Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3139332e302f32342d3234203d3e20383334.roa
File:                     36362e3232352e3139332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          JzRzthqDB5yfU3fsch9iu2M6Aot1pt20kCENVKaKmHw=
Subject key identifier:   A5:5D:41:9A:55:34:63:91:D6:6A:CB:83:7B:26:54:C8:DF:84:B3:CB
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       2DE162AB9223039F4479734F2C81C45A592382F3
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3139332e302f32342d3234203d3e20383334.roa
Signing time:             Thu 18 May 2023 10:00:05 +0000
ROA not before:           Thu 18 May 2023 09:55:05 +0000
ROA not after:            Thu 16 May 2024 10:00:05 +0000
asID:                     834
IP address blocks:        66.225.193.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e1:62:ab:92:23:03:9f:44:79:73:4f:2c:81:c4:5a:59:23:82:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 18 09:55:05 2023 GMT
            Not After : May 16 10:00:05 2024 GMT
        Subject: CN=A55D419A55346391D66ACB837B2654C8DF84B3CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f6:70:56:fa:25:6e:e2:54:39:0f:2e:6f:53:
                    c4:a3:a8:2a:2e:04:55:2f:d6:a7:77:97:cc:f3:3d:
                    6a:b0:08:4d:00:72:91:95:ab:48:e3:39:4f:84:44:
                    9a:08:a7:08:ae:fc:e8:4c:08:db:80:00:85:f8:63:
                    2a:20:e2:45:7c:32:24:08:2f:f7:b3:8e:fa:98:1e:
                    d4:9f:42:fe:78:56:b9:bb:28:24:a3:a3:2e:df:f6:
                    79:b0:23:71:ca:05:52:b6:00:57:f2:f8:e3:d1:ee:
                    a8:5b:db:86:03:f9:6c:ae:7d:9f:46:b4:26:e5:02:
                    20:5a:70:8b:70:9d:36:10:56:35:44:06:48:a2:2c:
                    f9:fa:49:12:da:38:a4:5d:b5:3b:2c:60:2d:36:15:
                    7d:e0:25:eb:f0:06:38:01:54:1c:20:7c:c9:dd:29:
                    99:6d:45:63:fd:5d:5c:2a:5a:69:ee:70:09:4b:af:
                    75:f3:72:4c:6f:fb:9e:2e:db:3f:5f:f3:05:cb:0b:
                    b4:13:5b:8a:37:d7:b1:36:27:ac:36:0a:7f:db:06:
                    e4:ad:26:d0:50:05:a9:4a:32:a7:f0:79:67:52:c6:
                    29:3e:9d:df:d9:7d:3a:89:a1:a8:0e:b7:e2:9a:42:
                    ef:bf:72:66:49:3c:ea:bf:34:b6:1d:a7:f4:36:0e:
                    cd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5D:41:9A:55:34:63:91:D6:6A:CB:83:7B:26:54:C8:DF:84:B3:CB
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3139332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:fd:67:21:e3:ea:43:dc:a3:73:b8:46:43:2e:11:e0:e1:9b:
         4c:e5:b7:35:f2:37:a0:8b:2a:51:f9:c1:ff:09:97:64:e3:2c:
         cb:a9:a3:0b:f1:c9:c4:d6:71:53:9d:f9:9c:5d:db:f2:06:bc:
         b5:95:d0:3c:e5:ac:57:54:db:91:58:ef:bb:48:e6:5b:07:6a:
         52:30:f5:20:ea:2a:c3:27:60:86:ab:41:2a:8b:4e:2c:50:75:
         ce:d3:18:bf:22:37:60:12:5a:2c:28:bf:fb:38:24:91:ef:07:
         67:14:ef:44:9f:09:a3:ea:a6:22:91:db:f4:46:bb:78:0a:15:
         ff:72:65:ef:1c:90:30:69:82:54:42:e6:ae:4d:d3:e4:2e:88:
         dd:63:31:75:80:2d:fb:c4:a9:ff:66:d0:b6:a4:da:3b:51:53:
         29:c5:56:fb:3c:b5:e8:64:cc:5f:31:cc:15:23:0d:ad:04:24:
         8d:7e:3f:3a:4d:4b:42:f6:1a:63:ec:97:9d:72:b1:0c:e5:26:
         f7:bc:5b:c8:5d:1d:f5:f4:d1:b7:13:84:a8:4f:4c:db:74:22:
         e4:5f:95:b5:9b:63:60:49:9e:80:d5:76:b6:ea:27:46:67:09:
         77:86:54:b4:13:4c:48:ff:c0:cd:8a:0a:22:cc:de:71:ee:eb:
         6b:10:38:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org