Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/32332e3137352e3139322e302f32352d3235203d3e203534343736.roa
File:                     32332e3137352e3139322e302f32352d3235203d3e203534343736.roa (raw, json)
Hash identifier:          zo9qXal2jI5vVVdbMvl5DN1jzHrM3jQTZqi7q90b4Pk=
Subject key identifier:   CC:46:0F:A2:CC:54:32:E4:65:15:95:32:3E:7E:01:D5:BE:6C:F6:58
Certificate issuer:       /CN=63ef6ba7c75b0732465686b4f94bffe5c8f62e466a4f048b0a
Certificate serial:       1BA374D02311F1655BD39E9D154C3D4B60B1954D
Authority key identifier: E5:2C:37:7F:6C:65:01:F9:CA:9E:EB:01:8F:66:22:B1:DC:E9:86:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/63ef6ba7c75b0732465686b4f94bffe5c8f62e466a4f048b0a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/32332e3137352e3139322e302f32352d3235203d3e203534343736.roa
Signing time:             Thu 16 Feb 2023 15:20:00 +0000
ROA not before:           Thu 16 Feb 2023 15:15:00 +0000
ROA not after:            Thu 15 Feb 2024 15:20:00 +0000
asID:                     54476
IP address blocks:        23.175.192.0/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a3:74:d0:23:11:f1:65:5b:d3:9e:9d:15:4c:3d:4b:60:b1:95:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ef6ba7c75b0732465686b4f94bffe5c8f62e466a4f048b0a
        Validity
            Not Before: Feb 16 15:15:00 2023 GMT
            Not After : Feb 15 15:20:00 2024 GMT
        Subject: CN=CC460FA2CC5432E4651595323E7E01D5BE6CF658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f5:49:00:25:0d:39:df:04:2e:60:7e:0f:76:
                    05:a3:58:82:f5:0e:09:e6:c9:ed:ac:af:9d:d4:93:
                    30:e6:45:00:48:56:0d:6c:5e:93:4e:46:dd:1a:e9:
                    43:89:10:47:00:58:d0:dd:cb:34:73:53:5b:60:cd:
                    20:f5:60:6b:89:cf:23:9d:5f:4c:ee:33:1a:7e:2f:
                    76:ba:01:a1:84:97:d6:02:e9:b5:5f:03:8e:a0:ac:
                    d1:ba:44:ce:28:a0:27:56:b6:da:38:6c:c0:fe:c0:
                    84:b6:2f:b7:ef:17:ac:72:f2:de:61:5f:ec:6f:6f:
                    66:4c:b1:9c:df:fc:a3:2d:b4:5c:f8:68:1a:e0:ad:
                    12:0a:99:84:78:3d:22:7f:d6:5c:1e:72:e6:97:17:
                    e9:c9:48:6f:0c:46:1d:ac:da:3a:44:e9:48:83:81:
                    99:51:b5:4d:2f:e8:fd:bc:b6:55:5a:a3:45:2c:96:
                    f4:ec:38:7e:17:f5:18:4d:ec:18:19:8d:3b:3a:6b:
                    bd:ed:d6:f9:35:9a:6b:ef:97:e7:14:7d:22:72:c4:
                    b9:19:65:a9:71:ae:c4:4b:f2:9c:66:2d:62:49:d5:
                    49:c8:0e:c7:0a:9c:14:d6:55:0d:55:f3:5e:4f:a2:
                    c6:73:f2:7b:4e:37:26:08:1d:d5:c2:8f:44:f1:c8:
                    a1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:46:0F:A2:CC:54:32:E4:65:15:95:32:3E:7E:01:D5:BE:6C:F6:58
            X509v3 Authority Key Identifier:
                keyid:E5:2C:37:7F:6C:65:01:F9:CA:9E:EB:01:8F:66:22:B1:DC:E9:86:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/E52C377F6C6501F9CA9EEB018F6622B1DCE98600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/63ef6ba7c75b0732465686b4f94bffe5c8f62e466a4f048b0a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/32332e3137352e3139322e302f32352d3235203d3e203534343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.192.0/25

    Signature Algorithm: sha256WithRSAEncryption
         53:c2:95:0b:7f:5f:8b:17:71:59:86:d0:44:fa:2c:74:25:a4:
         9f:60:ff:68:01:98:26:73:02:25:05:38:bd:8b:48:86:d0:88:
         66:eb:85:9c:00:e8:43:5f:00:e5:9a:30:9c:ed:4b:3f:be:b9:
         92:e0:11:bf:4d:ed:4e:3a:dd:e3:57:7c:1a:e6:8d:84:49:c0:
         5f:b4:b5:f4:96:e3:66:f7:40:33:34:5f:bb:95:28:2a:c0:76:
         7c:4c:bd:da:35:e1:67:93:bb:b5:78:4a:b1:5c:0e:3b:ab:68:
         6e:3d:59:2d:3d:6e:c4:49:42:a6:c1:25:a6:e7:d0:e4:65:0f:
         39:80:69:ec:bd:c8:57:b7:3c:ef:a0:12:23:3f:66:16:60:55:
         8b:f8:9b:8c:2b:48:75:67:4d:88:4b:3b:b3:5a:b5:2a:0e:58:
         28:ca:8e:47:d0:a5:2f:79:20:11:f3:f9:c8:c4:af:a7:d6:5c:
         ba:67:cd:30:bf:65:c5:40:98:f1:27:3c:09:eb:0c:1a:78:82:
         a6:bb:56:6c:63:61:a6:bb:29:f3:42:b9:e4:93:7f:de:c4:cf:
         29:bb:1a:41:7a:81:4f:8f:c4:11:65:c3:9e:ac:95:a9:83:c3:
         56:85:3c:6e:95:64:8b:a8:cd:15:70:8d:b0:3b:d4:f9:bb:b9:
         48:89:aa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org