Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3133332e302f32342d3234203d3e203439393939.roa
File:                     3230352e3233342e3133332e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          K6r8rBLJYHQZq3SNerytjQw0nnZxfOsN6aFty52u7xo=
Subject key identifier:   E1:C6:CA:63:26:2A:7D:FA:37:BE:42:D2:68:C0:16:08:C6:5A:D5:7C
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       488BC45DEB9AAEBA035142EA71488ECA9C9B1FAA
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3133332e302f32342d3234203d3e203439393939.roa
Signing time:             Sun 14 May 2023 19:07:19 +0000
ROA not before:           Sun 14 May 2023 19:02:19 +0000
ROA not after:            Sun 12 May 2024 19:07:19 +0000
asID:                     49999
IP address blocks:        205.234.133.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:8b:c4:5d:eb:9a:ae:ba:03:51:42:ea:71:48:8e:ca:9c:9b:1f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 14 19:02:19 2023 GMT
            Not After : May 12 19:07:19 2024 GMT
        Subject: CN=E1C6CA63262A7DFA37BE42D268C01608C65AD57C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:85:5d:25:e6:5c:18:b3:17:10:fe:43:59:
                    d9:0d:9b:b6:2c:df:ff:ab:eb:cb:95:b4:fb:a3:55:
                    7b:5d:f0:52:83:32:55:7d:42:79:fa:08:68:38:c6:
                    30:ca:8f:6c:28:44:b5:7c:87:a8:55:67:8d:3b:46:
                    c0:ad:f5:d8:ea:43:a2:6d:e9:5e:43:77:dc:c1:54:
                    8f:97:8e:f0:f0:2a:5c:29:96:c1:5f:e2:24:12:79:
                    fc:94:c1:cd:95:57:ad:de:20:9e:67:56:b0:02:fe:
                    75:d6:39:72:a6:50:32:8a:b6:8c:ee:dd:fd:9e:43:
                    d2:1a:6f:f5:67:00:f9:42:d9:18:39:32:68:a4:d1:
                    5b:58:92:e4:2a:43:11:aa:4a:19:36:1d:5b:4e:db:
                    25:78:77:9c:60:71:3d:c6:ed:1a:55:2b:71:82:60:
                    48:3e:b6:08:76:0b:f8:e3:aa:14:63:ed:8a:f6:fa:
                    70:b6:b6:cb:ac:2f:52:d7:b2:2e:09:71:72:e9:0a:
                    ae:b9:40:a2:67:09:5f:50:4a:79:96:c4:b1:75:fd:
                    db:4d:66:8d:97:49:05:32:2e:ae:bc:5c:5f:4c:ec:
                    e2:c5:bb:82:12:94:23:80:9e:fb:95:be:b8:6b:5d:
                    fe:60:f2:0a:63:aa:89:b8:b8:45:e9:77:7d:4f:66:
                    04:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C6:CA:63:26:2A:7D:FA:37:BE:42:D2:68:C0:16:08:C6:5A:D5:7C
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3133332e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:1c:98:2b:04:85:6b:2c:8e:db:ce:91:3f:64:da:39:8a:0d:
         58:ea:51:c3:cc:fe:64:6c:92:0f:fc:d7:e8:3d:8b:aa:98:66:
         ca:e9:8f:31:8d:33:8b:5f:39:d9:50:c8:b5:6d:d2:54:ce:05:
         5c:22:ec:19:6c:9c:09:db:82:4e:01:ad:65:ab:6f:76:36:81:
         b7:e4:37:f3:37:8f:96:eb:64:5e:9f:82:9c:cf:5a:24:b0:ca:
         1b:9e:0d:f8:96:63:90:25:9d:3f:8b:f2:c1:3d:0a:f4:e4:06:
         91:95:b8:9a:cc:64:8d:41:89:b6:4b:aa:22:66:80:d9:45:62:
         e2:7e:6c:b1:77:53:5a:87:d0:a7:ab:42:ea:d8:be:e6:4e:59:
         23:50:a3:34:09:f1:3f:73:81:2b:71:2f:8a:10:c5:1a:f6:da:
         f4:ec:92:e5:ca:35:d0:e5:e6:43:97:06:de:a5:eb:b8:23:36:
         9b:98:65:c8:79:3b:33:12:46:14:06:5c:9a:4b:d2:54:2b:42:
         1e:3c:2c:62:95:3d:a0:c9:2d:42:92:17:3c:74:72:77:5f:39:
         f8:f7:86:60:3e:f4:53:6c:15:ea:44:d0:4e:f5:1a:3f:1d:fc:
         fd:c6:bf:d9:1b:1a:a9:48:78:e7:47:06:e6:0f:cb:95:96:0c:
         c1:9d:ca:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org