Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3139352e302f32342d3234203d3e2031323339.roa
File:                     3230342e39332e3139352e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          MoJzhK5gXNrJcYIys0dbh656K60NDYMpL1f7NFr5uo4=
Subject key identifier:   91:38:D5:86:FA:C9:CC:13:03:3F:4A:2F:D5:F9:59:55:6C:61:BE:5C
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       6EB4A809204FF69C753707C6EBD80AF139C1AB96
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3139352e302f32342d3234203d3e2031323339.roa
Signing time:             Mon 20 Mar 2023 15:50:46 +0000
ROA not before:           Mon 20 Mar 2023 15:45:46 +0000
ROA not after:            Mon 18 Mar 2024 15:50:46 +0000
asID:                     1239
IP address blocks:        204.93.195.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b4:a8:09:20:4f:f6:9c:75:37:07:c6:eb:d8:0a:f1:39:c1:ab:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Mar 20 15:45:46 2023 GMT
            Not After : Mar 18 15:50:46 2024 GMT
        Subject: CN=9138D586FAC9CC13033F4A2FD5F959556C61BE5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0f:d6:79:73:05:e5:82:05:be:e4:ba:3b:9a:
                    5d:75:a8:5e:04:37:bd:2c:4e:86:07:eb:ab:e3:82:
                    f7:6b:76:84:01:0b:1b:98:99:e9:b7:f4:8a:8c:db:
                    ea:10:64:01:82:83:f1:ce:e9:21:af:6a:5d:c4:12:
                    b0:9e:f8:e5:51:55:ae:37:07:ea:0b:2b:7f:13:07:
                    0a:c9:8e:ba:95:5d:1f:72:09:24:45:4d:00:b7:13:
                    49:95:c0:6d:1a:8b:09:d1:f6:be:ca:9e:11:f9:a9:
                    a2:01:ad:95:4e:d1:ab:13:dc:c7:5e:71:f0:3b:1f:
                    82:4a:d7:6e:b5:19:3b:41:f6:b8:07:2b:5f:ec:cb:
                    07:93:84:ab:8f:87:d0:04:3b:19:f7:18:af:66:05:
                    08:9e:71:e6:f8:a9:e3:21:71:55:3a:5b:ce:e4:6c:
                    5b:a1:23:f1:ab:24:17:4f:1f:54:63:4f:5a:d5:32:
                    99:a3:5a:4d:c6:96:73:d5:f6:2f:a4:4e:c2:85:aa:
                    ad:f0:8b:ba:88:07:3a:6e:63:0b:5c:a1:09:a7:0a:
                    a9:42:39:c0:eb:ba:07:2f:61:db:42:fb:46:0d:a4:
                    b7:4b:56:a2:b0:46:df:38:11:4f:92:e3:2d:cb:09:
                    62:83:95:c5:f3:7a:2d:23:9e:d7:9b:41:58:cc:9b:
                    10:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:38:D5:86:FA:C9:CC:13:03:3F:4A:2F:D5:F9:59:55:6C:61:BE:5C
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3139352e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:c1:11:d3:31:5f:6f:65:e8:ee:67:aa:f8:71:a5:9f:d3:d7:
         10:1c:98:34:1c:1e:93:27:42:07:d1:be:0b:19:1d:9f:fe:05:
         95:14:9c:93:db:1c:77:11:22:af:ac:70:7f:8f:c8:a9:ef:05:
         b6:6d:5b:23:9f:e2:c2:e1:c3:f4:47:f6:44:fd:e1:4e:3a:79:
         f9:67:6b:63:b1:3e:d2:fe:53:b2:b9:89:7d:dc:0a:9f:11:01:
         c4:2f:fb:ca:09:f6:96:26:59:30:38:85:8e:fb:f0:10:25:d2:
         67:f4:a7:36:90:dd:00:ab:d2:2d:68:d6:ee:b2:20:c4:30:15:
         b2:0a:36:6c:e1:ac:00:25:be:ab:84:ee:3d:a3:7d:c8:a6:e3:
         c9:3e:c1:7e:2e:37:47:a7:04:1a:24:c0:15:37:15:1f:d5:4f:
         aa:75:d6:83:e3:ac:b8:a4:e8:9f:b0:c1:5e:01:be:bc:de:a1:
         c3:09:e3:bc:d3:c5:d8:d7:5c:b9:9f:14:fa:ad:80:e4:55:54:
         8d:22:59:54:6a:9f:6a:08:52:dc:87:3b:8b:fd:49:1e:f7:50:
         6f:b9:ef:61:c2:6e:c3:39:03:03:f9:da:51:49:d6:7b:37:d7:
         c8:25:3d:9f:33:20:19:f7:44:c1:65:7f:49:b1:cc:22:d6:80:
         45:6b:a3:de
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUbrSoCSBP9px1NwfG69gK8TnBq5YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwMzIwMTU0NTQ2WhcNMjQwMzE4MTU1MDQ2
WjAzMTEwLwYDVQQDEyg5MTM4RDU4NkZBQzlDQzEzMDMzRjRBMkZENUY5NTk1NTZD
NjFCRTVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw/WeXMF5YIF
vuS6O5pddaheBDe9LE6GB+ur44L3a3aEAQsbmJnpt/SKjNvqEGQBgoPxzukhr2pd
xBKwnvjlUVWuNwfqCyt/EwcKyY66lV0fcgkkRU0AtxNJlcBtGosJ0fa+yp4R+ami
Aa2VTtGrE9zHXnHwOx+CStdutRk7Qfa4Bytf7MsHk4Srj4fQBDsZ9xivZgUInnHm
+KnjIXFVOlvO5GxboSPxqyQXTx9UY09a1TKZo1pNxpZz1fYvpE7Chaqt8Iu6iAc6
bmMLXKEJpwqpQjnA67oHL2HbQvtGDaS3S1aisEbfOBFPkuMtywlig5XF83otI57X
m0FYzJsQkQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFJE41Yb6ycwTAz9KL9X5WVVs
Yb5cMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzMyMzAzNDJlMzkzMzJlMzEzOTM1MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzMjMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADMXcMwDQYJKoZIhvcNAQELBQAD
ggEBAIrBEdMxX29l6O5nqvhxpZ/T1xAcmDQcHpMnQgfRvgsZHZ/+BZUUnJPbHHcR
Iq+scH+PyKnvBbZtWyOf4sLhw/RH9kT94U46eflna2OxPtL+U7K5iX3cCp8RAcQv
+8oJ9pYmWTA4hY778BAl0mf0pzaQ3QCr0i1o1u6yIMQwFbIKNmzhrAAlvquE7j2j
fcim48k+wX4uN0enBBokwBU3FR/VT6p11oPjrLik6J+wwV4BvrzeocMJ47zTxdjX
XLmfFPqtgORVVI0iWVRqn2oIUtyHO4v9SR73UG+572HCbsM5AwP52lFJ1ns318gl
PZ8zIBn3RMFlf0mxzCLWgEVro94=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:34 2024 by rpki-client on console-ams.rpki-client.org