Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e32392e302f32342d3234203d3e20323132343438.roa
File:                     37352e3130322e32392e302f32342d3234203d3e20323132343438.roa (raw, json)
Hash identifier:          ebl7W07KghZqODSpNQMCeB/9G6D4ZGFTTnztIhHcUrs=
Subject key identifier:   22:8D:04:BD:27:D2:DF:B9:73:52:C4:50:14:5C:5A:77:2A:93:B7:7D
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       299DF39C74E0B0099740F41FE690E4BE210A8F46
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e32392e302f32342d3234203d3e20323132343438.roa
Signing time:             Thu 04 May 2023 17:12:44 +0000
ROA not before:           Thu 04 May 2023 17:07:44 +0000
ROA not after:            Thu 02 May 2024 17:12:44 +0000
asID:                     212448
IP address blocks:        75.102.29.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9d:f3:9c:74:e0:b0:09:97:40:f4:1f:e6:90:e4:be:21:0a:8f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May  4 17:07:44 2023 GMT
            Not After : May  2 17:12:44 2024 GMT
        Subject: CN=228D04BD27D2DFB97352C450145C5A772A93B77D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d3:6a:2b:e2:c3:6b:38:df:f7:27:a9:f7:71:
                    c3:21:ba:04:4e:1c:8d:f2:4b:91:b4:07:cd:01:62:
                    91:3e:f9:ff:3c:8d:2a:49:c6:42:12:79:b0:22:84:
                    fa:ec:7f:56:46:a0:04:59:f4:53:19:ff:8d:75:6f:
                    73:d3:c9:6b:7a:5e:08:2f:64:53:8b:41:d8:d8:e7:
                    d5:6e:2f:95:ce:fd:ed:0f:46:39:49:64:43:c5:cb:
                    6f:0f:21:14:8d:bd:76:51:21:c0:4f:f5:8f:41:55:
                    ad:af:29:b8:ce:46:63:86:06:aa:50:4a:21:59:31:
                    e6:33:12:ef:4e:52:3e:95:4b:7c:61:fa:96:ef:a1:
                    70:af:88:f7:9e:5c:5b:56:bc:3a:dd:45:a9:d0:69:
                    18:f8:13:dd:13:2f:47:d4:3b:4d:c4:a4:b3:21:1b:
                    87:19:a9:d4:48:26:9f:1c:53:98:e7:fb:ef:e9:fd:
                    59:b6:60:b4:e2:92:56:cc:77:38:c2:bd:da:0c:16:
                    28:6f:7f:96:44:a5:23:77:52:1b:52:9b:8e:37:2e:
                    00:16:5c:ad:3c:a3:dd:52:d5:80:84:0a:d1:37:a2:
                    ac:a2:9e:be:e6:cd:48:0a:5b:35:55:20:cf:39:be:
                    9a:a7:e0:5b:a4:e2:e4:98:9a:f3:87:71:6a:17:0e:
                    cd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8D:04:BD:27:D2:DF:B9:73:52:C4:50:14:5C:5A:77:2A:93:B7:7D
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e32392e302f32342d3234203d3e20323132343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:de:c7:37:56:0d:ef:14:70:53:e2:1c:b2:be:b4:95:27:9e:
         93:50:a8:cd:f9:06:ff:b4:0a:3b:c7:04:f8:91:0b:66:41:fd:
         92:93:b6:79:29:f9:8e:cb:16:7d:4b:13:b9:3b:b1:5f:5a:54:
         5d:07:da:65:83:b6:7e:19:b4:c1:17:4f:b9:02:1b:a3:77:c9:
         9e:ae:43:91:13:e0:ee:d2:15:3b:b1:fe:11:bf:57:b6:ed:4d:
         ec:37:4e:6b:57:ea:f2:ff:75:c6:75:49:32:79:c1:d9:d3:f2:
         62:0b:34:97:ac:60:31:8e:33:86:b8:79:be:f1:dc:f2:1f:7c:
         29:af:0c:1a:d5:8e:ec:ea:df:3f:8c:9f:81:bb:eb:d1:39:32:
         25:fd:62:01:1a:62:ab:52:39:38:21:3d:ab:60:88:dd:cb:84:
         dd:02:97:2e:c0:49:12:56:f5:46:41:c9:e6:2f:19:69:78:c4:
         3f:00:2b:f1:18:20:1e:d2:07:4e:eb:98:46:de:57:23:a4:88:
         91:b6:0d:29:8d:69:2f:1b:53:3b:3e:39:9d:77:6a:36:a3:02:
         4f:de:45:79:27:7c:0d:c3:95:70:5c:1e:99:c5:92:99:58:f3:
         07:35:6e:81:72:27:db:9c:cc:ca:dd:f8:5a:01:ae:63:24:18:
         9c:2e:09:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org