Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130372e302f32342d3234203d3e20323037323739.roa
File:                     3231362e3234372e3130372e302f32342d3234203d3e20323037323739.roa (raw, json)
Hash identifier:          XCKUzb8Sqt1YyKaaGuDgYqm3BaikDDXGDD3ik1/XYkc=
Subject key identifier:   A0:ED:9F:A8:AC:3C:A1:C8:81:E4:39:66:C7:4F:FD:9B:91:01:E0:EC
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       2C607C0656F9589526A1FF550A44D3045F4F1BB4
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130372e302f32342d3234203d3e20323037323739.roa
Signing time:             Mon 28 Nov 2022 11:10:30 +0000
ROA not before:           Mon 28 Nov 2022 11:05:30 +0000
ROA not after:            Mon 27 Nov 2023 11:10:30 +0000
asID:                     207279
IP address blocks:        216.247.107.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:60:7c:06:56:f9:58:95:26:a1:ff:55:0a:44:d3:04:5f:4f:1b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Nov 28 11:05:30 2022 GMT
            Not After : Nov 27 11:10:30 2023 GMT
        Subject: CN=A0ED9FA8AC3CA1C881E43966C74FFD9B9101E0EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6e:1b:c2:ba:93:ca:17:7a:a7:09:37:36:18:
                    cb:df:d0:c6:d4:56:02:e8:cb:22:03:46:20:31:ed:
                    6f:55:57:a3:71:26:2a:a1:72:c0:bb:b6:ff:a5:5c:
                    1c:05:d9:07:7d:5b:d6:be:09:38:8f:0e:7d:41:a8:
                    10:14:4f:a8:30:3f:df:c1:cd:a2:a5:77:bf:61:07:
                    71:64:39:78:7e:e7:61:6f:73:05:94:d2:da:2f:0d:
                    e0:c7:9c:fa:51:5c:8c:1f:7f:31:ba:ad:61:4d:83:
                    d7:21:fe:72:a3:6a:6f:ca:8e:b7:cb:7a:14:49:9f:
                    4e:30:62:be:44:94:11:a4:80:d5:e9:d4:d9:1f:91:
                    41:0a:26:8a:33:2d:b6:58:a4:3b:77:71:cb:03:63:
                    7f:08:21:39:d0:b3:89:7d:be:90:20:ed:79:da:e6:
                    c4:c3:b7:4f:9a:d5:3d:da:82:76:19:51:59:f3:5e:
                    eb:ce:23:ad:1c:d2:ed:63:71:2c:bf:76:da:5e:29:
                    a1:26:6b:40:9a:cb:de:4c:7e:c7:15:00:91:95:b6:
                    04:b9:ad:5d:58:18:7d:11:62:35:eb:1e:dc:d0:db:
                    f5:7d:52:91:a1:ce:27:70:a0:34:16:f5:fd:c7:90:
                    4e:15:56:1e:91:d2:8a:35:fb:9f:44:28:08:a0:2c:
                    c4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:ED:9F:A8:AC:3C:A1:C8:81:E4:39:66:C7:4F:FD:9B:91:01:E0:EC
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130372e302f32342d3234203d3e20323037323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:a7:01:c5:b0:63:c5:eb:32:8d:10:d0:47:de:2c:df:0a:66:
         bf:4f:d3:61:28:b8:e1:e9:ee:88:a9:80:62:d4:00:85:31:99:
         55:81:30:78:66:17:7b:8e:4a:e1:e3:95:45:e7:ba:95:22:27:
         95:cf:65:24:5e:fb:0d:15:96:f3:b5:6d:93:9e:de:ed:e7:69:
         3a:cd:91:de:cb:b1:9f:64:04:d2:94:e5:c6:08:28:c1:2f:b7:
         4f:67:f3:15:61:4c:35:79:59:45:07:56:76:7e:f1:56:12:5b:
         18:a4:df:23:fb:6e:69:a0:d7:38:fc:a8:63:cf:47:5b:20:0d:
         a0:ad:4c:f1:10:a7:b0:ae:e8:4b:8e:96:6c:b7:76:da:53:a1:
         fe:69:64:86:12:92:a8:cb:c1:53:4f:1a:56:93:25:9e:18:3c:
         1d:4e:b0:80:f0:3f:b5:3a:0c:d2:29:28:33:c8:73:fd:b7:50:
         49:fe:62:8e:c7:78:1a:c9:c6:81:16:d9:b3:a3:21:9c:b9:1e:
         a1:6f:a0:37:a0:f8:92:23:85:f4:f8:5e:55:5a:0f:63:b4:82:
         61:77:7f:10:b3:e4:24:ee:11:3f:16:0a:8e:aa:f6:6b:17:89:
         2f:1b:6e:cd:06:8b:1f:2e:17:57:79:d4:cf:b1:89:ad:b1:58:
         ed:65:4f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org