Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e2030.roa
File:                     3137322e38322e39302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          EIJAZ82h2skaoJX5AirVv8ZEILWGmAKcTHtfJEA8024=
Subject key identifier:   A2:D7:BC:AE:C4:F0:05:CA:F5:E3:E2:60:F1:B9:2B:7F:89:E1:88:50
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       5865132A257AB440B71F216F9CCA2907F3669DA0
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e2030.roa
Signing time:             Wed 01 Mar 2023 09:47:01 +0000
ROA not before:           Wed 01 Mar 2023 09:42:01 +0000
ROA not after:            Wed 28 Feb 2024 09:47:01 +0000
asID:                     0
IP address blocks:        172.82.90.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:65:13:2a:25:7a:b4:40:b7:1f:21:6f:9c:ca:29:07:f3:66:9d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Mar  1 09:42:01 2023 GMT
            Not After : Feb 28 09:47:01 2024 GMT
        Subject: CN=A2D7BCAEC4F005CAF5E3E260F1B92B7F89E18850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cb:d7:75:7d:80:57:08:55:b5:21:03:bd:da:
                    03:cb:55:9c:b3:66:e6:83:3d:2d:2e:64:c0:48:1a:
                    96:eb:22:4b:57:61:53:f5:da:39:5f:63:99:19:f0:
                    41:13:0f:9d:fc:b3:e6:be:37:46:6c:3f:a5:61:14:
                    43:75:00:e9:51:af:70:8f:ce:7c:08:5b:9c:ab:61:
                    21:83:ed:28:d1:a0:7d:2e:27:5b:71:bd:09:f4:30:
                    76:2a:58:db:4a:60:22:27:87:3e:f7:31:68:a9:7d:
                    ba:56:ed:be:ec:88:dc:e6:a8:7a:00:95:85:b9:70:
                    99:4f:e8:1f:d3:2d:61:d4:26:7f:c8:0a:85:98:d0:
                    cb:a9:39:eb:00:8e:17:4e:09:71:73:1d:84:93:1c:
                    25:fd:6f:f4:fb:cf:51:26:63:b0:ef:ea:da:7e:d2:
                    5f:8e:eb:32:c7:24:89:c8:44:df:6b:a5:c1:bb:79:
                    35:28:37:67:ad:92:73:11:f8:20:a0:37:06:e4:9f:
                    a3:8b:a4:68:61:1b:85:62:9e:1b:92:28:66:b0:d3:
                    d6:11:f2:28:dc:13:02:70:98:d0:79:2d:8a:ac:64:
                    89:65:36:76:37:4a:51:cb:fe:6e:80:41:4d:93:02:
                    9f:25:a5:be:d9:5e:db:6c:88:07:81:43:b6:ff:32:
                    b6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D7:BC:AE:C4:F0:05:CA:F5:E3:E2:60:F1:B9:2B:7F:89:E1:88:50
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:bf:36:45:0f:ca:3d:f7:b9:f5:da:43:42:34:65:d4:92:cc:
         09:90:0d:81:4d:5f:10:f4:97:f3:09:92:4c:66:f3:97:ba:18:
         30:1f:cc:82:ac:a2:76:4a:5b:70:ae:f3:b9:4d:bb:37:31:03:
         7b:5f:f2:db:10:a1:e0:9d:c1:a5:b4:0f:10:0a:1f:fa:77:82:
         25:71:57:75:90:ac:2b:c5:e3:ac:5c:ea:17:28:fe:de:42:d1:
         49:ee:59:26:cf:3b:86:9e:8e:cd:e3:ba:dd:2b:f9:81:58:17:
         84:77:fd:32:8b:9c:09:0c:27:38:ed:bb:17:5d:29:0e:a3:35:
         77:30:26:fe:a8:e7:49:78:d4:4e:4d:81:dc:4b:20:4f:22:0f:
         a3:11:71:fd:68:c8:43:1e:65:c5:72:32:f0:99:7a:c5:d7:07:
         b0:78:8b:64:6c:4d:9d:2e:1d:86:4e:ac:e0:86:33:7b:c2:23:
         37:c4:d9:6a:49:d6:0b:2b:f1:f3:78:07:e5:18:79:fa:91:0e:
         02:01:a1:cf:35:24:30:8a:31:9c:85:d1:79:97:d0:d5:f6:08:
         c3:07:79:2e:84:3f:42:98:7d:50:1e:0c:17:d1:11:0e:1c:1b:
         7c:f7:60:3f:66:f2:09:82:45:9a:34:69:ff:35:34:11:22:f6:
         06:55:aa:4c
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgIUWGUTKiV6tEC3HyFvnMopB/NmnaAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDk4NWVhNTBkZjU0ZTc5NWE0YmUxNGFkNTE4OGE4ZTUy
ODczNzg3MDM5YmI2YjI3YjIwHhcNMjMwMzAxMDk0MjAxWhcNMjQwMjI4MDk0NzAx
WjAzMTEwLwYDVQQDEyhBMkQ3QkNBRUM0RjAwNUNBRjVFM0UyNjBGMUI5MkI3Rjg5
RTE4ODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycvXdX2AVwhV
tSEDvdoDy1Wcs2bmgz0tLmTASBqW6yJLV2FT9do5X2OZGfBBEw+d/LPmvjdGbD+l
YRRDdQDpUa9wj858CFucq2Ehg+0o0aB9Lidbcb0J9DB2KljbSmAiJ4c+9zFoqX26
Vu2+7Ijc5qh6AJWFuXCZT+gf0y1h1CZ/yAqFmNDLqTnrAI4XTglxcx2Ekxwl/W/0
+89RJmOw7+raftJfjusyxySJyETfa6XBu3k1KDdnrZJzEfggoDcG5J+ji6RoYRuF
Yp4bkihmsNPWEfIo3BMCcJjQeS2KrGSJZTZ2N0pRy/5ugEFNkwKfJaW+2V7bbIgH
gUO2/zK2wQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFKLXvK7E8AXK9ePiYPG5K3+J
4YhQMB8GA1UdIwQYMBaAFBjAkk0jHaMBlRYLJe7mMn60Awb4MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxNzMzYzVjNWY2YjViLzAv
MThDMDkyNEQyMzFEQTMwMTk1MTYwQjI1RUVFNjMyN0VCNDAzMDZGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzcyMjViNDE1LThhZTAtNDUyMy1iMzdmLTc0ZWQ3ODA2NzZhYS8wOTg1
ZWE1MGRmNTRlNzk1YTRiZTE0YWQ1MTg4YThlNTI4NzM3ODcwMzliYjZiMjdiMi5j
ZXIwgZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxNzMz
YzVjNWY2YjViLzAvMzEzNzMyMmUzODMyMmUzOTMwMmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACsUlowDQYJKoZIhvcNAQELBQADggEBAMC/NkUP
yj33ufXaQ0I0ZdSSzAmQDYFNXxD0l/MJkkxm85e6GDAfzIKsonZKW3Cu87lNuzcx
A3tf8tsQoeCdwaW0DxAKH/p3giVxV3WQrCvF46xc6hco/t5C0UnuWSbPO4aejs3j
ut0r+YFYF4R3/TKLnAkMJzjtuxddKQ6jNXcwJv6o50l41E5NgdxLIE8iD6MRcf1o
yEMeZcVyMvCZesXXB7B4i2RsTZ0uHYZOrOCGM3vCIzfE2WpJ1gsr8fN4B+UYefqR
DgIBoc81JDCKMZyF0XmX0NX2CMMHeS6EP0KYfVAeDBfREQ4cG3z3YD9m8gmCRZo0
af81NBEi9gZVqkw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org