Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fbba2008-bb86-3e82-84fd-f9fabdbb3919.roa
File:                     fbba2008-bb86-3e82-84fd-f9fabdbb3919.roa (raw, json)
Hash identifier:          GldFNncIx9tc73IVxQ3JZZuc4H+cJksgKzXH4irW92M=
Subject key identifier:   BD:FD:56:8E:E6:C7:B1:91:B4:15:1F:AA:0B:E5:28:77:B7:24:71:6A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7A60B111E2D1860099E5700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fbba2008-bb86-3e82-84fd-f9fabdbb3919.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.141.240.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a6:0b:11:1e:2d:18:60:09:9e:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=0870e8cf-5d98-465e-ba90-75b9ddb36892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:85:17:53:4c:51:26:42:ff:e8:63:cc:a4:
                    ee:ff:c6:ab:f2:d9:d8:84:15:e2:ef:95:fe:39:63:
                    ac:aa:8c:4d:be:98:66:95:d7:18:bc:8e:6b:a5:13:
                    5c:71:39:08:6c:44:12:c8:0c:f6:68:7b:19:7c:f6:
                    2f:85:40:37:8b:ad:e8:c1:3b:e2:59:3a:4b:27:94:
                    07:e6:59:73:50:7a:ac:18:db:5f:db:5a:aa:77:cb:
                    dd:1d:31:37:f6:ea:eb:13:63:6e:a2:97:62:0d:9b:
                    dd:58:eb:33:c4:09:f5:4e:5b:38:58:72:b5:02:d5:
                    16:3f:7d:c3:ee:e9:6f:ca:41:fa:c0:a2:65:89:28:
                    ae:70:e1:1b:87:16:8e:26:b3:22:2d:cc:9c:48:89:
                    ed:12:3d:22:ef:1c:33:4a:bf:2c:c9:05:75:b0:8c:
                    15:c1:cb:9a:32:7d:5c:57:83:58:0c:41:02:8f:61:
                    e1:7d:17:e5:82:15:c4:d3:f3:17:d3:b9:0b:6f:55:
                    dc:3d:80:79:e4:43:1d:1e:9a:a0:b9:7a:41:d9:33:
                    b0:73:e4:85:c2:3b:3f:57:1d:ed:d2:ee:07:97:59:
                    1d:1b:1b:87:55:20:75:c8:33:4a:be:26:3b:cd:6c:
                    56:b3:16:13:87:f6:10:77:18:af:22:53:c2:63:c5:
                    a2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FD:56:8E:E6:C7:B1:91:B4:15:1F:AA:0B:E5:28:77:B7:24:71:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fbba2008-bb86-3e82-84fd-f9fabdbb3919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.141.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:50:b9:31:98:87:86:b9:08:d2:cc:c1:79:9e:de:b1:d0:81:
         96:8c:15:64:34:f8:9c:44:c9:52:b3:45:ff:46:93:9b:84:f0:
         7e:d7:af:f5:3a:79:66:74:bb:ba:4f:ad:79:99:b6:ee:40:de:
         4c:e0:fa:5b:c9:ee:50:7e:bb:01:dd:ce:f8:da:69:d2:1d:a8:
         10:8d:44:2a:86:79:65:13:b6:64:41:31:c5:f8:fb:1f:e6:58:
         42:85:20:b0:21:ba:bd:2e:65:ba:02:68:70:86:e4:df:46:5d:
         9f:f2:37:a7:ac:5a:34:d4:76:43:83:71:80:ad:8c:8d:57:2b:
         23:fc:d9:06:5f:d2:f3:33:37:f1:2b:4a:0b:2f:64:e9:31:85:
         30:e9:8d:c4:f7:a4:17:66:67:a6:fc:1a:18:9e:51:b7:3d:27:
         cd:a4:17:3f:f0:a4:39:0d:76:ad:68:df:54:93:c4:c8:13:4e:
         23:c2:89:cf:e6:85:57:f6:c9:3c:f2:cb:38:91:49:62:1e:fa:
         47:26:79:11:ea:2a:5d:1b:3b:60:02:65:c7:3f:67:f7:65:11:
         0d:3d:bb:30:5a:19:7f:ad:d3:6c:21:5c:65:09:9c:9c:98:f2:
         ee:06:73:82:7b:a9:c9:f4:30:05:5a:b5:c6:3b:4e:25:26:ce:
         b0:85:a0:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnpgsRHi0YYAmeVwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MDg3MGU4Y2YtNWQ5OC00NjVlLWJhOTAtNzViOWRkYjM2ODkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK6FF1NMUSZC/+hjzKTu/8ar8tnYhBXi75X+
OWOsqoxNvphmldcYvI5rpRNccTkIbEQSyAz2aHsZfPYvhUA3i63owTviWTpLJ5QH
5llzUHqsGNtf21qqd8vdHTE39urrE2NuopdiDZvdWOszxAn1Tls4WHK1AtUWP33D
7ulvykH6wKJliSiucOEbhxaOJrMiLcycSIntEj0i7xwzSr8syQV1sIwVwcuaMn1c
V4NYDEECj2HhfRflghXE0/MX07kLb1XcPYB55EMdHpqguXpB2TOwc+SFwjs/Vx3t
0u4Hl1kdGxuHVSB1yDNKviY7zWxWsxYTh/YQdxivIlPCY8WiMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL39Vo7mx7GRtBUfqgvlKHe3JHFqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmJiYTIwMDgtYmI4Ni0z
ZTgyLTg0ZmQtZjlmYWJkYmIzOTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIo3wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJdQuTGYh4a5CNLMwXme3rHQgZaMFWQ0+JxEyVKzRf9Gk5uE8H7Xr/U6
eWZ0u7pPrXmZtu5A3kzg+lvJ7lB+uwHdzvjaadIdqBCNRCqGeWUTtmRBMcX4+x/m
WEKFILAhur0uZboCaHCG5N9GXZ/yN6esWjTUdkODcYCtjI1XKyP82QZf0vMzN/Er
SgsvZOkxhTDpjcT3pBdmZ6b8GhieUbc9J82kFz/wpDkNdq1o31STxMgTTiPCic/m
hVf2yTzyyziRSWIe+kcmeRHqKl0bO2ACZcc/Z/dlEQ09uzBaGX+t02whXGUJnJyY
8u4Gc4J7qcn0MAVatcY7TiUmzrCFoG0=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org