Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf7c4ead-665c-3a8c-9625-329442119a99.roa
File:                     bf7c4ead-665c-3a8c-9625-329442119a99.roa (raw, json)
Hash identifier:          IYqutq21J+vX8uQS+zpfA5vBOJ/CHRX+GGwxfE1B1oU=
Subject key identifier:   3C:95:C5:86:2A:95:4B:CC:24:98:3A:07:77:2A:26:7E:5D:2D:47:83
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7AFC03B5A2BA08500686900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf7c4ead-665c-3a8c-9625-329442119a99.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        104.199.144.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:af:c0:3b:5a:2b:a0:85:00:68:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=50f2c6e0-5163-48de-8333-8c610523c3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4e:dd:79:24:09:53:2a:d1:25:8f:84:fb:01:
                    1e:20:4a:45:c5:c3:07:63:7b:cf:39:89:c9:56:aa:
                    d9:aa:2b:19:0f:ce:11:f0:b6:2b:63:05:b5:3c:50:
                    70:51:43:11:28:28:73:95:05:35:cb:9a:25:32:66:
                    d2:ec:a1:f5:c7:2d:66:0d:6b:7d:22:6e:8c:98:5d:
                    16:ac:c2:0e:ce:93:60:5d:06:c8:d5:f9:9f:99:6d:
                    2e:01:91:21:ef:76:f1:3f:b2:2f:9f:d9:66:32:8c:
                    c7:86:83:41:8a:51:67:8f:9b:2d:6d:f3:e9:9d:29:
                    21:79:1f:9d:44:a4:96:07:eb:d9:c2:96:80:e4:3b:
                    28:38:a5:e1:bf:b4:b7:8c:07:4d:ee:d4:f3:b6:8e:
                    fb:51:c3:76:b0:c1:d9:95:33:3c:36:b7:e9:ff:3a:
                    2a:9d:f9:8d:c6:fd:d7:5d:94:b8:ef:8e:a9:e0:7c:
                    6a:74:aa:62:7e:ba:f4:38:ff:8c:91:aa:5e:05:55:
                    fe:36:c3:13:f5:91:b8:e7:54:9c:c3:5d:39:e0:b4:
                    2f:41:b5:d8:92:5a:5e:14:cb:45:05:06:83:90:88:
                    c5:a8:81:3f:15:b9:a2:39:a5:a3:99:98:db:c2:d0:
                    54:5c:97:fd:ab:95:2a:12:a6:3a:3b:e4:81:53:ff:
                    1e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:95:C5:86:2A:95:4B:CC:24:98:3A:07:77:2A:26:7E:5D:2D:47:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf7c4ead-665c-3a8c-9625-329442119a99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.199.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:c2:c1:29:56:6a:0c:06:14:96:4f:31:3a:3f:e5:4d:bf:8f:
         3a:64:e1:f1:5a:e7:27:0c:38:23:1f:28:93:2c:97:90:eb:0f:
         40:91:12:84:3c:3b:22:41:2e:f9:de:e5:0f:36:1c:8c:5f:dd:
         24:ce:1d:61:cd:62:b0:fa:66:3b:53:50:ac:73:9e:f8:b3:3b:
         14:5c:30:56:57:89:e6:85:d2:30:12:2e:30:82:de:f4:c6:97:
         1a:73:88:04:dd:f9:5e:31:27:3f:3d:e3:50:96:5c:a7:97:17:
         e3:46:09:df:31:5e:f7:a5:0e:51:43:f4:c2:cc:af:52:19:01:
         4a:76:4c:55:94:fd:fe:c2:46:6c:7a:48:5f:00:e7:4a:d4:97:
         62:0c:e3:f6:28:7d:b2:25:28:20:0a:3b:dd:c0:c6:08:ab:f6:
         3f:6a:4d:ef:37:0a:b3:b3:ff:7c:fa:91:dd:64:1f:d7:d4:81:
         25:bf:7a:4c:ef:e8:f9:4b:14:c6:9f:07:90:e7:4b:c5:18:f9:
         ac:1d:fe:89:27:a6:50:7e:3c:b8:d4:a0:ee:8b:e0:85:9a:a2:
         a6:a3:d3:c8:a5:84:f3:02:b1:c5:05:a6:14:d3:0a:5d:fe:82:
         12:05:4a:1f:5a:c2:ae:71:7f:52:e6:59:4e:1f:45:57:00:df:
         a1:81:e8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:39:21 2025 by rpki-client