Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/323630323a666236373a31323a3a2f34382d3438203d3e20333937323434.roa
File:                     323630323a666236373a31323a3a2f34382d3438203d3e20333937323434.roa (raw, json)
Hash identifier:          ABh9UHNtw9Jy4EGHWP+e6ta08CzQyeU84mzdxt0/GBY=
Subject key identifier:   16:2B:BA:65:7E:D1:27:FB:7E:BF:38:2A:F7:6C:56:ED:FC:BA:3E:C8
Certificate issuer:       /CN=79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33
Certificate serial:       0B6A6A0138F96B5A2084050E97E7CF2A5AA24E83
Authority key identifier: 3B:F7:67:28:9F:7D:AC:0C:15:00:93:8E:8E:C9:34:EB:E7:DD:7A:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0010301c-aa2d-4d35-97d4-8d947672bad4/79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/323630323a666236373a31323a3a2f34382d3438203d3e20333937323434.roa
Signing time:             Tue 05 Jul 2022 17:28:30 +0000
ROA not before:           Tue 05 Jul 2022 17:23:30 +0000
ROA not after:            Tue 04 Jul 2023 17:28:30 +0000
asID:                     397244
IP address blocks:        2602:fb67:12::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:6a:6a:01:38:f9:6b:5a:20:84:05:0e:97:e7:cf:2a:5a:a2:4e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33
        Validity
            Not Before: Jul  5 17:23:30 2022 GMT
            Not After : Jul  4 17:28:30 2023 GMT
        Subject: CN=162BBA657ED127FB7EBF382AF76C56EDFCBA3EC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:06:6b:00:22:df:9e:13:86:13:88:59:f6:a5:
                    39:ab:ff:c8:9c:ec:40:87:28:76:95:bb:c3:44:9f:
                    3d:e0:f7:7c:af:31:9f:c7:66:16:68:fd:59:44:a8:
                    f0:af:bb:fc:4c:bf:55:32:c2:29:b7:d8:bf:b5:58:
                    4a:4f:f2:46:d6:46:1f:29:4c:e1:72:20:fc:32:a9:
                    ba:50:a4:7b:19:8e:37:fe:ee:24:55:a7:4b:a5:54:
                    3a:7e:53:17:93:1a:e1:63:e9:8a:98:1b:b6:cf:d5:
                    6d:d5:13:99:33:26:16:5f:20:db:96:f7:7d:07:79:
                    15:7a:90:5c:24:ab:19:fb:78:a5:22:1c:2f:2c:c6:
                    6f:26:8b:26:42:40:14:73:d8:1e:46:ee:b5:1e:2d:
                    55:45:1a:b1:c2:f1:98:c8:30:65:11:6f:54:c0:9b:
                    87:cc:74:ad:f1:6b:d3:d6:10:29:02:a9:6d:5e:fa:
                    81:da:7c:7c:24:78:2d:74:aa:a3:a3:7b:92:07:ca:
                    84:d3:5f:c8:eb:96:bd:ad:12:33:96:fd:be:bc:a1:
                    c7:71:33:73:89:1e:97:51:52:81:45:25:ef:60:ec:
                    02:e4:31:f4:ad:20:b0:f9:17:61:d5:6d:bb:4b:ea:
                    63:6f:2a:49:2c:1d:c3:3e:93:ee:1c:09:59:9b:56:
                    2f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2B:BA:65:7E:D1:27:FB:7E:BF:38:2A:F7:6C:56:ED:FC:BA:3E:C8
            X509v3 Authority Key Identifier:
                keyid:3B:F7:67:28:9F:7D:AC:0C:15:00:93:8E:8E:C9:34:EB:E7:DD:7A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/3BF767289F7DAC0C1500938E8EC934EBE7DD7A80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0010301c-aa2d-4d35-97d4-8d947672bad4/79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/323630323a666236373a31323a3a2f34382d3438203d3e20333937323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb67:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:2c:de:b3:dc:6c:4d:33:a7:f4:fc:e9:e1:83:9f:16:ff:d9:
         de:e5:57:7b:79:67:69:c0:80:67:76:be:c3:de:5d:c7:81:22:
         e2:92:ac:26:ed:c5:d1:34:df:86:fd:91:87:f0:ea:97:cd:cf:
         8e:f8:6b:80:f8:ce:b3:0e:31:44:56:24:b0:ae:1a:1a:ba:c0:
         18:04:68:f3:88:96:76:93:af:94:0c:f8:f5:4d:25:a9:94:7f:
         65:9b:bd:73:63:4d:8c:c5:ba:2c:b7:55:c5:e3:ba:c0:e5:a7:
         29:00:2c:ba:3b:63:e1:05:b2:d8:e4:d0:ae:b3:1e:b0:0c:22:
         c6:99:5c:5b:ad:25:08:e5:a1:cf:81:39:eb:e9:24:7e:2f:0e:
         dc:c0:ca:1c:a7:05:c7:6c:9b:af:db:db:5a:ed:99:b2:fb:04:
         16:34:bd:69:7d:19:84:8d:db:8b:5d:3b:e2:4d:59:b4:c1:4b:
         a3:fe:86:24:2e:89:ec:ba:84:b7:c9:63:a8:30:d3:96:12:f2:
         f5:c2:05:ba:ad:43:08:5b:5c:cd:97:10:1a:79:ef:79:b8:c4:
         79:bf:28:bc:8a:eb:f1:92:d9:19:60:69:05:53:be:36:85:af:
         74:57:3e:9f:a6:09:3e:86:bb:d5:38:80:2c:2f:b5:71:64:15:
         ba:81:4d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org