Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3233302e302f32342d3234203d3e20323037343139.roa
File:                     3230392e3230302e3233302e302f32342d3234203d3e20323037343139.roa (raw, json)
Hash identifier:          OZcsUAVbICRGUfjPCajkJrFvAWW0HAgnIS1YKeGgHf4=
Subject key identifier:   15:BE:E9:C5:ED:D8:0B:A4:56:66:45:3E:8E:E7:36:32:F6:BE:7E:2A
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1F6D969EA4B3134FEC9AACC36200F448CA9BDEE5
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3233302e302f32342d3234203d3e20323037343139.roa
Signing time:             Mon 28 Nov 2022 11:22:00 +0000
ROA not before:           Mon 28 Nov 2022 11:17:00 +0000
ROA not after:            Mon 27 Nov 2023 11:22:00 +0000
asID:                     207419
IP address blocks:        209.200.230.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6d:96:9e:a4:b3:13:4f:ec:9a:ac:c3:62:00:f4:48:ca:9b:de:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:17:00 2022 GMT
            Not After : Nov 27 11:22:00 2023 GMT
        Subject: CN=15BEE9C5EDD80BA45666453E8EE73632F6BE7E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e6:0c:36:43:21:fd:2a:de:35:19:f6:52:b4:
                    05:83:07:ca:a1:be:a5:28:ec:0d:86:40:33:37:78:
                    ba:12:7d:7c:50:b2:17:19:e3:66:20:48:36:6a:aa:
                    bc:50:5e:ca:4b:2b:a8:04:c1:e1:57:48:4f:53:43:
                    b5:19:89:51:42:aa:f4:d9:e5:06:ca:23:16:82:fe:
                    5a:9b:9a:57:0a:43:ac:b9:f2:77:b3:19:8b:be:3e:
                    66:b6:fe:23:04:b4:8c:96:7d:94:87:af:47:6e:be:
                    2e:a2:8e:dc:ed:42:1d:ac:17:37:84:4f:4f:0c:6c:
                    b9:96:60:60:6e:11:af:87:c5:50:f4:d2:89:c8:23:
                    16:d3:ee:cc:42:bd:59:f7:0d:93:5e:73:ab:a8:66:
                    4c:64:f3:8d:2a:25:78:79:f3:63:e0:1f:bd:07:83:
                    16:bc:5a:cc:d1:63:75:9a:95:e2:65:c2:19:f5:6d:
                    68:5e:c8:6c:f8:3d:c9:5f:39:e2:2d:e3:f5:30:32:
                    8f:87:06:d5:59:43:03:2d:d2:1c:77:4e:71:da:c0:
                    f8:44:f5:14:86:dc:b3:82:98:6b:90:0c:a6:9a:3e:
                    2e:cb:c0:39:3f:90:c7:07:a7:fc:3b:2d:fd:f9:ed:
                    d5:e9:7b:76:da:1e:01:39:cf:2a:ba:07:8f:74:dc:
                    4e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BE:E9:C5:ED:D8:0B:A4:56:66:45:3E:8E:E7:36:32:F6:BE:7E:2A
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3233302e302f32342d3234203d3e20323037343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:54:73:4b:40:57:30:0b:c0:c6:4f:5e:2b:70:d4:03:e8:18:
         44:53:20:a3:3e:ff:71:85:9c:3f:01:58:ca:cb:c2:c0:ab:c3:
         69:93:42:a3:6f:ea:29:bd:1d:f4:d6:05:16:95:c8:76:99:e1:
         f7:05:2e:e8:6f:b7:e5:54:72:63:1c:4b:26:ea:be:8d:0f:78:
         8d:4f:c3:ac:90:f5:85:7c:f0:e3:b4:c8:6e:5a:84:0b:67:65:
         14:a1:98:31:34:a5:61:a4:71:71:92:19:9e:49:4f:39:6b:db:
         50:5b:f1:a8:97:5b:58:48:7e:1c:17:59:26:6f:d2:d3:15:85:
         1a:0a:27:13:6e:51:71:b6:97:86:7d:dd:85:76:c0:95:d6:c1:
         d3:1a:da:cd:ab:32:45:f0:5b:3d:e7:a2:04:41:ce:4d:84:df:
         fc:20:72:d2:a0:4b:d6:b9:8e:46:1f:93:5b:3c:0b:e7:0a:dd:
         8a:b5:e7:d2:d6:8d:a9:c3:81:33:53:d0:ce:3b:a9:3c:f8:79:
         37:eb:7f:a3:79:60:30:b3:61:1f:0c:ab:be:c9:c7:a5:2a:ce:
         cc:42:69:42:82:88:dd:6a:78:95:94:40:84:9f:37:5b:5b:44:
         76:26:10:75:13:2e:5b:5c:e2:36:47:53:dc:48:39:49:25:cc:
         ff:13:20:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org