Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3139352e302f32342d3234203d3e203439393939.roa
File:                     3230342e39332e3139352e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          6eR2mXAnMi3a0KdB85gRqr3xtUIUHzFnRfM2TtBtprE=
Subject key identifier:   E2:BE:37:90:D1:3E:30:A6:26:64:52:AC:61:4C:56:3C:9D:FD:29:B4
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       3E3879CD216778141718EB4FB3EA8FB1E3EC2272
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3139352e302f32342d3234203d3e203439393939.roa
Signing time:             Thu 11 May 2023 23:07:04 +0000
ROA not before:           Thu 11 May 2023 23:02:04 +0000
ROA not after:            Thu 09 May 2024 23:07:04 +0000
asID:                     49999
IP address blocks:        204.93.195.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:38:79:cd:21:67:78:14:17:18:eb:4f:b3:ea:8f:b1:e3:ec:22:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 11 23:02:04 2023 GMT
            Not After : May  9 23:07:04 2024 GMT
        Subject: CN=E2BE3790D13E30A6266452AC614C563C9DFD29B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:83:88:2c:c9:b5:b1:41:48:2e:f7:fd:ed:53:
                    0f:6e:62:23:ed:6d:70:92:c8:ca:4f:c3:aa:23:d0:
                    fd:47:51:8a:e3:f6:82:b5:b7:35:12:8b:af:ab:8b:
                    29:b2:d8:ad:d1:b8:05:29:60:7f:26:73:52:fd:a2:
                    ab:8c:33:17:e8:39:bb:7b:8b:07:3c:b7:e6:91:c0:
                    5d:f2:3a:01:23:71:b0:73:c9:db:84:f4:29:f9:c2:
                    06:0c:70:28:9a:e4:d0:e9:f7:94:70:c1:7b:60:f0:
                    f9:a5:88:25:f4:c5:b7:c0:11:61:b4:32:69:f7:86:
                    78:00:98:cf:5e:28:e5:1c:ac:f9:2a:dd:66:e3:65:
                    73:9d:30:51:01:b6:66:57:d9:de:b2:8b:73:65:7f:
                    3c:a8:34:8f:69:a9:5d:5a:25:95:43:06:1b:00:2c:
                    38:d7:d8:07:43:4a:87:7e:ba:1a:f6:b8:a5:7d:32:
                    99:78:b1:a3:04:b5:24:e5:8d:3e:f9:92:ab:78:9b:
                    db:74:16:40:53:c4:7b:25:bb:c3:2a:76:a3:4a:4d:
                    fd:df:50:04:c0:a4:b2:1f:60:a1:90:b5:a4:e3:0a:
                    cc:56:af:8e:89:5b:51:48:3d:51:b5:0a:fd:70:c1:
                    1d:43:a2:83:4b:b8:5d:b6:9a:6e:8a:17:fd:b4:ea:
                    2d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BE:37:90:D1:3E:30:A6:26:64:52:AC:61:4C:56:3C:9D:FD:29:B4
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3139352e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:1c:45:fd:73:73:91:fd:f3:07:ac:3d:87:e8:26:c5:e2:f0:
         84:17:8a:ff:95:c2:a9:c2:49:93:ca:e8:6c:88:38:77:d0:20:
         ac:c3:44:ad:29:7e:fa:93:b5:77:f6:48:c8:e2:7c:45:d3:96:
         ed:ba:d6:16:69:71:d6:61:96:c4:57:95:f5:0c:4c:27:ab:8c:
         a6:e1:5f:40:98:d7:dd:be:65:28:2b:57:4f:a6:17:cf:d9:65:
         d9:4f:bf:6d:7a:37:7d:9d:d7:19:47:07:68:9c:6e:44:34:47:
         3d:94:f3:c4:0a:9d:26:dc:ea:67:7a:02:6e:41:88:b4:4f:3a:
         1d:94:31:6b:e9:48:c3:a0:ca:00:53:dd:48:33:20:ff:1e:6f:
         16:36:55:75:38:e3:7d:12:82:7b:41:aa:07:65:1f:bf:82:c7:
         e7:62:08:81:80:38:0f:61:c0:d2:71:bc:e1:cc:3b:d1:23:36:
         f6:a9:ca:32:c2:30:f3:7a:17:c2:dd:84:a4:12:3b:f2:61:28:
         8e:cf:16:b0:ff:f6:e4:0a:0b:bc:d3:ea:9a:62:37:03:f8:38:
         f2:1b:b2:26:67:4c:33:b6:56:c6:1a:49:81:93:6e:d2:ad:43:
         78:f8:36:e3:2d:e3:db:27:cc:20:a0:81:b7:17:28:48:9b:86:
         b0:e9:17:16
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUPjh5zSFneBQXGOtPs+qPsePsInIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNTExMjMwMjA0WhcNMjQwNTA5MjMwNzA0
WjAzMTEwLwYDVQQDEyhFMkJFMzc5MEQxM0UzMEE2MjY2NDUyQUM2MTRDNTYzQzlE
RkQyOUI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4OILMm1sUFI
Lvf97VMPbmIj7W1wksjKT8OqI9D9R1GK4/aCtbc1Eouvq4spstit0bgFKWB/JnNS
/aKrjDMX6Dm7e4sHPLfmkcBd8joBI3Gwc8nbhPQp+cIGDHAomuTQ6feUcMF7YPD5
pYgl9MW3wBFhtDJp94Z4AJjPXijlHKz5Kt1m42VznTBRAbZmV9nesotzZX88qDSP
aaldWiWVQwYbACw419gHQ0qHfroa9rilfTKZeLGjBLUk5Y0++ZKreJvbdBZAU8R7
JbvDKnajSk3931AEwKSyH2ChkLWk4wrMVq+OiVtRSD1RtQr9cMEdQ6KDS7hdtppu
ihf9tOotwwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFOK+N5DRPjCmJmRSrGFMVjyd
/Sm0MB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzMyMzAzNDJlMzkzMzJlMzEzOTM1MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzQzOTM5MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMxdwzANBgkqhkiG9w0BAQsF
AAOCAQEAdBxF/XNzkf3zB6w9h+gmxeLwhBeK/5XCqcJJk8robIg4d9AgrMNErSl+
+pO1d/ZIyOJ8RdOW7brWFmlx1mGWxFeV9QxMJ6uMpuFfQJjX3b5lKCtXT6YXz9ll
2U+/bXo3fZ3XGUcHaJxuRDRHPZTzxAqdJtzqZ3oCbkGItE86HZQxa+lIw6DKAFPd
SDMg/x5vFjZVdTjjfRKCe0GqB2Ufv4LH52IIgYA4D2HA0nG84cw70SM29qnKMsIw
83oXwt2EpBI78mEojs8WsP/25AoLvNPqmmI3A/g48huyJmdMM7ZWxhpJgZNu0q1D
ePg24y3j2yfMIKCBtxcoSJuGsOkXFg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org