Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3230352e3134372e3130372e302f32342d3234203d3e203336323336.roa
File:                     3230352e3134372e3130372e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          mjFc+Yv6OXZ9+K+bWtnGHabG4v46HyaViMWrzMzerP0=
Subject key identifier:   F0:BA:4A:C1:8A:65:3E:62:67:2C:43:28:6C:0E:5F:C9:46:DF:5D:F0
Certificate issuer:       /CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
Certificate serial:       51B17963B0F24A6E37694384456D477682912784
Authority key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3230352e3134372e3130372e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 31 Oct 2022 20:15:01 +0000
ROA not before:           Mon 31 Oct 2022 20:10:01 +0000
ROA not after:            Mon 30 Oct 2023 20:15:01 +0000
asID:                     36236
IP address blocks:        205.147.107.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b1:79:63:b0:f2:4a:6e:37:69:43:84:45:6d:47:76:82:91:27:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
        Validity
            Not Before: Oct 31 20:10:01 2022 GMT
            Not After : Oct 30 20:15:01 2023 GMT
        Subject: CN=F0BA4AC18A653E62672C43286C0E5FC946DF5DF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:94:45:d5:99:f2:aa:99:9f:b5:14:03:0e:c8:
                    4f:fc:98:36:f6:44:51:78:03:41:aa:d8:f9:26:f7:
                    cd:0b:5c:52:0b:97:fa:a0:3b:3c:2b:f7:79:46:19:
                    03:a5:97:66:5d:31:db:21:20:c5:0b:fb:b5:4d:ef:
                    e4:4b:3d:17:80:7f:ff:de:18:c5:56:ef:b3:e0:76:
                    26:51:05:4e:aa:b0:cf:63:06:c5:ef:44:ac:98:06:
                    0e:10:93:39:f9:7a:37:40:72:cf:15:55:e9:80:b7:
                    8b:ca:69:9f:22:c2:48:06:b5:a2:cc:b7:a1:8d:ff:
                    ca:25:4f:28:5f:fa:0f:5b:e8:b2:32:d7:30:9f:bb:
                    df:1b:3b:75:78:5b:8d:a0:52:d2:af:81:63:41:5d:
                    da:b6:52:81:2d:61:8e:0a:60:6a:18:59:9a:a9:63:
                    be:53:d4:c0:a2:d6:1c:19:fe:4a:97:bd:5f:ce:dc:
                    da:47:5c:62:98:2b:df:1f:f0:89:06:95:3c:0e:aa:
                    9a:74:91:77:97:ff:3c:18:2c:a5:00:aa:31:c9:13:
                    34:64:f6:37:15:76:35:0a:25:cb:3c:c0:d1:51:3f:
                    8d:08:80:f7:eb:49:73:78:2b:96:ef:5c:57:91:44:
                    66:1c:76:20:69:18:d2:a3:c8:41:df:d3:73:6b:26:
                    d5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BA:4A:C1:8A:65:3E:62:67:2C:43:28:6C:0E:5F:C9:46:DF:5D:F0
            X509v3 Authority Key Identifier:
                keyid:5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3230352e3134372e3130372e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.147.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:d6:11:e2:31:5f:74:ac:76:21:ea:07:86:1c:37:18:5d:25:
         f5:05:c0:e8:bb:f2:ef:6a:06:05:c5:98:77:23:50:ad:b2:77:
         c9:d6:23:c1:82:8f:76:29:cc:97:f7:51:3d:4a:76:a3:63:aa:
         65:c2:17:88:71:9f:35:b4:52:de:86:31:ea:17:4d:55:8a:d5:
         f1:11:57:54:3b:e1:4d:83:fe:32:8e:15:6a:9b:b8:d1:51:f4:
         50:c7:84:ae:5f:b1:40:ab:46:21:4a:6e:d6:de:0a:cf:2f:2b:
         e6:5c:ed:14:98:3a:69:e8:b6:b6:4c:ff:b4:c0:f6:ff:c1:40:
         07:71:60:20:03:34:3a:47:e3:06:b5:d1:1d:49:39:e3:30:f3:
         aa:f6:ec:8a:e5:81:7c:fd:43:90:ef:ca:10:5b:2e:e6:03:5f:
         d1:f8:38:0c:a0:a4:29:db:85:56:8c:92:0a:4f:6c:60:ef:11:
         19:77:3b:0d:a4:46:30:2c:f8:97:d0:52:e0:b9:ae:b7:9c:09:
         79:b5:59:f6:16:c5:92:eb:8d:b8:00:0a:b0:e5:ce:ab:6a:d8:
         4e:4a:0b:07:ed:af:03:6e:ec:98:f6:73:85:b5:de:79:fc:35:
         ca:2c:22:22:96:45:91:82:86:cd:d9:ec:74:4a:0d:db:1d:4f:
         bb:2f:51:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:32 2024 by rpki-client on console-ams.rpki-client.org