Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3231302e302f32342d3234203d3e203631313338.roa
File:                     3230342e39332e3231302e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          TCNJWlrOas/JNTO86+nI7jBZWnbT4dmJE8yUFFlvuFI=
Subject key identifier:   DA:72:84:F6:F3:86:DF:1C:F3:3C:D9:CC:24:0C:F1:39:A5:48:B2:07
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       082F69FE106867221C40056AA97C50AEFC0BE2BA
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3231302e302f32342d3234203d3e203631313338.roa
Signing time:             Tue 04 Apr 2023 13:27:42 +0000
ROA not before:           Tue 04 Apr 2023 13:22:42 +0000
ROA not after:            Tue 02 Apr 2024 13:27:42 +0000
asID:                     61138
IP address blocks:        204.93.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2f:69:fe:10:68:67:22:1c:40:05:6a:a9:7c:50:ae:fc:0b:e2:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr  4 13:22:42 2023 GMT
            Not After : Apr  2 13:27:42 2024 GMT
        Subject: CN=DA7284F6F386DF1CF33CD9CC240CF139A548B207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5f:27:f4:eb:3a:87:6d:fb:ce:c4:1e:4e:62:
                    dd:83:ec:96:3a:36:97:29:23:79:cf:4c:fe:c4:3e:
                    53:ae:53:8e:5d:ee:42:e2:13:e4:ea:67:2c:8f:2f:
                    31:39:2e:22:c6:eb:08:d5:2f:c2:88:2d:6d:0a:64:
                    c9:28:47:c0:eb:e7:c5:80:15:bb:59:d0:7e:f6:d7:
                    d7:4e:9b:94:2a:8a:ef:71:49:79:09:74:91:ec:d4:
                    18:95:f9:3a:a1:4b:42:13:4d:84:92:c6:a2:f8:53:
                    90:25:86:8f:a1:56:bc:fc:21:95:17:6b:b3:b0:4b:
                    c7:81:f4:42:7c:00:76:fb:fe:3b:35:5c:a4:da:f1:
                    7c:92:91:98:36:ed:b8:31:6a:af:e8:e0:40:db:75:
                    ca:57:5f:62:fa:86:fe:d6:7f:04:64:be:e1:90:6b:
                    f7:5e:fb:d2:12:4f:26:4e:9e:77:65:16:a7:c0:dd:
                    d8:56:c5:63:ee:c2:e6:32:6f:66:45:e7:e6:60:fb:
                    fd:bb:70:2f:28:67:ab:60:d6:46:9f:8b:55:42:5d:
                    88:4b:2b:b0:d5:9b:94:50:a4:0f:b2:e2:d9:3a:65:
                    78:f5:40:6d:5a:f6:da:64:fa:1b:c9:2f:59:d5:91:
                    72:05:db:38:59:36:93:ad:ae:4a:64:6f:13:e8:75:
                    37:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:72:84:F6:F3:86:DF:1C:F3:3C:D9:CC:24:0C:F1:39:A5:48:B2:07
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3231302e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:73:3e:9a:b0:c5:1a:12:3a:3e:ca:42:1e:1d:93:49:74:df:
         1c:85:b4:35:2a:17:15:44:1b:82:ae:9f:ad:77:f4:d9:68:91:
         b0:66:83:82:ff:b5:82:10:d6:be:21:d1:be:be:a8:43:d3:ff:
         ea:e4:96:b4:12:88:90:d9:4d:82:fb:83:e0:bc:88:71:a4:87:
         c4:53:d4:d5:b5:a2:09:82:76:61:8e:87:a4:6a:72:97:54:16:
         d9:45:77:fd:d5:fb:08:79:80:22:d5:ea:05:e0:f7:b7:64:b9:
         ba:f5:50:c0:99:19:4b:87:4d:e6:53:0d:8e:0a:41:e3:e5:3c:
         17:90:da:22:e1:97:2f:10:c2:8d:16:bc:db:13:eb:80:ef:c5:
         67:9a:58:f3:05:86:5f:28:56:4b:f9:5c:a6:93:03:0d:01:98:
         57:e3:63:80:c9:0e:1f:3e:02:76:da:dc:a0:bf:14:f0:0a:81:
         50:15:ba:ca:df:75:9e:63:6c:23:74:5d:d2:a5:79:ea:bc:e9:
         34:83:7f:49:51:57:d7:71:65:d3:71:4a:59:59:4b:8a:90:56:
         01:71:22:b8:5f:c3:39:7e:cf:45:d6:ce:dd:5e:5c:56:e2:99:
         a0:01:0b:e2:fc:0e:7c:bb:a3:c7:9b:36:e8:86:42:fe:04:b5:
         86:74:46:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org