Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139322e302f32342d3234203d3e20333936393938.roa
File:                     3230342e31302e3139322e302f32342d3234203d3e20333936393938.roa (raw, json)
Hash identifier:          PS/ue3yqj0S51UMaYTmQg5bRAK0uITXDltIFVndaROc=
Subject key identifier:   CE:C5:3E:5F:07:99:71:7A:2F:22:4C:BB:12:AD:E0:8C:B1:24:6C:38
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       01FEBD896B5650799B484D308A405ED60FA66968
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139322e302f32342d3234203d3e20333936393938.roa
Signing time:             Sun 16 Apr 2023 09:53:29 +0000
ROA not before:           Sun 16 Apr 2023 09:48:29 +0000
ROA not after:            Sun 14 Apr 2024 09:53:29 +0000
asID:                     396998
IP address blocks:        204.10.192.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:fe:bd:89:6b:56:50:79:9b:48:4d:30:8a:40:5e:d6:0f:a6:69:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Apr 16 09:48:29 2023 GMT
            Not After : Apr 14 09:53:29 2024 GMT
        Subject: CN=CEC53E5F0799717A2F224CBB12ADE08CB1246C38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:7e:5b:6f:06:33:a8:32:7b:4b:9a:d6:d9:
                    5e:20:56:ab:36:a6:1f:2b:4d:7a:a7:55:08:52:28:
                    43:d7:18:82:0a:6c:72:fc:25:54:89:03:b6:76:c8:
                    2d:c8:01:71:1e:93:a6:61:07:c3:34:58:2d:dc:eb:
                    a1:bb:6d:eb:ad:29:34:bc:0a:81:8e:7c:7e:e5:10:
                    7b:3c:24:03:14:4d:be:2e:16:5a:af:b4:64:76:82:
                    29:6f:02:69:14:b7:c5:a5:17:d3:cc:8c:54:88:c7:
                    fa:4e:b9:3a:1d:2a:26:fc:84:2a:18:81:02:4e:5f:
                    61:bc:43:60:6c:d9:2d:74:ec:08:19:1f:2d:69:fe:
                    42:43:53:0f:1d:68:c0:93:6b:d2:72:6e:05:a5:86:
                    db:d5:30:07:8b:34:b7:31:fb:83:3c:70:1f:32:b5:
                    38:8a:51:47:08:52:80:bd:79:02:a7:56:97:86:c7:
                    e0:34:23:01:99:4e:c9:7a:57:02:a0:9a:b3:73:91:
                    14:29:65:16:6f:45:05:ea:b8:96:f5:f2:75:09:df:
                    3e:5d:bb:a8:86:76:eb:3f:e4:55:6a:e8:de:58:cd:
                    9a:88:77:3d:44:78:94:ff:0f:3f:ac:2d:96:9a:32:
                    00:b2:30:5d:85:d3:f2:7d:54:fe:dc:79:0a:7b:29:
                    c5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C5:3E:5F:07:99:71:7A:2F:22:4C:BB:12:AD:E0:8C:B1:24:6C:38
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139322e302f32342d3234203d3e20333936393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:3c:a0:1f:38:01:9d:bc:4f:67:7c:2d:2f:e8:0e:e5:3f:af:
         65:05:ae:67:61:db:34:53:9c:0a:f8:df:bd:16:30:79:8f:0d:
         8b:0e:f1:66:4f:cf:02:bd:dd:a0:b8:e7:4d:ae:0d:cb:33:7c:
         64:5e:76:b3:b2:57:84:3a:d3:93:28:a6:89:07:91:77:3e:76:
         8f:bb:32:a6:4e:01:58:f8:85:e2:7e:66:e5:99:bb:3e:a7:22:
         fe:46:6c:4e:d2:60:84:2a:23:0a:4b:b3:ce:b1:fc:d3:64:a9:
         af:62:9b:aa:d8:9d:f9:26:9f:9c:08:c3:dc:36:8e:f4:1b:ac:
         f9:57:36:81:3f:20:8c:46:9c:1b:61:ad:8f:4c:fc:37:ee:0a:
         87:24:0e:b2:9f:09:59:a2:97:e1:b2:78:66:05:2c:d1:ad:a4:
         3c:f0:0a:ef:e6:8f:16:b8:e7:18:ff:73:6f:8a:c3:33:6e:f1:
         51:c4:17:8a:9d:d3:86:ef:18:3b:e3:90:ef:6a:61:45:e9:c6:
         59:05:6e:70:88:e2:d2:3f:1e:2a:d8:9b:61:9d:20:e9:3c:79:
         14:93:6d:c4:ea:25:b8:49:32:a0:9c:9b:66:82:43:59:f0:e1:
         f9:f7:94:25:c9:ff:42:56:52:8e:7c:be:6e:49:f5:9c:6b:e6:
         43:f5:f0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----