Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/560aace9-8a8c-3118-88bc-d6595ac3e298.roa
File:                     560aace9-8a8c-3118-88bc-d6595ac3e298.roa (raw, json)
Hash identifier:          uw9ac6pMR5mdEIu7dyb1mhqbqK074rRvm2c0x/Dxz20=
Subject key identifier:   E7:DC:C6:85:F8:3E:40:86:91:AE:2F:05:CB:DD:C4:9C:24:D0:10:61
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A20BD017A042C1FCE2AFFE8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/560aace9-8a8c-3118-88bc-d6595ac3e298.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.76.80.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:20:bd:01:7a:04:2c:1f:ce:2a:ff:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ed8804c4-f54a-4995-a5dd-325044347432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0d:c8:37:45:af:e9:d5:76:2f:2e:d0:75:af:
                    42:57:ce:6a:ea:e0:a8:8e:0a:48:3a:98:99:e8:f2:
                    99:ef:a8:b0:6f:6c:96:c7:51:b4:28:bc:87:50:e7:
                    d9:24:ca:31:94:ea:f4:c8:f5:e4:07:64:f3:c1:c6:
                    2b:50:b9:a0:4b:07:55:95:d6:e0:76:e0:97:d6:34:
                    71:cd:0e:62:15:64:cf:dc:a1:47:6e:53:36:6a:65:
                    6c:49:1d:2f:4c:99:6a:e5:27:63:6c:5f:8c:04:53:
                    7a:d8:d3:d8:7e:e1:e8:89:e4:8d:0b:ea:9e:a9:21:
                    ed:c1:77:37:8e:0f:d9:03:0d:87:9c:8f:ce:34:52:
                    25:40:d5:9b:f4:52:76:9e:72:7d:9c:f4:76:38:5a:
                    32:92:4f:29:0f:8e:a0:e4:a6:41:05:1f:d5:b0:c4:
                    86:03:73:fa:75:6b:76:1f:00:9d:61:0f:0f:c7:2e:
                    61:ca:89:3c:16:9c:95:56:c5:11:c7:be:a0:66:ad:
                    80:05:2e:5a:42:65:e2:99:84:5d:b3:3e:ee:cd:d1:
                    e4:60:52:dd:c1:4d:29:d6:17:e6:f1:9e:6e:f6:4a:
                    b5:a9:80:08:bf:4f:02:84:e2:e3:ee:f0:95:e2:22:
                    d2:8f:6f:fb:c2:69:5a:f2:bc:5c:78:4e:10:17:7d:
                    37:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DC:C6:85:F8:3E:40:86:91:AE:2F:05:CB:DD:C4:9C:24:D0:10:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/560aace9-8a8c-3118-88bc-d6595ac3e298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.76.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:23:eb:7a:5d:ac:35:f2:5a:6f:d6:7c:34:5e:14:3b:be:b8:
         c4:8e:74:dc:cc:4f:18:91:88:65:11:3c:e6:77:71:a0:09:13:
         bb:41:ba:7a:f5:17:46:eb:a0:90:17:17:28:a0:ec:ab:5e:c9:
         e6:e8:10:ce:97:43:1b:75:b0:f6:b8:cd:d1:66:f8:72:b8:ea:
         e6:75:c5:28:be:7b:f0:9c:ef:0c:33:35:26:fb:d3:82:09:eb:
         46:b8:1c:1a:50:73:b9:6d:48:53:72:0a:cf:bc:0f:85:7b:7d:
         fc:d8:7d:96:5d:d0:53:63:11:ef:cd:2c:b6:f3:47:ee:ad:77:
         19:a9:d1:dd:46:2c:01:80:f3:dd:44:0d:bf:1d:2f:9e:90:35:
         c9:45:d8:16:d1:c0:a4:07:3d:ef:e2:ad:ed:ca:75:ce:88:4c:
         6f:f9:bb:74:58:a2:be:f9:64:13:da:e1:fe:1a:06:13:b8:63:
         6b:7d:05:5e:d5:5f:dd:03:1d:12:08:cd:a0:a6:a5:d7:ec:b4:
         f1:f8:09:4e:e3:4c:f6:12:f2:46:77:14:ef:0d:ed:80:fb:a1:
         a2:b9:01:f9:dd:cc:63:fe:c5:42:ea:79:50:f8:09:40:7c:82:
         8c:70:16:73:42:dc:c1:65:d2:59:76:00:78:58:33:b0:55:50:
         49:7a:aa:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:40:39 2025 by rpki-client