Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e39362e302f32342d3234203d3e203330303831.roa
File:                     36342e3230322e39362e302f32342d3234203d3e203330303831.roa (raw, json)
Hash identifier:          PkSJl/DI79orXAfzCWhPohvn+/KjwG4UEirAOGha/sM=
Subject key identifier:   38:B9:FC:50:DE:3E:68:2E:06:6B:EE:83:5C:F4:FD:89:80:24:3D:4D
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       2C7FACAF6062914F80BEF0F618A4E7041FCB83B1
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e39362e302f32342d3234203d3e203330303831.roa
Signing time:             Tue 11 Apr 2023 13:29:27 +0000
ROA not before:           Tue 11 Apr 2023 13:24:27 +0000
ROA not after:            Tue 09 Apr 2024 13:29:27 +0000
asID:                     30081
IP address blocks:        64.202.96.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7f:ac:af:60:62:91:4f:80:be:f0:f6:18:a4:e7:04:1f:cb:83:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 11 13:24:27 2023 GMT
            Not After : Apr  9 13:29:27 2024 GMT
        Subject: CN=38B9FC50DE3E682E066BEE835CF4FD8980243D4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:32:b3:59:80:2d:06:1e:98:c5:ee:bc:93:5c:
                    a4:45:e7:4a:64:3a:57:21:83:a8:d6:31:c7:ac:2b:
                    b1:62:a3:33:1d:f5:53:59:bb:20:12:fc:5b:24:68:
                    82:77:1f:06:36:f4:7e:c7:8d:83:a4:86:0e:d7:85:
                    52:f3:2d:cb:2d:c1:ec:81:45:3e:54:eb:a5:82:32:
                    f7:93:c0:de:07:ca:38:33:6f:50:d1:d0:e5:22:2c:
                    04:85:14:d5:b3:76:f7:3e:ea:57:fb:f0:53:e3:03:
                    0c:54:8b:77:7e:ff:31:49:58:4f:c8:e7:73:1e:e1:
                    78:13:1c:d0:bd:6b:dd:d2:30:42:c3:6a:48:9c:86:
                    d7:69:4e:68:ab:77:92:07:03:67:f5:8e:52:dd:94:
                    66:a1:94:2f:84:8c:7c:9c:3b:e6:d0:30:87:23:34:
                    37:08:93:30:cd:a6:a1:a8:70:56:c5:b7:4e:00:69:
                    db:69:c7:66:0a:9f:72:99:2b:18:ae:95:c5:88:92:
                    6b:38:59:69:7b:82:fc:7e:6c:f3:57:4f:b4:89:ef:
                    91:3d:8c:39:b4:be:e7:cb:10:8c:13:4f:3f:c1:ad:
                    76:c5:7e:f3:3f:0a:29:1f:17:75:89:5c:5f:0d:01:
                    a7:71:75:52:fa:75:a7:d0:7a:9f:9e:c1:00:64:08:
                    96:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B9:FC:50:DE:3E:68:2E:06:6B:EE:83:5C:F4:FD:89:80:24:3D:4D
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e39362e302f32342d3234203d3e203330303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:01:76:84:6e:41:9b:57:6d:fd:bf:f4:d4:d7:69:18:a2:7f:
         d6:98:4e:f1:5b:10:6f:0b:31:50:a1:03:d5:68:98:fa:2b:06:
         5a:2e:49:99:1d:aa:a8:46:41:85:f5:0c:4d:6a:17:96:8f:10:
         d9:3d:de:c8:76:3d:ed:2f:c3:19:e6:dd:7a:74:7e:8e:39:e5:
         01:65:bd:f4:a9:22:a2:5d:11:1d:d3:58:65:f7:00:40:6d:70:
         27:f7:1b:49:7e:86:41:ba:03:fd:2e:f1:96:39:f2:f5:d1:46:
         62:26:9a:85:eb:d0:5e:ae:27:72:2c:eb:4a:bb:95:46:bd:37:
         99:72:7e:cb:3d:1a:11:b5:97:f4:88:e8:7b:07:87:d7:cf:c2:
         54:6d:cf:8a:09:e9:42:92:68:00:81:a3:82:ab:51:cb:6f:26:
         8b:3a:25:55:06:7d:26:cc:5b:43:ed:42:cf:05:a6:61:2d:1c:
         00:e2:61:52:d1:6d:4b:5a:dd:3a:6b:9d:bd:04:88:b9:58:f1:
         7b:21:2c:56:d7:b5:6c:9b:d9:36:f9:9f:da:c0:55:85:f0:53:
         9f:03:f6:15:cf:fb:d6:17:e1:66:95:30:b5:6e:19:70:43:d8:
         8a:4c:34:4a:91:ad:99:ab:99:9e:d6:7a:fc:ed:52:3c:66:65:
         d3:3b:ad:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org