Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3134322e302f32342d3234203d3e203631313338.roa
File:                     3230352e3233342e3134322e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          lCQ92dNkMKLuIU8uIp+LaghRjRiOSIsC8pQgpEjt1p0=
Subject key identifier:   2C:63:F4:DE:EA:61:0E:8B:30:CD:59:12:8C:89:28:A7:63:A7:A8:FE
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       7DA6FD05DC060C57D2140A1E55E403194ED35F02
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3134322e302f32342d3234203d3e203631313338.roa
Signing time:             Wed 24 May 2023 17:38:56 +0000
ROA not before:           Wed 24 May 2023 17:33:56 +0000
ROA not after:            Wed 22 May 2024 17:38:56 +0000
asID:                     61138
IP address blocks:        205.234.142.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a6:fd:05:dc:06:0c:57:d2:14:0a:1e:55:e4:03:19:4e:d3:5f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 24 17:33:56 2023 GMT
            Not After : May 22 17:38:56 2024 GMT
        Subject: CN=2C63F4DEEA610E8B30CD59128C8928A763A7A8FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c5:bd:93:89:2e:39:d7:76:70:c2:ec:47:6b:
                    a4:bc:ba:c4:db:b9:09:59:50:56:36:79:45:db:f6:
                    34:18:6f:81:56:bb:9f:1b:0b:38:df:08:e0:bf:7b:
                    53:1c:b3:84:ba:12:99:32:0a:12:8c:b3:76:83:17:
                    47:95:93:4d:f7:be:b3:ba:69:4e:46:b1:bb:7c:9d:
                    96:d7:e2:16:e8:ff:50:4d:1d:e1:4e:37:be:d3:5a:
                    0b:5a:7d:10:10:e2:4e:3b:4c:fc:d6:67:41:fc:64:
                    96:37:01:ea:81:5e:49:ed:8c:71:2c:74:e9:06:b1:
                    12:43:dc:28:f4:75:03:47:82:2a:72:50:0d:71:13:
                    a5:c2:c5:19:db:90:10:88:6e:27:56:7d:c6:87:c2:
                    61:d9:d0:ec:f4:8f:6b:64:f6:a6:36:a9:4a:20:e2:
                    85:16:fe:16:0a:b9:92:61:f5:fb:5f:a8:bc:6d:6e:
                    be:06:09:c8:2d:ff:03:74:03:c8:21:a9:42:b8:f9:
                    e9:61:42:4b:2c:2b:c4:d6:75:a0:47:4e:ee:16:b5:
                    8d:d1:af:7d:76:16:83:0c:6f:86:5b:94:aa:3c:db:
                    0a:a3:5e:2b:3a:90:11:ce:c2:19:38:41:2a:0a:07:
                    08:25:d1:32:42:10:1e:c6:fb:ec:f7:3f:67:76:dd:
                    89:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:63:F4:DE:EA:61:0E:8B:30:CD:59:12:8C:89:28:A7:63:A7:A8:FE
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3134322e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:1c:51:ba:8c:b1:1f:6c:97:e6:6e:9c:36:33:e6:69:a9:70:
         67:ed:f5:87:90:c5:34:4a:7d:07:d0:c6:96:24:79:b4:82:37:
         4e:cf:c6:6a:f9:aa:af:d2:69:60:bf:ed:15:de:53:05:a9:84:
         56:3d:ac:05:98:46:a2:f6:fe:ba:c1:70:45:83:5e:b8:99:64:
         2d:ed:67:e9:e1:7b:c4:e0:00:54:21:d3:6e:9c:90:b0:2a:e4:
         94:0e:ec:de:0a:e6:bc:8d:76:42:d7:61:3c:a8:bd:ee:9f:5d:
         7f:9a:10:76:ad:32:fb:ae:6d:3d:85:41:60:00:69:a5:8d:2d:
         26:6a:16:14:26:5e:9c:88:fa:54:a1:6d:08:4d:e2:53:c5:32:
         cc:17:fb:f7:57:55:31:5e:b2:f7:28:0e:56:86:2d:9b:55:ff:
         ee:35:4c:53:2f:a1:98:36:f5:94:68:1e:e6:aa:ee:13:25:c8:
         4a:5c:9a:cd:2c:1c:06:72:4f:b9:13:c1:41:ac:e9:76:f1:3a:
         52:3f:cb:41:a2:95:f0:2f:c8:cc:9b:2f:ff:79:10:74:3b:30:
         b6:ae:bb:41:af:07:61:dc:fd:a9:18:12:cb:6a:f3:f6:ba:b6:
         25:ff:13:ef:94:bc:d9:84:cd:3a:64:b1:bc:70:70:72:3c:75:
         0b:fc:91:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:34 2024 by rpki-client on console-ams.rpki-client.org