Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e3130302e302f32342d3234203d3e203239383032.roa
File:                     36342e3230322e3130302e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          6ugodaA+vD+bJP03l9d9g23G8E3vgLQFAx8NMwWgwuo=
Subject key identifier:   BC:D9:D3:73:58:01:59:F7:7C:C4:F0:AB:22:57:58:43:54:C9:F5:9E
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       7676A8851F9A84AA65EF666E2CC32CEAB9E45CBC
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e3130302e302f32342d3234203d3e203239383032.roa
Signing time:             Tue 11 Apr 2023 07:34:21 +0000
ROA not before:           Tue 11 Apr 2023 07:29:21 +0000
ROA not after:            Tue 09 Apr 2024 07:34:21 +0000
asID:                     29802
IP address blocks:        64.202.100.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:76:a8:85:1f:9a:84:aa:65:ef:66:6e:2c:c3:2c:ea:b9:e4:5c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 11 07:29:21 2023 GMT
            Not After : Apr  9 07:34:21 2024 GMT
        Subject: CN=BCD9D373580159F77CC4F0AB2257584354C9F59E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:20:24:e1:de:25:b2:b2:ac:40:45:c5:69:ec:
                    54:ac:5b:c2:67:61:fa:6c:ad:63:ff:73:db:d5:9a:
                    76:cf:e9:80:b8:55:6e:1d:25:a5:b2:7e:17:22:5e:
                    7d:43:fc:61:2c:61:c2:2b:2e:e0:de:51:c1:a5:18:
                    2d:b5:e3:9e:66:3c:8f:5b:09:ad:dc:26:1c:45:ed:
                    5e:48:fb:8b:be:42:98:49:a4:5c:cc:63:20:a1:23:
                    d8:14:db:a1:97:e2:49:2a:e3:1a:d2:49:2b:72:5b:
                    3d:1a:85:b4:50:3e:e8:5a:cf:b3:f5:cd:73:6d:6c:
                    0f:60:b4:e5:96:87:79:f8:85:b5:83:21:23:42:97:
                    0c:0e:46:a2:83:0d:f4:01:da:22:94:a1:5a:08:13:
                    9d:c6:79:21:7a:91:b2:0d:79:0b:1c:83:e6:0d:ee:
                    95:3f:5d:03:f1:24:c4:32:f6:71:d3:a1:9c:ac:04:
                    11:b1:60:02:6d:03:ac:48:e2:ca:d7:c8:4c:8d:24:
                    a7:9d:72:3b:08:48:07:e9:bc:1c:c6:74:28:b0:8b:
                    5f:74:e6:8c:1e:1d:5d:cc:43:a5:9a:1c:c3:4d:85:
                    7b:50:fe:72:b1:d1:75:c8:10:57:49:3f:71:90:3a:
                    a9:39:03:13:11:6e:20:56:8c:8d:03:f7:51:47:2b:
                    b2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D9:D3:73:58:01:59:F7:7C:C4:F0:AB:22:57:58:43:54:C9:F5:9E
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e3130302e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:20:56:9f:d4:25:10:d1:5d:e1:75:9d:ae:db:06:06:cf:48:
         d9:d9:15:6e:4f:f9:19:62:b9:ee:3a:07:c6:f4:c6:38:64:c9:
         48:52:8b:61:18:07:b0:4e:24:e2:b0:f7:08:67:90:ee:f9:40:
         13:71:9a:0c:42:f2:15:40:3b:39:20:08:c1:cd:12:20:43:6b:
         16:a8:e0:89:f4:65:8a:8a:e2:61:6c:0b:c6:37:a0:e0:52:3b:
         79:54:29:d3:7a:2d:b9:89:e0:bf:51:b3:1e:91:9b:c7:aa:75:
         3e:37:a0:b5:3f:12:48:de:d5:2b:4e:51:37:87:b5:37:6a:92:
         8e:c1:17:33:15:96:42:47:81:11:be:be:cc:c6:48:b0:f7:3d:
         8d:7f:55:77:6c:80:37:c5:53:37:af:3e:59:39:d9:23:1b:2d:
         e2:f1:ca:7c:98:93:ce:f8:58:53:6a:9c:14:38:e0:b2:26:39:
         ee:8a:46:02:35:e0:be:98:06:85:3b:85:bc:0a:29:60:38:53:
         2e:a1:ac:ed:a6:c6:0b:01:43:31:81:26:f8:30:bb:fe:62:67:
         fb:02:c8:de:b3:2b:e4:ee:e5:80:da:5e:11:c2:e8:7c:96:9c:
         c9:9b:a6:79:77:17:46:5b:26:5f:e9:9f:54:48:fb:0e:fb:33:
         22:fe:5c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org