Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/780d2f0d-0328-385c-b578-8a89cc3ef0d7.roa
File:                     780d2f0d-0328-385c-b578-8a89cc3ef0d7.roa (raw, json)
Hash identifier:          oF+y3iNdppo9ClemMFI6wiMRJezSSKO2CXj5vleztW8=
Subject key identifier:   42:F0:1B:6A:F1:1E:6B:9B:DE:1E:5D:25:95:45:7E:FF:BB:40:8B:11
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7B0397DB063CA3E5183FA80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/780d2f0d-0328-385c-b578-8a89cc3ef0d7.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.133.16.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b0:39:7d:b0:63:ca:3e:51:83:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=76981694-3b1c-444a-a69a-96a46f00d3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:66:75:04:97:dd:fc:ed:55:f5:9c:09:28:fc:
                    7a:c9:ca:77:24:87:6b:ba:6e:04:41:31:32:e9:53:
                    46:e1:10:2f:1d:46:18:2f:dd:32:dd:b4:03:b9:23:
                    3f:c3:c3:60:33:e2:bb:19:04:4e:b5:e6:e1:61:d2:
                    2a:89:9c:5a:ae:d5:a3:e1:b2:17:a4:ad:c0:82:d0:
                    f1:ca:57:a2:9b:9b:27:28:38:69:1f:2e:9d:e0:32:
                    7a:f1:45:31:46:6a:64:5f:cd:7f:be:f7:3f:8a:3c:
                    9c:0e:99:05:0f:c0:3f:72:59:ba:14:d5:56:f6:2f:
                    24:3b:19:97:8d:63:2b:53:c9:b1:d1:25:0f:e1:49:
                    5c:3f:5a:7e:92:1f:af:e9:9b:f4:73:44:e0:ca:ee:
                    b0:b7:b0:d3:63:dd:8f:e6:4c:67:81:f6:ae:30:d5:
                    92:29:64:1e:70:49:5e:51:24:af:08:2e:c4:21:e1:
                    ad:8b:b1:95:84:4e:7b:58:79:dc:f5:c3:02:85:6d:
                    54:ee:50:36:22:d8:1f:3b:83:5c:45:bc:9a:cf:d0:
                    be:12:cb:8a:ba:59:b2:af:f2:d2:2d:a6:d4:7e:a3:
                    5f:00:52:0d:1b:16:f1:93:39:7a:a4:22:70:23:5d:
                    e2:8d:76:7c:39:76:f4:b6:73:9e:08:f5:8c:51:37:
                    1e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F0:1B:6A:F1:1E:6B:9B:DE:1E:5D:25:95:45:7E:FF:BB:40:8B:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/780d2f0d-0328-385c-b578-8a89cc3ef0d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.133.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:8f:a9:cc:89:aa:8d:2d:66:d9:3c:2f:9c:ae:96:c5:ad:4e:
         7e:21:30:3b:31:4c:7a:c4:19:06:4b:e6:60:82:91:c9:ad:9a:
         42:35:18:fe:e9:78:a7:7c:ad:a5:ea:4c:63:3d:63:fb:d3:64:
         42:34:e9:00:c8:17:49:d4:cb:0d:6c:26:48:b7:28:1d:03:40:
         8f:de:47:d8:85:d2:f8:c7:1a:35:90:5d:02:42:63:22:7c:a4:
         1f:f9:87:c4:97:9a:f9:6d:b8:e9:84:6f:ba:35:3e:ea:42:1d:
         3b:85:47:0b:e2:9e:19:b7:4f:46:a0:bd:e8:16:ef:fc:57:ec:
         de:fc:f4:b6:ae:52:6f:df:a7:4a:6b:64:25:1e:be:7c:d3:c6:
         7b:dc:cd:12:5a:1f:60:55:72:7e:8d:41:a3:2f:3e:77:2f:13:
         6f:9f:6b:3d:56:3b:b6:6c:55:0d:b2:0a:f6:07:b8:5f:3c:7b:
         8f:2d:eb:db:18:30:ed:c4:1c:6e:2b:0c:84:0d:2d:65:19:81:
         fe:ff:cb:d2:28:57:2b:25:e3:00:4d:a2:c0:d0:73:24:08:a6:
         a0:9a:df:e2:24:a0:0e:fb:36:67:22:2c:74:42:1b:56:93:1e:
         ff:af:5c:2e:a2:10:ff:dd:2b:85:06:60:77:fc:9c:8a:f3:30:
         e6:58:e8:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnsDl9sGPKPlGD+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NzY5ODE2OTQtM2IxYy00NDRhLWE2OWEtOTZhNDZmMDBkM2I2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWZ1BJfd/O1V9ZwJKPx6ycp3JIdrum4EQTEy
6VNG4RAvHUYYL90y3bQDuSM/w8NgM+K7GQROtebhYdIqiZxartWj4bIXpK3AgtDx
yleim5snKDhpHy6d4DJ68UUxRmpkX81/vvc/ijycDpkFD8A/clm6FNVW9i8kOxmX
jWMrU8mx0SUP4UlcP1p+kh+v6Zv0c0Tgyu6wt7DTY92P5kxngfauMNWSKWQecEle
USSvCC7EIeGti7GVhE57WHnc9cMChW1U7lA2ItgfO4NcRbyaz9C+EsuKulmyr/LS
LabUfqNfAFINGxbxkzl6pCJwI13ijXZ8OXb0tnOeCPWMUTce5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFELwG2rxHmub3h5dJZVFfv+7QIsRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzgwZDJmMGQtMDMyOC0z
ODVjLWI1NzgtOGE4OWNjM2VmMGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoUQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACSPqcyJqo0tZtk8L5yulsWtTn4hMDsxTHrEGQZL5mCCkcmtmkI1GP7p
eKd8raXqTGM9Y/vTZEI06QDIF0nUyw1sJki3KB0DQI/eR9iF0vjHGjWQXQJCYyJ8
pB/5h8SXmvltuOmEb7o1PupCHTuFRwvinhm3T0agvegW7/xX7N789LauUm/fp0pr
ZCUevnzTxnvczRJaH2BVcn6NQaMvPncvE2+faz1WO7ZsVQ2yCvYHuF88e48t69sY
MO3EHG4rDIQNLWUZgf7/y9IoVysl4wBNosDQcyQIpqCa3+IkoA77NmciLHRCG1aT
Hv+vXC6iEP/dK4UGYHf8nIrzMOZY6C0=
-----END CERTIFICATE-----
Generated at Sat May 10 12:44:26 2025 by rpki-client