Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffb790db-d523-3364-b68b-998597bb5b93.roa
File:                     ffb790db-d523-3364-b68b-998597bb5b93.roa (raw, json)
Hash identifier:          mXfyME48aaS8zWA3FhFW0GmzuMKBwNGAFkIWNEtPBw0=
Subject key identifier:   2D:7A:DA:C8:5E:03:98:1E:A0:16:66:28:57:C8:67:11:C2:4F:66:C1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7B2E320C960C7BCF6ABDF80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffb790db-d523-3364-b68b-998597bb5b93.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        34.98.144.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b2:e3:20:c9:60:c7:bc:f6:ab:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=60968da2-52a9-4486-ba67-52d6fc3c5e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:41:1f:96:17:db:bb:bd:4c:8c:de:f3:9e:49:
                    37:20:e7:12:cb:2c:71:cc:72:0c:b3:d4:c2:82:8f:
                    27:72:75:dc:36:19:43:38:91:e5:16:ea:68:0e:13:
                    6a:be:fe:74:78:2d:88:6e:ee:bb:5f:c9:a8:3a:a4:
                    68:23:55:7d:7d:53:97:1a:19:13:dc:13:b8:23:70:
                    0b:1d:fe:72:c7:bb:a8:20:b5:0d:0c:9a:95:f6:fc:
                    0e:54:ed:4d:44:46:3e:33:89:51:08:3c:b2:f2:f8:
                    8b:18:98:5b:72:90:75:27:c6:0c:fd:89:f6:8a:58:
                    db:d9:e5:8c:27:cf:97:dd:25:17:b1:6d:9b:68:0d:
                    f8:89:e4:7a:dd:56:cb:46:4f:62:02:6d:df:90:8d:
                    3c:5b:b9:3f:c6:4f:a7:84:38:b1:d2:a6:d9:3c:59:
                    c5:30:87:7a:de:bf:43:55:ac:9a:d3:72:9c:0a:31:
                    43:27:e4:b6:03:83:64:f6:1e:ea:63:a6:50:08:05:
                    d3:66:4c:4b:32:dc:35:0d:98:65:28:fc:aa:a4:8a:
                    1b:7d:83:b1:06:bf:f0:d9:99:a1:4b:51:04:21:71:
                    66:4a:27:2c:39:f6:81:4e:7b:18:e3:44:66:c7:9a:
                    82:62:3a:3d:50:b2:8e:f2:e4:bf:58:28:03:40:40:
                    8e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7A:DA:C8:5E:03:98:1E:A0:16:66:28:57:C8:67:11:C2:4F:66:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffb790db-d523-3364-b68b-998597bb5b93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.98.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:36:e1:3c:bc:79:35:87:35:95:58:cc:0a:e1:89:3f:3a:f6:
         cd:ea:cc:60:af:7b:9a:9c:cf:b0:9e:c7:f5:7a:0b:84:91:12:
         71:5f:5b:b4:52:75:a6:92:07:03:92:65:33:7e:19:d6:e2:61:
         4a:0c:14:9f:55:3c:a0:42:1f:b7:ab:eb:6a:11:b5:17:58:6c:
         14:7e:c4:df:be:57:d3:61:38:44:90:ed:ea:30:04:0d:3c:b3:
         a8:45:90:e6:df:b7:b7:a2:f0:34:b9:ce:60:7b:ee:85:ec:77:
         71:0e:95:59:5e:1a:b7:e7:86:e7:97:10:9f:ca:94:73:04:25:
         39:6d:a1:49:c1:8a:bc:79:53:2c:e9:d7:56:e9:14:8a:a9:df:
         18:6b:7f:0b:f4:65:cf:8e:04:ee:bc:84:7a:cb:bf:82:f8:8c:
         f5:b3:6c:2b:ba:5b:b5:e9:b0:0e:06:e5:8e:bc:1c:6a:1c:7d:
         01:c8:cd:f4:f7:42:fe:d5:00:d7:71:b7:ee:17:c6:05:e7:67:
         3f:10:0b:42:26:f5:78:35:b7:42:e3:5d:6e:ba:98:09:3b:85:
         8a:ea:97:dc:5c:22:a0:c8:f5:43:e3:bf:85:3f:4f:21:7a:b0:
         5e:cc:5a:fa:91:ed:b2:bb:c8:fb:bc:25:ec:44:cc:71:44:c9:
         59:87:bb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:28:26 2025 by rpki-client