Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cda19b09-5e0f-3644-8c36-3233b28fbff9.roa
File:                     cda19b09-5e0f-3644-8c36-3233b28fbff9.roa (raw, json)
Hash identifier:          4BShsOZs/aGDjhcIKXcG8KRP0UVROMvxwmw8JUGWbls=
Subject key identifier:   6E:88:A7:CE:72:20:E0:E1:AF:52:B8:A0:90:3F:DA:60:84:27:49:11
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7A184E41EC2C77FDC44ABC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cda19b09-5e0f-3644-8c36-3233b28fbff9.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        34.80.0.0/14 maxlen: 14
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a1:84:e4:1e:c2:c7:7f:dc:44:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=81d7bc3a-cfce-4e29-ae7e-b6eb7f460898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:de:bd:2e:60:99:78:f7:c0:91:67:ce:67:23:
                    f4:0a:d2:da:72:0a:e1:6c:9b:a5:5f:5c:2b:02:a4:
                    ba:3b:be:ab:a7:f8:19:51:88:e7:f8:b0:2d:a6:62:
                    89:cb:90:6e:3a:0e:86:d0:0c:e4:a6:7d:2a:77:e4:
                    a7:17:05:d9:01:d1:79:49:7f:6e:6b:ef:f4:6a:91:
                    bc:64:fb:15:e1:66:80:82:df:11:cf:da:df:da:eb:
                    68:76:ad:ff:d8:ec:5d:90:87:5c:16:f6:93:5d:51:
                    13:ea:96:49:e8:1d:0d:cb:e9:1b:a3:49:59:57:4c:
                    d2:19:c7:1c:57:90:88:3c:5d:8e:ab:43:a6:47:98:
                    cc:bd:87:1f:fe:94:c3:05:33:0d:24:97:44:fa:a1:
                    f9:3e:9c:1b:b5:ee:98:9a:91:26:8a:9a:7a:32:90:
                    6e:e8:dd:30:5a:17:cf:e8:42:78:ad:d1:8d:37:da:
                    56:7d:de:e2:36:ec:68:84:e6:73:22:2b:48:12:b6:
                    51:5d:0c:8a:5c:50:18:26:b0:4d:11:32:c0:1d:9e:
                    2e:f3:69:76:6e:67:fe:9a:ac:c9:97:5b:89:77:e1:
                    a2:76:3d:0f:10:f3:03:be:b0:bd:70:3a:80:80:a5:
                    8c:72:43:18:44:fc:f1:c4:02:c5:3f:b5:40:e6:88:
                    2a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:88:A7:CE:72:20:E0:E1:AF:52:B8:A0:90:3F:DA:60:84:27:49:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cda19b09-5e0f-3644-8c36-3233b28fbff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.80.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:be:53:7f:7f:a8:df:64:1a:5a:5d:d8:4a:33:b4:19:d3:1c:
         82:f7:69:df:d5:7a:a1:5b:8c:de:bd:4d:04:9e:4c:a7:7d:92:
         4c:b1:41:eb:e2:23:91:71:63:9e:34:42:22:8d:da:b8:ec:88:
         7d:40:69:31:49:ca:75:fb:d6:6f:2a:d4:d3:51:9a:36:a5:f6:
         a7:64:fb:43:aa:ad:b9:55:95:a9:eb:4a:59:f3:44:0e:2a:96:
         7c:ed:5d:1b:36:95:d4:43:a2:b8:25:a1:f0:4f:1d:0e:29:c9:
         a5:ab:c5:6c:c2:af:ab:b4:dd:43:fb:c3:92:a2:a3:40:de:ba:
         78:1c:22:47:67:11:4f:2c:f9:40:76:4d:2d:75:0b:5e:7c:26:
         b7:4e:67:8c:61:ad:13:e8:31:d7:fc:4e:0b:63:d2:d2:10:f8:
         fa:39:5f:26:b5:19:36:a3:f5:bd:78:f9:ba:c2:1a:de:64:ce:
         d3:b8:18:56:ba:29:94:8b:94:26:e8:36:3d:87:79:b8:a5:30:
         cb:d6:ee:d9:6e:db:81:11:f8:fe:b1:d1:77:7c:61:0c:52:a5:
         6d:70:46:5d:b8:ca:d7:61:c8:d8:8f:58:06:c2:79:96:3b:cb:
         e9:33:1e:84:b3:e9:74:a0:51:2b:71:41:58:b4:f3:04:1a:4c:
         34:2d:e7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:17:57 2025 by rpki-client