Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72e97c69-8c6a-3514-9074-a7d99c0dcaee.roa
File:                     72e97c69-8c6a-3514-9074-a7d99c0dcaee.roa (raw, json)
Hash identifier:          uStSOjN3ZONlK5kYUT0AxWzdOO8DaIGh4n9owwsNeHE=
Subject key identifier:   05:D6:73:45:8F:C1:AF:6F:1C:8B:8E:CB:0A:10:DF:38:0E:E3:C7:DE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A23728E6E0CD29E6DCD5320
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72e97c69-8c6a-3514-9074-a7d99c0dcaee.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.131.80.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:23:72:8e:6e:0c:d2:9e:6d:cd:53:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=57c9f29f-ac01-4d32-9c79-f8c7db300b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a8:29:73:07:9f:6b:11:fb:2a:3c:a7:b8:14:
                    38:4b:c0:a6:cf:ac:5e:93:fa:3f:41:7d:b8:b6:7c:
                    08:28:b0:cc:64:f0:81:36:4a:9e:78:19:01:15:b1:
                    92:f4:c1:4e:c0:fd:b3:46:8f:f2:f6:12:d4:85:36:
                    ea:59:86:fa:3f:66:51:c1:fd:a1:45:8c:f8:89:a4:
                    0d:53:fb:ab:24:3b:b0:07:ab:f2:ab:da:35:ba:d4:
                    2d:1b:da:96:53:08:e7:48:d5:b1:ed:53:f1:eb:64:
                    16:99:07:ed:5d:c9:c5:24:f4:53:d5:3d:da:a8:55:
                    c0:43:59:70:68:84:f8:2f:a2:a4:42:5c:1e:c2:13:
                    a5:d6:ac:1a:d1:6f:53:2f:ae:92:0f:88:fe:98:76:
                    2b:85:4b:81:1f:57:29:44:fc:07:7e:a4:22:1d:0a:
                    59:77:2e:48:c4:30:24:30:b2:45:8f:1d:54:ce:28:
                    74:48:d7:db:ba:99:e8:69:4c:b7:10:d6:81:53:99:
                    23:ff:c0:08:d2:85:68:07:3d:1b:5f:fa:61:b5:7e:
                    10:a8:c2:f5:5d:1e:99:4f:f0:43:d7:e6:3d:3e:2c:
                    65:98:4e:e9:de:48:71:b7:58:55:09:80:4a:2b:9a:
                    68:46:32:78:f6:5e:aa:17:ce:78:81:6d:5e:01:1e:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D6:73:45:8F:C1:AF:6F:1C:8B:8E:CB:0A:10:DF:38:0E:E3:C7:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72e97c69-8c6a-3514-9074-a7d99c0dcaee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.131.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:88:d4:08:5b:92:11:5f:74:cd:cf:e2:66:01:56:5d:2f:35:
         6b:f6:a1:a5:97:83:f6:78:dd:07:2f:23:84:76:d0:16:c2:0a:
         99:b7:54:f4:6c:c6:4e:cb:2e:b2:b3:2a:18:05:71:9e:44:82:
         6f:a0:95:68:4b:82:a2:0d:b0:7e:a1:31:e6:1e:83:3b:ce:d4:
         f6:69:a1:58:38:70:4e:ae:d7:5a:76:61:6e:70:4f:dd:5c:51:
         af:a1:1d:e6:68:ae:89:54:ef:d8:24:26:c0:6e:eb:6e:f9:ad:
         d2:ed:c0:18:36:40:9f:b3:dc:e7:cd:fe:e1:ef:95:5c:b7:94:
         d2:d2:b8:01:8c:e9:e6:e3:f6:18:76:f4:c9:0c:29:5e:81:32:
         f5:ab:8e:d7:43:26:c8:89:c4:3b:0f:d5:7a:3e:83:ab:99:11:
         43:02:9d:e1:ab:36:cb:81:e4:20:88:0a:e9:07:07:f7:12:98:
         3a:61:4d:00:cc:3c:f0:c8:a4:ec:2b:55:61:a1:c9:a5:21:c0:
         eb:41:77:9c:66:04:df:3d:98:eb:fe:a7:f7:d2:71:d9:ac:90:
         03:c0:67:5c:8f:1f:c9:90:4f:cb:61:10:c0:52:cf:56:59:ad:
         75:b2:58:10:d4:5d:92:c0:3b:f5:10:cb:d1:59:5e:1c:29:2f:
         5d:d9:59:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKI3KObgzSnm3NUyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NTdjOWYyOWYtYWMwMS00ZDMyLTljNzktZjhjN2RiMzAwYjhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qgpcwefaxH7KjynuBQ4S8Cmz6xek/o/QX24
tnwIKLDMZPCBNkqeeBkBFbGS9MFOwP2zRo/y9hLUhTbqWYb6P2ZRwf2hRYz4iaQN
U/urJDuwB6vyq9o1utQtG9qWUwjnSNWx7VPx62QWmQftXcnFJPRT1T3aqFXAQ1lw
aIT4L6KkQlwewhOl1qwa0W9TL66SD4j+mHYrhUuBH1cpRPwHfqQiHQpZdy5IxDAk
MLJFjx1Uzih0SNfbupnoaUy3ENaBU5kj/8AI0oVoBz0bX/phtX4QqML1XR6ZT/BD
1+Y9PixlmE7p3khxt1hVCYBKK5poRjJ49l6qF854gW1eAR5DwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAXWc0WPwa9vHIuOywoQ3zgO48feMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzJlOTdjNjktOGM2YS0z
NTE0LTkwNzQtYTdkOTljMGRjYWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoNQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+I1AhbkhFfdM3P4mYBVl0vNWv2oaWXg/Z43QcvI4R20BbCCpm3VPRs
xk7LLrKzKhgFcZ5Egm+glWhLgqINsH6hMeYegzvO1PZpoVg4cE6u11p2YW5wT91c
Ua+hHeZorolU79gkJsBu6275rdLtwBg2QJ+z3OfN/uHvlVy3lNLSuAGM6ebj9hh2
9MkMKV6BMvWrjtdDJsiJxDsP1Xo+g6uZEUMCneGrNsuB5CCICukHB/cSmDphTQDM
PPDIpOwrVWGhyaUhwOtBd5xmBN89mOv+p/fScdmskAPAZ1yPH8mQT8thEMBSz1ZZ
rXWyWBDUXZLAO/UQy9FZXhwpL13ZWYE=
-----END CERTIFICATE-----
Generated at Sat May 10 14:37:58 2025 by rpki-client