Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3138342e302f32342d3234203d3e2031323339.roa
File:                     3230342e39332e3138342e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          CFYH8H2H6E9rM6isEuaclWpv5ePsm1zdtgvJr+tHZdM=
Subject key identifier:   F9:D6:61:93:FE:C8:A6:A5:FC:76:5A:25:63:2E:83:44:F3:B4:CB:D9
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       755E8E9DE12F5E50BF4BC57167BEB6BE12739714
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3138342e302f32342d3234203d3e2031323339.roa
Signing time:             Mon 20 Mar 2023 15:50:47 +0000
ROA not before:           Mon 20 Mar 2023 15:45:47 +0000
ROA not after:            Mon 18 Mar 2024 15:50:47 +0000
asID:                     1239
IP address blocks:        204.93.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:5e:8e:9d:e1:2f:5e:50:bf:4b:c5:71:67:be:b6:be:12:73:97:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Mar 20 15:45:47 2023 GMT
            Not After : Mar 18 15:50:47 2024 GMT
        Subject: CN=F9D66193FEC8A6A5FC765A25632E8344F3B4CBD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:87:41:c2:64:ec:76:c3:1e:2e:eb:d7:02:5e:
                    ae:51:ca:a7:46:5e:ef:f1:10:04:35:ac:9a:29:05:
                    92:08:b3:ac:18:4e:da:27:8e:b8:37:3f:6e:d8:c8:
                    a2:7e:9e:e7:5b:03:52:db:58:15:f7:88:53:02:0e:
                    72:e2:f2:55:e7:55:26:92:22:54:3c:77:90:02:17:
                    6f:de:79:68:fc:31:30:34:ef:40:7b:28:53:82:1b:
                    b5:1d:a8:0d:87:cb:fd:63:c8:95:4f:d3:d2:eb:dc:
                    5c:7c:50:4f:b7:02:25:19:ce:05:24:bc:c7:f0:87:
                    19:5a:21:8f:28:34:39:75:89:89:99:2a:7c:88:87:
                    16:0f:17:bb:1c:cc:4a:f0:e7:a6:18:f8:2c:67:c5:
                    f5:33:8b:09:b6:69:44:0d:b1:6f:b2:ed:a3:da:41:
                    af:41:91:fd:4c:2a:69:06:c5:ea:0f:33:5e:27:be:
                    f9:a6:99:9a:f0:75:12:7c:95:ad:77:d4:d3:60:1e:
                    72:f4:7f:ac:21:58:40:a4:93:cc:5a:d0:7b:e0:1f:
                    7f:b1:dc:e7:f6:b7:6f:0f:e7:34:a8:f8:72:1f:e9:
                    d2:b2:51:cd:26:90:77:99:92:25:7e:c0:3f:4b:03:
                    7f:8f:e8:68:19:03:32:26:1d:c7:65:75:af:3b:06:
                    a9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D6:61:93:FE:C8:A6:A5:FC:76:5A:25:63:2E:83:44:F3:B4:CB:D9
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3138342e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:08:08:14:d4:0f:cc:c8:3b:29:f1:d9:8d:7b:8a:00:89:a1:
         26:fb:2a:1f:90:41:78:15:18:35:bb:ae:15:02:76:a8:9e:3c:
         76:fc:8d:2e:93:d6:8e:e4:b3:01:f2:c2:94:a0:b3:c0:e4:b4:
         23:1f:47:9a:f3:83:a5:fb:83:5c:69:13:f2:5b:27:b7:32:c8:
         a8:90:ff:17:b7:23:6d:34:7b:71:2c:06:b4:9d:93:d5:9c:7e:
         ca:bb:fb:57:1b:5b:dc:c0:58:03:f6:53:6f:70:95:22:c2:bd:
         8e:5e:23:b3:8b:b5:12:19:f5:96:ba:f2:4d:e3:4c:a4:26:a1:
         8f:9d:07:19:44:d6:f1:ee:4e:d2:25:d9:9c:c9:56:a7:1a:23:
         92:f6:6a:dd:ef:6f:9d:2a:38:e3:99:91:0b:33:de:c8:99:91:
         f1:18:88:ab:37:4e:3d:a4:b4:00:c4:8d:4e:21:c2:c6:95:b0:
         ef:f4:ff:bd:7a:b3:0a:e6:fb:83:f5:dc:1a:78:9d:93:5e:48:
         cf:8d:35:84:cc:98:6e:f1:1c:6f:9f:1d:89:d8:82:6a:d8:4e:
         35:0c:26:67:c4:88:16:6f:52:b0:1e:45:65:d2:4e:2c:a0:10:
         ce:fb:63:85:b3:8f:9f:92:79:bf:89:c3:7f:cf:19:0e:e5:0b:
         77:ac:1d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:34 2024 by rpki-client on console-ams.rpki-client.org