Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e39372e3232382e302f32342d3234203d3e20323130363534.roa
File:                     3231362e39372e3232382e302f32342d3234203d3e20323130363534.roa (raw, json)
Hash identifier:          fLkX8n+1CvPN6f2Mh9kMANRC4/cOCZFo3mviMskCUaY=
Subject key identifier:   4E:90:13:81:62:08:9A:9E:AB:0E:98:B4:55:3A:43:37:85:06:AB:AA
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1261E013BF9D30E95C1B12554DFAECEC176CEEEA
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e39372e3232382e302f32342d3234203d3e20323130363534.roa
Signing time:             Mon 28 Nov 2022 11:22:00 +0000
ROA not before:           Mon 28 Nov 2022 11:17:00 +0000
ROA not after:            Mon 27 Nov 2023 11:22:00 +0000
asID:                     210654
IP address blocks:        216.97.228.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:61:e0:13:bf:9d:30:e9:5c:1b:12:55:4d:fa:ec:ec:17:6c:ee:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:17:00 2022 GMT
            Not After : Nov 27 11:22:00 2023 GMT
        Subject: CN=4E90138162089A9EAB0E98B4553A43378506ABAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f3:c9:20:53:b0:31:ff:03:43:41:8a:32:04:
                    09:7c:53:c9:46:51:ff:24:3c:f7:6c:52:cc:f6:09:
                    5a:c5:cc:16:c3:c0:46:96:ac:02:7e:cf:92:ea:67:
                    73:7b:ff:7b:04:d8:6d:0c:3a:a5:d3:7e:f2:1b:36:
                    c1:78:bd:81:59:58:b2:d7:1e:ce:07:7e:e9:63:f8:
                    2b:f0:c6:87:02:8d:6c:67:d6:cd:1d:44:ef:31:e6:
                    4f:c3:6a:1d:29:0d:c0:f3:7f:eb:c0:b7:11:fa:f5:
                    1c:c3:d3:4a:89:a2:b6:f6:af:2b:15:f8:d2:1d:e1:
                    34:48:9c:2b:3a:09:8d:96:a1:e2:67:f1:77:5d:90:
                    63:0d:0d:6d:3b:d6:17:0e:a5:83:83:e6:17:c3:ce:
                    a2:ee:81:09:32:05:cc:0a:9c:08:ad:13:81:94:78:
                    1f:c3:48:ec:0a:67:6d:c2:96:ff:be:2d:9b:8e:d8:
                    a7:79:78:f3:e1:4e:73:56:f1:ae:ca:69:e1:91:f8:
                    fb:f5:80:3b:db:0e:68:03:a7:89:02:86:fa:71:a4:
                    80:a8:7c:91:cc:63:56:f2:ed:f2:91:4d:79:8d:72:
                    01:fe:a6:01:8c:85:d5:7f:4a:c8:4a:3e:41:71:8a:
                    fc:ab:b5:39:67:1a:9e:a3:4f:8b:be:3e:78:05:88:
                    6b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:90:13:81:62:08:9A:9E:AB:0E:98:B4:55:3A:43:37:85:06:AB:AA
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e39372e3232382e302f32342d3234203d3e20323130363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:05:1b:16:43:e5:53:98:6a:2c:86:71:f1:c3:00:18:83:e8:
         0b:38:4b:80:58:d1:cb:2a:43:fc:21:0b:bc:3c:77:9e:f6:2f:
         f0:c2:72:dc:4c:02:5e:9a:f3:6a:a8:9c:0e:9b:27:dc:3c:43:
         c0:72:0f:a6:f2:37:4a:ad:8f:3e:27:10:40:a2:21:68:d0:60:
         76:fe:b6:ee:f7:74:e5:6e:cc:8b:c8:ef:6d:02:d5:8d:80:52:
         4a:3d:0e:84:27:be:57:5c:8b:ae:50:e4:b5:b2:e1:50:e2:b4:
         4d:26:83:15:81:32:0d:8e:a6:56:c1:26:6a:10:ea:06:69:7d:
         d1:f5:22:aa:87:2d:80:ab:29:df:09:01:c7:d1:74:d5:bf:cb:
         39:be:96:b1:75:05:fe:72:83:6f:3f:43:af:80:05:50:bf:f1:
         c5:77:7e:c7:f5:44:7e:69:6f:3b:74:32:af:9d:92:ae:59:6e:
         85:b6:63:7a:32:e8:8b:57:5c:84:3b:99:65:0d:cd:a1:4b:21:
         06:42:c1:10:75:d5:3d:40:58:92:12:3d:2d:a4:80:f1:d5:35:
         27:f3:ab:15:9e:07:30:ac:d2:59:ac:03:64:74:e9:be:20:15:
         66:1a:cc:21:6a:99:03:4a:e5:d7:27:a7:e7:05:31:04:9e:75:
         a1:b4:42:32
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUEmHgE7+dMOlcGxJVTfrs7Bds7uowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjIxMTI4MTExNzAwWhcNMjMxMTI3MTEyMjAw
WjAzMTEwLwYDVQQDEyg0RTkwMTM4MTYyMDg5QTlFQUIwRTk4QjQ1NTNBNDMzNzg1
MDZBQkFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvPJIFOwMf8D
Q0GKMgQJfFPJRlH/JDz3bFLM9glaxcwWw8BGlqwCfs+S6mdze/97BNhtDDql037y
GzbBeL2BWViy1x7OB37pY/gr8MaHAo1sZ9bNHUTvMeZPw2odKQ3A83/rwLcR+vUc
w9NKiaK29q8rFfjSHeE0SJwrOgmNlqHiZ/F3XZBjDQ1tO9YXDqWDg+YXw86i7oEJ
MgXMCpwIrROBlHgfw0jsCmdtwpb/vi2bjtineXjz4U5zVvGuymnhkfj79YA72w5o
A6eJAob6caSAqHyRzGNW8u3ykU15jXIB/qYBjIXVf0rISj5BcYr8q7U5Zxqeo0+L
vj54BYhrjwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFE6QE4FiCJqeqw6YtFU6QzeF
BquqMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8xLzMyMzEzNjJlMzkzNzJlMzIzMjM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTMwMzYzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GHkMA0GCSqGSIb3DQEB
CwUAA4IBAQCNBRsWQ+VTmGoshnHxwwAYg+gLOEuAWNHLKkP8IQu8PHee9i/wwnLc
TAJemvNqqJwOmyfcPEPAcg+m8jdKrY8+JxBAoiFo0GB2/rbu93TlbsyLyO9tAtWN
gFJKPQ6EJ75XXIuuUOS1suFQ4rRNJoMVgTINjqZWwSZqEOoGaX3R9SKqhy2Aqynf
CQHH0XTVv8s5vpaxdQX+coNvP0OvgAVQv/HFd37H9UR+aW87dDKvnZKuWW6FtmN6
MuiLV1yEO5llDc2hSyEGQsEQddU9QFiSEj0tpIDx1TUn86sVngcwrNJZrANkdOm+
IBVmGswhapkDSuXXJ6fnBTEEnnWhtEIy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org