Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3139302e39322e3136342e302f32322d3234203d3e2037303239.roa
File:                     3139302e39322e3136342e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier:          Lc298HBeOTiY++SgN97HqH3CrqPeMS+tQK4j+TmszZU=
Subject key identifier:   F5:E5:22:E4:93:BA:99:12:F3:CF:5E:2E:58:18:D9:51:25:4F:37:AD
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       0E8781D3F00B2BD845AF0E28F2F12C004A840BD2
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3139302e39322e3136342e302f32322d3234203d3e2037303239.roa
Signing time:             Mon 28 Nov 2022 11:22:02 +0000
ROA not before:           Mon 28 Nov 2022 11:17:02 +0000
ROA not after:            Mon 27 Nov 2023 11:22:02 +0000
asID:                     7029
IP address blocks:        190.92.164.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:87:81:d3:f0:0b:2b:d8:45:af:0e:28:f2:f1:2c:00:4a:84:0b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:17:02 2022 GMT
            Not After : Nov 27 11:22:02 2023 GMT
        Subject: CN=F5E522E493BA9912F3CF5E2E5818D951254F37AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:38:48:4d:58:66:55:b4:dd:8d:89:a1:86:e1:
                    15:8a:41:0c:9f:5b:30:9f:6e:5f:12:2f:0d:e5:ac:
                    96:2c:02:30:fa:ed:40:fa:b9:a9:eb:40:29:ec:9e:
                    c9:63:60:5d:b3:1d:39:d1:0b:9d:46:d5:29:ab:59:
                    72:bd:af:46:65:69:e8:82:80:1a:e5:57:90:25:b9:
                    90:e9:ea:36:76:8c:1f:0f:7e:b5:85:9a:88:d4:55:
                    db:73:54:e3:e5:1f:d6:31:ca:d0:c5:d6:4c:8a:a2:
                    5b:f3:9b:fe:ce:35:6b:9a:07:f1:0c:57:25:fd:3a:
                    a6:ee:5c:9b:4b:6f:96:e9:ad:4a:44:98:e0:59:76:
                    53:2a:08:a5:42:f4:78:47:5b:b9:dd:d6:81:2f:22:
                    5f:81:58:d8:e2:8a:80:2e:62:e0:09:ba:c8:e4:cd:
                    5a:e3:7f:05:dc:fd:72:05:11:ab:ef:79:42:11:57:
                    c7:85:bd:04:50:f4:5d:6d:90:a8:2e:e9:4c:db:ef:
                    0a:cd:d1:a7:eb:14:e3:fa:89:d0:1e:a5:8a:ac:41:
                    5d:22:16:db:7f:7a:6d:5a:fc:0b:5f:b2:5f:7e:e5:
                    1f:5b:b2:c9:4a:90:c4:e7:a7:16:58:e4:ea:26:cb:
                    6b:27:26:e7:55:d5:cb:58:13:9a:da:f5:10:82:30:
                    bd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E5:22:E4:93:BA:99:12:F3:CF:5E:2E:58:18:D9:51:25:4F:37:AD
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3139302e39322e3136342e302f32322d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:14:e2:82:9e:4b:11:cf:26:e7:a8:9f:e8:e2:f1:30:3a:7c:
         e1:9d:76:11:1b:b9:0c:9f:21:68:0c:be:60:e1:4c:5d:02:1d:
         aa:0f:46:ee:16:0a:d4:58:88:ac:25:10:f3:d1:1e:4b:4f:ec:
         fb:11:70:05:fc:8c:76:76:87:26:47:3e:19:49:4f:a2:fc:a3:
         38:f5:96:34:ea:20:f1:82:c4:9c:83:6c:2f:69:e4:62:1d:ce:
         5c:a8:f6:88:e3:ed:45:43:d7:34:cf:25:48:01:e6:45:df:d2:
         d5:d1:5e:0f:e1:9a:3d:c4:e6:28:3c:1b:d4:e0:a1:45:2c:60:
         e5:d2:f4:e9:fe:4c:ca:6d:dd:ad:9c:93:d3:17:80:e5:04:87:
         60:30:f9:85:98:3a:ce:8a:7f:a5:0c:85:77:cc:75:7b:a5:c4:
         f8:ef:bb:0a:a2:62:8a:e3:15:2e:e5:f2:3c:6a:32:ea:b9:9e:
         f4:32:9e:97:af:cc:50:63:8f:ef:10:0b:c4:58:80:0a:15:c8:
         e8:aa:b7:87:90:f4:b7:c1:0a:96:f5:1d:61:7c:61:af:75:21:
         ed:9e:5c:e4:7a:47:d9:94:21:77:80:f6:9a:20:68:d8:d7:df:
         ad:b5:ab:a1:de:cf:6c:0e:83:6f:3d:0e:da:4b:7a:10:e6:e2:
         18:2d:cd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org