Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c26b1189-f68e-3da9-8463-998d5e40f716.roa
File:                     c26b1189-f68e-3da9-8463-998d5e40f716.roa (raw, json)
Hash identifier:          R6m7wUWP+hr4GvFggYrVVfxAKsXiPj8ikLPyEShANyk=
Subject key identifier:   32:03:F8:DD:02:0C:E6:88:53:61:07:BF:5A:3C:07:3C:A3:21:8A:29
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7AD66CF07D1B4315CD96950
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c26b1189-f68e-3da9-8463-998d5e40f716.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.196.32.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ad:66:cf:07:d1:b4:31:5c:d9:69:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=5504910c-ee3e-4cb9-ac8c-115c33b2009f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4a:ba:c2:66:cd:da:d1:0c:b4:79:8d:f9:21:
                    a2:58:83:14:a7:c9:bf:37:f0:c6:30:7b:91:88:9f:
                    cd:57:88:1e:5d:78:17:15:a8:6b:e2:5c:e5:6c:22:
                    43:06:cf:ba:27:cc:39:f5:32:37:fd:e7:36:1f:46:
                    e1:64:f7:06:74:40:8f:04:e1:03:42:09:d1:a9:de:
                    16:64:d0:6a:55:00:ed:a3:02:5a:28:7b:6b:c2:c4:
                    7a:20:8e:cf:f6:ad:25:79:b7:01:fe:7f:2e:31:10:
                    29:c8:eb:30:ec:ef:43:6d:73:32:38:f9:c7:f4:5f:
                    da:4e:05:a6:e0:a2:b0:41:57:fb:c4:3d:e3:54:6b:
                    f7:3c:96:a1:b6:d2:46:fe:85:01:16:6a:78:da:2c:
                    32:52:1f:87:01:fe:11:81:ca:22:dc:4e:25:ed:3a:
                    c6:1a:ff:22:05:c1:23:62:a6:c3:18:af:29:77:e8:
                    0a:18:c0:b6:a2:f0:e0:f7:75:7f:af:17:48:79:c7:
                    03:85:2e:3b:04:fa:db:56:95:88:7b:9d:78:94:c9:
                    3b:ec:73:58:fb:aa:1d:42:53:3a:1a:9a:f8:6c:4d:
                    6a:7a:2e:c2:dc:62:a8:a6:32:d2:5e:cb:e3:cf:2c:
                    6b:b9:e0:0b:4f:39:a2:37:0f:39:3c:da:9e:72:12:
                    3a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:03:F8:DD:02:0C:E6:88:53:61:07:BF:5A:3C:07:3C:A3:21:8A:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c26b1189-f68e-3da9-8463-998d5e40f716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.196.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:7e:7e:ab:88:56:2c:29:44:01:54:f7:2b:31:08:0e:90:68:
         f4:8c:65:c6:6b:a1:ad:f9:e8:83:57:8d:82:04:5c:34:e7:7e:
         41:63:cf:74:e0:b4:64:33:12:cf:cf:c7:af:38:93:41:04:ae:
         1b:db:5f:0d:59:f3:e2:61:76:10:d1:b3:4e:58:f8:6a:50:32:
         98:fa:f1:8b:cc:24:a6:49:96:5b:2b:77:b7:68:bd:a2:47:84:
         7e:15:61:10:44:bd:97:a1:24:83:91:81:37:7e:5e:21:8d:ab:
         42:3a:04:48:10:d8:cf:d8:70:93:69:5a:b0:dd:37:d4:fb:2e:
         8d:ff:c5:87:81:7a:10:ec:1f:f7:29:70:f2:c3:27:e8:e8:e1:
         3c:1d:d3:89:47:c0:ff:61:33:9d:4c:21:e5:58:6b:c8:e8:76:
         76:84:44:98:0c:a5:31:67:af:a7:71:db:48:8d:fd:a0:95:35:
         d5:38:5d:4c:8a:4d:60:e3:94:c3:86:33:5e:09:ec:cf:2d:ec:
         55:8d:64:75:67:a8:db:e9:75:30:a9:7b:13:0c:f8:c0:7a:fa:
         e0:6a:67:fa:fd:37:d4:16:a6:b1:d0:9a:d5:7e:ac:6e:fa:e0:
         77:06:87:18:e5:f1:e8:30:6c:58:14:d4:96:be:70:4b:ce:63:
         31:66:49:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:44:48 2025 by rpki-client