1-3b858fed1f9e.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.78.144.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a6:57:7b:5b:47:68:76:81:95:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=18e44e80-2e71-46aa-a482-2be258dc02ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ec:76:82:b4:31:e3:ab:1c:fa:85:3c:9b:d3:
                    e2:3f:6a:06:d3:ab:95:bf:72:54:a1:09:3a:1d:0a:
                    0c:f7:99:0c:da:5b:ce:cc:3a:e6:9d:cc:a0:2c:24:
                    39:33:ab:8f:6a:87:e8:39:51:15:3c:0c:37:5e:07:
                    d5:8d:93:b7:15:d3:80:ab:83:f7:8e:83:36:97:be:
                    e1:b4:d3:24:9e:aa:64:90:01:cc:ad:ce:73:cc:c0:
                    78:55:c1:b2:54:d7:73:23:53:72:1b:0b:40:cb:f0:
                    e1:14:23:3a:01:e7:59:44:45:0e:4b:39:e0:f2:5c:
                    cd:e3:74:85:c5:e8:21:9f:f1:a2:a5:a2:4d:3e:a4:
                    48:aa:51:1c:9b:04:dc:e7:88:2a:ad:c5:52:a4:fb:
                    45:aa:a4:9b:91:45:b1:60:55:c0:32:33:73:e7:db:
                    b0:0f:d8:2e:54:86:c1:e5:e2:e4:79:11:f4:b6:74:
                    0b:75:dc:55:be:fd:8d:d7:11:94:2d:36:5f:81:46:
                    88:24:36:fd:6b:a0:49:a3:78:af:66:3d:86:7d:6c:
                    0c:c2:43:89:a3:92:69:4a:8d:17:b7:8f:88:16:0a:
                    58:a7:63:d5:3d:ee:1b:bc:ed:a7:7d:8f:d5:36:a6:
                    39:93:32:c7:1d:b5:72:8f:9f:db:b1:3f:13:f8:95:
                    91:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B3:6C:D7:7C:AF:AA:B9:5D:56:BF:DF:B2:5B:4A:86:D2:8A:6E:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1c321bc-81f2-3a9d-a1f1-3b858fed1f9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.78.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:dd:03:97:e9:81:bc:90:8a:e1:aa:ac:c5:84:3d:09:02:63:
         aa:29:d6:92:0c:7e:36:66:54:04:8a:74:c7:92:a6:06:bc:eb:
         12:95:59:04:3c:05:64:f9:4d:7b:a6:ae:8b:f7:c3:f9:f7:38:
         24:80:d1:f9:02:58:e8:fb:c1:5b:ea:ef:c2:30:01:8a:1d:eb:
         97:5c:f1:4e:05:5e:38:09:7c:4f:fe:3f:19:b3:33:51:91:e4:
         e9:c7:f8:bc:6c:86:be:69:ed:cb:33:ac:c5:f2:01:6c:81:d5:
         69:c7:7f:b8:15:fd:ec:fe:3d:11:f3:1a:0a:0a:21:52:30:61:
         1b:0a:a3:ad:c2:0e:48:7b:8f:ac:7d:7d:3a:ff:23:87:dd:53:
         f2:f9:24:c5:31:48:e9:b2:20:08:75:e8:c1:9e:28:51:64:fc:
         41:8f:69:c5:39:c8:80:b7:42:ba:ff:53:ca:e7:12:4e:28:d4:
         ff:4c:f0:60:b3:47:c2:3b:bd:01:5d:cf:fc:11:f1:69:7a:74:
         e8:b7:9b:26:5c:c7:3d:64:47:84:dd:04:fb:04:f7:d4:25:cb:
         71:69:f7:e6:25:54:d2:1f:c9:f5:a2:6c:d3:ce:11:26:03:40:
         05:37:b2:17:ed:cf:bc:01:29:b0:6a:df:2f:3a:3d:67:ed:4d:
         42:b4:ea:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:56:26 2025 by rpki-client