Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c34afcc2-fdae-3007-baa3-729d949d8079.roa
File:                     c34afcc2-fdae-3007-baa3-729d949d8079.roa (raw, json)
Hash identifier:          IXRccQZvU8JLEQ8jLXa3l5/QLktVezsJlcw72mvcGK4=
Subject key identifier:   3E:D1:6E:98:51:D4:DC:9C:CD:72:D0:A9:49:14:E7:05:C3:6A:36:F1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA79FBA8D0B7C7D6A09627660
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c34afcc2-fdae-3007-baa3-729d949d8079.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.155.128.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:9f:ba:8d:0b:7c:7d:6a:09:62:76:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=7117a344-f613-4927-849b-bb5478ee5e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:97:eb:53:59:71:d0:97:dd:78:0e:e8:6a:b4:
                    c7:81:57:72:47:ae:3c:41:7b:95:ce:84:ff:ff:ff:
                    80:db:42:6c:77:f5:e4:c7:f5:81:df:0e:18:a7:e5:
                    64:9a:3f:f1:f4:a6:80:58:8e:10:23:fc:3d:54:21:
                    68:a3:40:59:42:13:8e:10:c5:3a:92:84:20:64:b3:
                    d7:dc:c0:2d:fa:55:32:36:5d:db:28:ac:55:5d:95:
                    e0:9f:ee:4b:58:af:74:dd:28:0c:de:30:79:d9:bd:
                    ef:fa:3c:62:11:60:5c:5f:d2:f7:c8:b4:66:e6:92:
                    90:78:8f:bc:7e:45:44:d5:a4:5e:15:8b:d3:3a:35:
                    e9:7f:f1:8a:c8:a8:5d:4f:77:88:26:d2:b8:c7:2f:
                    7c:34:23:2d:c9:ac:db:18:6f:c9:34:17:d6:82:55:
                    59:85:06:cf:92:8a:0f:21:cf:e2:1f:7b:f7:df:5c:
                    87:75:41:b8:c2:ed:37:b3:26:6d:6a:2d:eb:e2:dd:
                    3f:54:72:a2:75:52:6c:13:cd:ee:d8:01:01:64:fe:
                    d0:42:92:47:5b:00:41:76:22:0e:f1:c0:c9:8a:3d:
                    f3:a4:96:56:5d:e7:74:38:b2:18:b3:84:58:95:62:
                    d8:84:3e:d7:37:ce:b1:04:28:6a:ea:60:7f:22:d8:
                    b7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D1:6E:98:51:D4:DC:9C:CD:72:D0:A9:49:14:E7:05:C3:6A:36:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c34afcc2-fdae-3007-baa3-729d949d8079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.155.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:d4:2f:ab:ae:04:f4:83:c5:2a:71:db:93:e8:6d:54:54:c6:
         50:50:15:96:29:4e:3e:41:8e:45:85:a5:e5:f9:28:e4:ef:de:
         91:04:e1:c3:e9:d7:cd:21:d2:d0:ea:65:23:21:0f:74:93:7c:
         6f:dc:3b:97:6b:50:63:42:32:fb:19:de:cc:1c:d3:57:69:a2:
         9d:b1:a6:e6:7a:90:f9:0f:98:ec:c3:ce:8a:4d:d5:02:b7:7c:
         13:81:cb:1c:e3:ca:59:ea:dc:6f:d8:69:19:e8:78:e0:ad:df:
         c2:87:62:19:76:6f:a3:da:a8:4a:06:59:6a:4b:0d:41:73:b8:
         aa:fb:14:fd:43:a6:30:d1:57:92:d6:29:92:59:a9:d9:ec:87:
         b4:3d:51:cc:10:f6:b5:ef:11:37:1d:73:72:2d:9f:e1:59:3d:
         3d:a8:0b:77:84:ed:6c:8b:ff:c9:92:a3:e1:33:4b:26:2e:c2:
         c7:e6:3d:c2:bd:ae:fd:31:f7:26:36:8d:1b:8d:5e:67:03:22:
         f0:65:e9:55:cc:db:f8:2f:cb:08:4d:00:8b:78:6e:2a:6d:e9:
         11:e0:75:aa:3d:f1:5b:87:55:6a:43:a6:13:c7:6f:e8:4c:0f:
         a1:aa:74:69:9f:0d:f5:eb:f9:cb:7c:10:9c:08:de:5a:dd:07:
         ca:aa:f8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:56:23 2025 by rpki-client