Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3130342e3234352e3231332e302f32342d3234203d3e203631333137.roa
File:                     3130342e3234352e3231332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Pd+qXIz+/rSH3Z9ESBtNL+jjuslUeuAU90PqvpIrbVg=
Subject key identifier:   48:02:06:36:4E:CF:B6:ED:34:62:25:2B:80:69:6F:5D:00:86:F6:FE
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       5C89655F650F848DA2170638C70C24935DA44629
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3130342e3234352e3231332e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 16 Mar 2023 17:55:51 +0000
ROA not before:           Thu 16 Mar 2023 17:50:51 +0000
ROA not after:            Thu 14 Mar 2024 17:55:51 +0000
asID:                     61317
IP address blocks:        104.245.213.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:89:65:5f:65:0f:84:8d:a2:17:06:38:c7:0c:24:93:5d:a4:46:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Mar 16 17:50:51 2023 GMT
            Not After : Mar 14 17:55:51 2024 GMT
        Subject: CN=480206364ECFB6ED3462252B80696F5D0086F6FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:70:84:a5:13:3b:54:13:f3:6f:0c:3b:b3:68:
                    58:c5:14:30:fd:c7:d0:d8:1a:b7:c3:8b:70:9d:5f:
                    d4:1d:84:5b:75:ce:1f:36:af:27:10:d3:4b:2a:ef:
                    4d:8c:6e:2c:06:c6:23:fa:7b:5d:70:a3:bb:89:0e:
                    08:bc:54:26:23:ae:ad:f1:83:6f:2e:b5:bd:15:5c:
                    7a:c3:a9:3d:37:eb:72:4d:e1:74:70:8a:bb:50:3d:
                    e6:18:82:85:67:26:ea:f5:ea:0b:1b:94:27:ed:b8:
                    91:1d:5f:db:88:90:38:48:37:c4:f1:6e:53:aa:14:
                    b0:96:e8:92:e6:ef:47:9d:68:98:c5:78:4e:98:08:
                    f2:0e:c5:a0:a7:31:f4:21:31:a0:ad:0a:19:d2:fc:
                    6f:5a:e9:90:b7:71:91:7d:7d:6e:b8:77:ef:66:0f:
                    98:c8:77:31:f3:07:30:d2:41:f4:a9:e9:77:50:df:
                    54:d4:01:af:29:d8:f5:71:28:a5:e1:e8:7a:17:32:
                    59:a3:95:7f:cd:a3:a5:08:df:84:78:ff:16:d4:6d:
                    c7:90:be:e8:68:30:23:5f:5f:0f:f7:a1:46:db:91:
                    c9:f0:65:98:ad:f6:18:f4:3c:89:73:6f:12:bb:c2:
                    10:9a:d4:d9:be:2f:65:7e:30:97:f3:6e:71:dd:2c:
                    40:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:02:06:36:4E:CF:B6:ED:34:62:25:2B:80:69:6F:5D:00:86:F6:FE
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3130342e3234352e3231332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:e8:ae:b2:b5:39:99:0d:67:31:39:36:c0:50:a0:6d:02:5d:
         bc:c5:c3:5a:80:d3:2c:25:51:6a:fd:42:49:d6:8a:67:fb:03:
         ec:2f:b7:a7:63:39:96:94:4b:bf:3f:77:65:6a:ef:43:7b:f1:
         6c:b8:73:1b:d5:9e:e5:48:65:ee:50:0e:e2:cd:c5:a2:85:12:
         bc:be:10:e5:bd:9a:64:9c:c0:74:d8:b6:eb:39:60:91:78:8e:
         44:a3:c6:03:ea:8b:34:98:d8:ae:9f:44:8f:1c:2d:a2:56:f5:
         fd:ec:4f:4d:72:93:ce:4d:1b:38:54:60:2b:1b:87:ed:4d:7a:
         32:90:1b:af:fd:d2:89:f5:8f:66:6a:6f:2c:aa:72:a0:48:c2:
         84:7a:cb:58:7b:26:2c:39:b9:c0:eb:5a:9d:80:9e:9a:ca:58:
         43:49:0f:1a:f6:f4:70:37:61:e9:d0:de:00:b7:86:e2:ab:20:
         c9:12:8b:54:fa:ba:14:62:80:5a:a5:39:ac:d0:95:2c:96:c2:
         31:16:3b:eb:67:b7:4e:0b:84:c4:e7:98:ab:95:10:40:41:d4:
         7a:52:25:67:cd:4e:cd:4b:74:0d:cb:d5:48:3d:95:25:2c:7a:
         7a:7a:e8:fa:34:30:3b:44:d1:69:93:c2:da:bc:eb:1b:0a:5b:
         84:35:d9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org