Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca6b4bd7-edbb-39ef-bc6b-7d8499e79099.roa
File:                     ca6b4bd7-edbb-39ef-bc6b-7d8499e79099.roa (raw, json)
Hash identifier:          MTA7x+h4D4FYMoCYaqYttT+RQP/pFp2augn89vXxv50=
Subject key identifier:   8F:C8:38:1A:90:78:A7:FC:55:DA:A0:EC:4F:11:81:5A:47:D8:36:79
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A03B9A0CE6636C6985B0A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca6b4bd7-edbb-39ef-bc6b-7d8499e79099.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        104.196.16.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:03:b9:a0:ce:66:36:c6:98:5b:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=7a694486-add6-4e6d-acc1-9f8f4548692d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:db:6f:b6:28:e0:b0:c6:94:e1:db:1e:a3:13:
                    db:18:da:30:ed:46:7a:e7:ee:82:70:85:a3:18:71:
                    72:02:81:18:ab:40:8d:46:8a:10:2a:c4:de:9e:81:
                    f3:0e:e5:97:ec:61:05:87:b3:45:14:d9:ba:9d:64:
                    02:8e:bb:7b:b0:da:03:a5:8f:02:07:fd:2c:fc:d5:
                    40:cc:49:5f:79:2d:3d:39:eb:b1:15:dc:d0:06:06:
                    3a:37:d2:e2:66:a7:20:3d:b6:90:7c:dd:79:15:ff:
                    8b:f5:82:63:16:78:15:6f:2a:f0:f7:19:a4:2f:83:
                    a3:92:e2:6e:21:84:8e:8c:79:a7:17:12:79:36:1a:
                    b0:cd:4c:86:11:17:dd:4e:cc:3a:5e:ea:15:5f:90:
                    6e:25:16:76:27:4c:b0:f9:d8:e2:d6:de:5b:14:20:
                    09:fb:d8:29:64:6a:fe:cf:ad:e0:ac:20:a0:7a:62:
                    d2:35:22:ab:3f:9e:bf:4c:cf:28:ff:9a:c8:86:1e:
                    a2:d6:7f:41:02:e3:ab:e0:14:8b:b6:cc:c1:17:69:
                    a7:1a:70:aa:d1:af:b3:27:31:ca:2d:f5:f6:52:29:
                    63:d3:db:be:2b:16:80:cf:12:db:5f:1b:00:7c:4e:
                    3f:16:db:9a:14:3c:93:64:5e:33:0e:ad:4d:28:54:
                    85:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C8:38:1A:90:78:A7:FC:55:DA:A0:EC:4F:11:81:5A:47:D8:36:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca6b4bd7-edbb-39ef-bc6b-7d8499e79099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.196.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:9a:d9:5b:47:c8:71:9c:b1:db:40:6e:70:19:64:9b:45:36:
         2a:d8:ef:b7:08:fb:7c:57:2c:e4:d6:64:44:6f:83:c3:fb:e8:
         53:fa:82:8a:11:01:e5:10:23:d9:45:2b:03:5c:3f:17:ff:68:
         c8:cd:ca:c3:ed:89:91:4f:95:fd:86:88:1d:a1:ec:43:17:01:
         73:30:89:fa:e0:24:f0:88:f7:4d:d3:e7:9c:7e:74:d4:64:5f:
         d1:2f:2c:d2:1c:ce:a0:e9:14:ed:59:24:53:6e:d4:b6:ad:5c:
         53:7f:f2:5e:9e:c0:1d:2c:de:23:87:9f:f8:9d:8c:b9:44:4f:
         aa:01:6d:68:2d:47:a1:f1:68:a7:8a:ae:66:a0:8b:d0:e7:01:
         97:27:c2:b7:93:c8:db:06:2b:d9:4c:fc:a9:e9:22:8f:0a:08:
         ef:2c:d4:1b:8c:36:ec:52:77:0b:f4:1b:43:8f:d3:66:a3:ad:
         9c:dc:98:a6:ad:8e:36:f9:03:c2:c3:2f:67:8f:d9:b8:c9:44:
         48:e5:46:e1:b6:d1:f4:38:37:2c:fe:8e:ad:61:0a:6b:5b:ad:
         c2:13:2d:3b:b3:cf:9e:5a:f7:e2:1b:fc:5c:c7:17:56:04:b0:
         cf:10:7e:c5:43:78:3a:30:a8:ca:59:ee:07:ed:92:d9:36:ab:
         37:93:ce:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:38:00 2025 by rpki-client