Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3138392e302f32342d3234203d3e203631333137.roa
File:                     3230352e3233342e3138392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          xWfSYf4yW9zZIQk6fggQfBiXBrPkgRPFCg2vtuQztj8=
Subject key identifier:   FA:7B:33:7E:40:A4:5F:C7:75:42:E4:53:6D:B1:CE:6E:B2:88:2C:3A
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       0D57958BBC4976EFF31E6B4B43BA14579CC7345B
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3138392e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 04 Apr 2023 08:34:29 +0000
ROA not before:           Tue 04 Apr 2023 08:29:29 +0000
ROA not after:            Tue 02 Apr 2024 08:34:29 +0000
asID:                     61317
IP address blocks:        205.234.189.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:57:95:8b:bc:49:76:ef:f3:1e:6b:4b:43:ba:14:57:9c:c7:34:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr  4 08:29:29 2023 GMT
            Not After : Apr  2 08:34:29 2024 GMT
        Subject: CN=FA7B337E40A45FC77542E4536DB1CE6EB2882C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:25:dd:80:26:3b:f3:32:0f:77:d3:77:fe:d4:
                    82:36:49:73:ac:54:4f:00:d6:7f:4d:29:5b:71:de:
                    f4:50:3d:06:39:6f:96:24:91:9e:9b:93:6c:92:31:
                    aa:09:96:e9:9f:ed:8c:46:fd:c1:a7:a9:cb:8f:1a:
                    6e:d9:92:d9:b9:7f:99:f7:80:53:48:00:ca:c6:4f:
                    4f:a2:c1:12:ff:41:8d:f9:41:7a:b3:67:96:ec:66:
                    74:39:c6:cb:59:9c:cb:ea:dc:d1:7f:b1:80:b7:72:
                    9e:07:79:03:fc:80:40:11:e3:88:c9:ec:f8:1c:e4:
                    ce:44:0e:53:92:20:cf:0d:09:c3:5d:b3:fa:3b:a2:
                    ff:87:78:78:7e:7b:48:e9:99:bc:29:b2:06:6e:a7:
                    2e:e2:66:00:c1:cb:62:fb:0e:2b:a6:f7:33:39:ea:
                    27:c5:d5:20:03:4e:80:47:50:b1:49:55:6d:e5:30:
                    c5:d1:3c:fe:bd:1b:7b:f6:3a:a2:8d:e4:db:de:75:
                    05:0d:8e:81:05:b7:0b:d6:26:3f:84:96:25:bc:e7:
                    dc:91:55:75:36:f4:8c:d9:89:ab:ce:6b:5b:97:c2:
                    49:94:3f:fc:60:5e:e7:7d:78:6f:ef:f3:80:e9:e1:
                    42:d7:42:43:be:a0:48:44:9e:50:7a:80:7a:d6:6d:
                    3e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7B:33:7E:40:A4:5F:C7:75:42:E4:53:6D:B1:CE:6E:B2:88:2C:3A
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3138392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:13:07:05:10:09:48:48:4d:31:4b:26:4d:d4:f4:f5:97:8e:
         b7:06:ea:ac:9f:83:f1:a7:aa:2e:05:2c:56:54:bf:39:dc:20:
         1e:a0:d4:0e:1d:02:68:54:d3:af:c6:97:22:b0:4a:c0:74:72:
         a7:36:c4:7a:60:05:90:fa:9c:36:61:2e:c3:40:47:99:04:8d:
         3e:0c:fd:34:00:98:24:c1:9b:dd:5d:c4:34:88:7e:9e:d7:28:
         8e:c8:f4:2d:5e:20:1d:d0:4e:b6:c2:db:ba:2f:45:ea:87:a3:
         6f:d3:a2:e2:97:26:71:e0:2f:e3:b2:af:11:6e:ea:a5:e8:76:
         a8:4e:6d:1a:4f:89:b8:00:98:5b:32:51:b4:d8:5f:88:3c:fc:
         f6:d2:82:f8:41:70:86:35:d8:c2:1c:4c:77:6a:d6:cf:72:35:
         30:a2:3a:ba:db:1f:f2:c5:17:71:dd:ec:cd:bd:85:ef:64:d7:
         22:b1:a5:7e:eb:dd:98:dc:3d:5f:58:f9:15:c0:b2:e0:da:df:
         a2:b0:29:f1:2e:ca:c6:60:da:af:77:88:f2:ce:20:f3:41:d4:
         fe:09:98:72:95:6c:23:a0:a6:ef:6b:53:47:26:fe:1d:d4:94:
         fb:c2:26:d4:27:69:12:2a:ec:c8:2e:e1:9e:cb:45:e2:a4:42:
         2b:43:eb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org