Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3689e66-a1c6-3ae5-9cb5-7e2e763b71b5.roa
File:                     b3689e66-a1c6-3ae5-9cb5-7e2e763b71b5.roa (raw, json)
Hash identifier:          FKsaO8yf+DtRelPIS16OdA336wbEcly6iYYL6nZo7I4=
Subject key identifier:   19:B2:28:1C:4C:B8:3E:2B:AB:6A:71:6E:41:9C:72:3E:20:05:C4:33
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309F256021D53EF2E86DABCC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3689e66-a1c6-3ae5-9cb5-7e2e763b71b5.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.155.0.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f2:56:02:1d:53:ef:2e:86:da:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ddb9150c-2886-4e39-a21f-fdb2a8f5f4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3d:af:2f:a5:5a:e3:86:2f:00:c8:b1:f7:9f:
                    fd:06:53:0f:cf:56:aa:29:ad:ed:d8:f7:96:cb:b7:
                    52:b6:30:3c:64:49:1d:40:68:0b:cf:4a:34:47:a2:
                    de:7f:e6:61:15:ec:39:2c:a8:3b:43:99:c6:22:2e:
                    1f:5b:d0:53:1e:ea:01:cf:9c:ec:92:9d:ad:56:b8:
                    13:e2:9f:c3:3b:11:f8:a2:f7:a6:0a:b6:b6:75:f7:
                    50:e9:1e:c0:94:3c:6a:11:96:eb:c1:9e:ee:61:38:
                    93:61:c0:8c:27:a5:f7:94:3e:ab:0f:f3:46:df:4d:
                    76:9a:37:99:80:69:38:e1:40:c7:be:0d:fb:fc:9a:
                    bf:78:31:6f:98:7f:ae:77:24:12:06:dc:53:ab:54:
                    67:a6:1a:3c:2d:1e:48:0b:b4:13:4f:29:c1:68:8d:
                    57:97:2e:d3:73:15:66:d4:48:4c:a6:ac:de:0f:4f:
                    8d:5e:59:eb:9f:d8:e5:e2:17:7d:fc:b7:fa:6b:42:
                    72:4f:51:61:10:10:70:5f:c7:0b:3b:52:a5:e7:d2:
                    2c:e2:a6:6c:a9:e8:76:77:cc:08:23:2e:63:8d:26:
                    41:b9:d7:b4:d2:bb:4c:62:ef:e3:16:6a:d8:03:96:
                    85:7c:1c:76:50:0e:76:75:66:b4:fb:a2:6e:de:bd:
                    34:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B2:28:1C:4C:B8:3E:2B:AB:6A:71:6E:41:9C:72:3E:20:05:C4:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3689e66-a1c6-3ae5-9cb5-7e2e763b71b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.155.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:4e:f0:9e:5d:87:b6:15:28:6d:94:fa:ca:00:31:57:9f:6b:
         22:52:cf:79:6b:ba:3c:f8:97:68:c3:d1:92:7f:5d:19:64:b8:
         a5:e6:53:64:5b:79:41:dc:27:50:99:eb:83:e6:ae:0e:94:7c:
         91:62:cd:97:43:fc:af:27:cf:ac:c3:b5:5f:0b:31:8f:df:17:
         bc:30:bd:8d:f9:b5:48:ed:14:74:75:a0:98:45:a2:99:ac:41:
         46:06:6a:3b:77:83:31:41:02:ec:f9:f4:30:98:c6:9c:a5:1b:
         8f:fc:2f:b8:fd:e8:ba:fc:a1:61:4b:44:6b:88:12:d5:51:77:
         ac:9c:60:b2:03:06:8a:0b:23:d3:a1:0c:d2:18:f5:5d:28:80:
         f2:bd:3c:ec:5b:b2:cd:00:ca:3e:a2:f4:93:aa:e6:d8:87:d7:
         a2:d3:d1:4e:3b:64:90:27:84:36:2f:3c:ba:10:4f:5c:52:bd:
         6a:5b:47:11:6a:c1:e8:ec:dc:5a:6c:d0:2a:68:ca:c0:f5:df:
         71:69:2d:28:13:07:1d:a5:d3:2c:05:42:45:5d:15:42:88:92:
         f2:48:45:8f:8e:c8:bb:f5:fd:56:e4:17:f3:36:b0:34:e8:1f:
         c8:df:bd:29:9e:51:a1:5c:c9:40:4e:15:83:95:51:62:5e:79:
         d2:34:c5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:33:20 2025 by rpki-client