Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207429.roa
File:                     AS207429.roa (raw, json)
Hash identifier:          nj5JaiTSvwZzpyoIFWIVPfBUqIBWaCw94IHGg5VJcYM=
Subject key identifier:   CE:C2:01:7C:59:89:5B:84:04:59:A5:EA:B0:FE:B1:87:81:E3:A9:3A
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       03CDBB3FC7539F4724F2C48B1BA7C8057CCA2D08
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207429.roa
Signing time:             Wed 18 Jan 2023 17:16:31 +0000
ROA not before:           Wed 18 Jan 2023 17:11:31 +0000
ROA not after:            Wed 17 Jan 2024 17:16:31 +0000
asID:                     207429
IP address blocks:        104.234.13.0/24 maxlen: 24
                          104.234.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:cd:bb:3f:c7:53:9f:47:24:f2:c4:8b:1b:a7:c8:05:7c:ca:2d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 18 17:11:31 2023 GMT
            Not After : Jan 17 17:16:31 2024 GMT
        Subject: CN=CEC2017C59895B840459A5EAB0FEB18781E3A93A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f7:3f:51:8c:fb:ea:63:b2:d6:cd:bf:3e:69:
                    bd:ef:e1:c1:c7:86:be:b1:f9:34:f0:82:59:df:31:
                    4f:eb:d2:e7:af:a0:86:01:4a:27:ce:68:53:88:a9:
                    d9:b6:79:6f:c0:66:22:f0:54:74:d8:d3:0d:b4:02:
                    a0:5d:62:6e:26:95:e2:af:eb:e9:9f:b3:2f:0b:80:
                    d9:e8:fc:d5:36:dd:3b:75:aa:af:21:7f:f2:a3:ff:
                    b8:85:a5:e9:dc:41:28:77:d9:5b:6e:f9:3c:d1:5b:
                    38:1e:b4:73:a9:fd:61:65:22:92:1e:6a:f4:d8:df:
                    fd:83:8f:23:44:51:35:53:29:31:06:8b:06:51:17:
                    fd:06:3e:6f:2e:86:b1:ca:48:a7:ce:a1:5c:5c:3c:
                    44:e9:b4:57:a8:bc:3c:35:d1:c5:8c:a3:00:f3:b7:
                    ef:c8:b4:13:c1:d8:d6:fa:57:ce:dc:c6:f3:61:f7:
                    92:a9:9a:f4:48:f3:58:c6:10:a2:23:2b:53:14:87:
                    ca:c7:fe:0b:2c:39:ee:61:85:e1:7c:2c:6c:9d:42:
                    28:a0:de:f1:7e:67:a0:2f:17:8c:99:39:75:5d:45:
                    10:50:3d:77:a0:b2:a4:99:a2:47:7c:95:92:a6:1b:
                    f4:c2:ea:ab:e9:74:75:2b:a5:c1:fc:77:5c:2b:2c:
                    58:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C2:01:7C:59:89:5B:84:04:59:A5:EA:B0:FE:B1:87:81:E3:A9:3A
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207429.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.13.0/24
                  104.234.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:f4:db:7d:5f:f8:1d:06:ca:f1:39:56:bf:a5:bc:e0:2f:df:
         2e:9e:bf:28:43:44:62:2a:21:ba:af:41:d9:61:24:64:4b:ea:
         a6:67:c1:57:ce:d9:8e:bd:27:be:7a:2e:64:22:61:52:50:73:
         01:68:fd:9f:78:de:58:af:03:12:e2:c3:74:fd:74:f1:99:24:
         44:85:e2:65:76:6f:14:e4:c0:76:72:26:dd:05:31:a6:13:6f:
         2b:63:88:a1:0c:46:b1:17:23:89:e2:51:7a:f3:db:82:d5:7e:
         30:55:83:49:67:60:20:2e:b8:07:ef:8f:84:44:c1:b9:34:32:
         31:a8:99:b4:d7:13:ca:7d:d7:67:71:e2:54:b3:a0:05:bc:ed:
         d0:01:5e:57:4c:8e:4a:13:48:eb:02:f8:67:43:68:de:19:22:
         b4:05:01:b0:52:93:83:a5:ea:1f:c5:ee:b2:4e:f9:93:2a:c8:
         eb:b7:f4:07:35:03:ba:1b:32:50:20:ed:f0:83:48:65:f4:57:
         d1:09:e6:d0:a1:00:7d:62:8b:4a:6d:e3:8c:ef:1f:51:48:02:
         11:cc:af:c0:fc:25:b2:e9:cb:e3:93:25:0d:11:9d:ab:d9:55:
         31:5a:0f:88:53:7b:81:39:be:8c:ae:7a:64:05:e2:1b:0b:5c:
         25:d5:50:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org