Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbceaadb-461d-391d-b4f6-6657094c5e03.roa
File:                     bbceaadb-461d-391d-b4f6-6657094c5e03.roa (raw, json)
Hash identifier:          Vf97LB8G8jdQM+XlECag2k58wPvmrWdw3KWaPdOFj1g=
Subject key identifier:   9A:F2:F4:8D:0A:57:0D:2C:7D:D8:45:ED:00:E2:0F:78:D3:04:94:81
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285839B8DE989AAB2C1A973E4D6100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbceaadb-461d-391d-b4f6-6657094c5e03.roa
Signing time:             Mon 26 Apr 2021 04:00:00 +0000
ROA not before:           Mon 26 Apr 2021 04:00:00 +0000
ROA not after:            Sat 29 Jul 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.64.192.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:b8:de:98:9a:ab:2c:1a:97:3e:4d:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 04:00:00 2021 GMT
            Not After : Jul 29 04:00:00 2023 GMT
        Subject: CN=8c594197-b988-47d2-8ae4-ae9503c0d4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:e7:b9:c5:a9:3f:c5:6c:aa:61:7d:22:eb:
                    60:fa:25:d0:38:23:71:51:7f:ff:0b:69:d3:c3:6a:
                    23:4a:a6:45:b6:01:3d:96:78:43:9a:48:b8:0b:3d:
                    8b:4f:3b:0a:69:55:a3:41:39:a6:78:33:ea:30:0c:
                    2b:b8:84:3d:8c:4e:91:18:e7:97:9a:ab:da:c0:17:
                    f9:ed:b0:e4:0a:df:9d:de:45:6a:83:8f:83:71:61:
                    43:2f:bf:a9:54:bd:66:ec:cd:e6:37:5f:60:b0:b4:
                    3f:91:0a:f9:ac:48:44:93:84:40:7a:9a:2b:ab:f7:
                    a9:ad:9b:3b:85:af:99:a1:d6:2f:28:d3:9c:c5:5c:
                    52:ed:92:2d:99:87:d0:b1:c5:23:15:3f:4b:e9:8c:
                    81:46:ed:24:5e:45:2b:a0:d7:ae:f5:89:fb:b9:e3:
                    17:bd:49:b7:c4:7c:37:a5:e1:cb:32:3f:f2:55:3f:
                    9c:c9:f9:f5:10:88:c3:63:0a:85:af:f3:93:8c:e2:
                    68:1b:99:2a:eb:2e:56:fa:18:ac:81:41:2b:9a:d7:
                    88:89:34:0d:ed:25:3a:1b:c0:19:cc:7c:7a:06:78:
                    22:e0:fd:a0:43:19:0d:82:fa:26:85:03:66:6f:a7:
                    20:fe:c3:8d:3b:3b:ba:35:f5:94:12:01:ea:f3:f6:
                    9d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F2:F4:8D:0A:57:0D:2C:7D:D8:45:ED:00:E2:0F:78:D3:04:94:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbceaadb-461d-391d-b4f6-6657094c5e03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.64.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:70:fd:2a:5c:66:b4:43:df:b7:c4:65:76:e5:6d:46:10:42:
         52:1b:97:d9:43:04:e6:f2:64:b9:b7:63:96:5a:e0:a6:74:52:
         cc:57:ab:df:0d:41:f6:d5:80:97:18:1b:4b:cb:f0:ea:cb:54:
         6b:dc:f3:6d:10:df:e4:af:89:2c:d2:f6:e1:16:27:58:1d:db:
         0c:4c:ae:87:15:2d:c3:1e:3b:a3:d5:ea:9f:59:1e:8f:6f:a8:
         2d:33:a2:8d:c3:3e:2f:81:6a:52:b7:65:03:cb:31:31:91:46:
         3b:e0:bd:66:0c:44:34:e7:a6:03:0c:b0:29:4c:f5:f3:dd:4d:
         45:07:19:18:4e:94:0d:fa:1b:3a:af:b7:b8:ef:7c:1a:32:f9:
         09:10:c3:04:5b:ba:93:8d:36:ea:80:11:c7:f6:fa:6e:4f:75:
         84:9d:61:b9:01:a8:57:6e:32:d7:90:9a:b8:cf:38:44:5d:33:
         16:2c:ad:cd:3d:cf:64:b5:af:85:65:76:83:83:f3:ea:ca:f9:
         2e:67:14:97:45:94:b7:41:65:32:9d:5f:36:d3:87:d0:f2:a8:
         e6:11:98:02:3e:fd:d1:f1:92:90:39:06:57:1c:bf:7a:be:12:
         e5:92:d2:aa:54:20:8d:94:14:03:e3:15:f5:34:2c:d7:ea:04:
         36:10:e7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:55:00 2025 by rpki-client