Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e203536353535.roa
File:                     3137322e38322e39312e302f32342d3234203d3e203536353535.roa (raw, json)
Hash identifier:          sKvEBMFMKGaXNMSQdLde6Bot3PE1PnavqR115CsMrvc=
Subject key identifier:   26:37:D4:90:1B:C2:FD:38:09:6E:A1:A2:86:63:3A:73:87:82:C3:64
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       7A2C6A153D5BCFCABEACE25D59F14F197C13246E
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e203536353535.roa
Signing time:             Sat 16 Jul 2022 17:43:30 +0000
ROA not before:           Sat 16 Jul 2022 17:38:30 +0000
ROA not after:            Sat 15 Jul 2023 17:43:30 +0000
asID:                     56555
IP address blocks:        172.82.91.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:2c:6a:15:3d:5b:cf:ca:be:ac:e2:5d:59:f1:4f:19:7c:13:24:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Jul 16 17:38:30 2022 GMT
            Not After : Jul 15 17:43:30 2023 GMT
        Subject: CN=2637D4901BC2FD38096EA1A286633A738782C364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:44:b7:0e:4c:b7:64:27:7e:05:cb:d6:f1:34:
                    91:f2:33:09:90:6f:c7:40:7a:79:3c:cb:07:a5:23:
                    b2:71:58:a5:0f:58:28:c3:51:56:70:01:44:9f:5c:
                    9e:a3:e7:a9:06:c7:f6:c4:cd:96:6e:77:be:a8:f9:
                    15:b0:30:7a:e0:be:f3:a6:ae:91:c7:ec:ad:bc:28:
                    41:d5:83:06:b6:04:c8:b4:ca:55:c7:28:24:db:09:
                    cc:27:0e:a3:90:fe:b5:c4:23:e6:a8:f3:3d:e9:3d:
                    be:9a:87:39:7c:8f:1e:be:78:6e:b2:7f:6e:ef:ec:
                    d6:ad:3a:c7:f0:1d:36:61:24:4e:54:63:99:ad:94:
                    e3:e8:11:62:aa:05:1f:93:e2:df:eb:00:e4:74:e7:
                    c6:88:51:e3:ee:9f:81:0a:e5:e7:10:00:71:b4:00:
                    a1:ae:6d:94:4d:af:7e:23:0a:fd:72:8e:dc:3d:b3:
                    19:35:eb:78:34:f2:42:01:54:26:cc:17:6e:8f:1b:
                    af:8b:1f:b5:ed:a4:32:5d:dd:5c:43:2e:3f:75:ac:
                    2a:7c:34:fb:f3:b1:33:79:0f:07:bb:99:96:43:aa:
                    a2:ab:8e:4e:7b:db:b5:48:12:31:02:7c:02:37:62:
                    d3:00:f7:cb:ab:1d:f3:aa:d3:1d:47:ed:eb:85:f8:
                    72:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:37:D4:90:1B:C2:FD:38:09:6E:A1:A2:86:63:3A:73:87:82:C3:64
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e203536353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:4f:be:eb:bc:85:ae:a4:ef:b0:90:4a:1d:c1:bf:3f:38:e2:
         76:3f:a7:dc:5a:7e:d0:46:48:f6:71:e7:8f:0d:53:e9:f4:80:
         5f:fc:3d:7c:bf:02:58:f5:4f:cb:9c:3b:56:aa:67:69:01:65:
         95:ff:25:6c:e7:d8:b3:09:b7:86:76:21:c0:04:1e:2d:5c:25:
         e7:30:c8:d5:49:48:9d:a5:27:fd:a5:c2:a1:d5:15:9c:56:af:
         54:8a:fe:b7:68:8e:2b:0d:79:5c:35:8b:d2:fd:58:f6:13:ea:
         ea:de:a7:2d:22:b5:dc:1a:21:f0:e1:74:3b:6b:b9:fd:1d:11:
         51:d4:44:84:80:d4:ad:e7:c4:9c:f2:6e:b6:3a:e8:24:9e:56:
         c5:d3:e3:c4:e2:6d:c8:c9:cc:aa:e4:ab:72:f1:80:18:f5:2d:
         24:13:72:7d:95:a0:82:fc:ce:38:bc:0a:b7:49:b1:0b:c0:70:
         40:ca:36:c7:69:7b:d9:1f:c6:65:b1:f9:21:38:76:bd:75:87:
         c2:32:9f:19:5d:17:6b:c5:27:4b:cc:a9:13:5d:72:c7:64:d2:
         8d:2e:74:96:b9:c7:5c:27:63:27:25:af:0d:26:62:19:b0:2e:
         b4:7e:14:59:a9:cc:90:8c:db:63:b2:8a:c1:a9:d7:13:95:f2:
         0d:c2:8d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org