Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207326.roa
File:                     AS207326.roa (raw, json)
Hash identifier:          19FsaGifMxAXyA8n/i/PfS1Or7rS9tRUvTP1079g+zM=
Subject key identifier:   B5:76:3A:C1:F5:C0:8B:30:88:F1:FE:1A:ED:9D:D2:04:5D:E6:FC:5A
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       3B5EE327ECE2B4FDDD6F715991569477EF3A1808
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207326.roa
Signing time:             Fri 10 Mar 2023 12:17:50 +0000
ROA not before:           Fri 10 Mar 2023 12:12:50 +0000
ROA not after:            Fri 08 Mar 2024 12:17:50 +0000
asID:                     207326
IP address blocks:        208.76.40.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5e:e3:27:ec:e2:b4:fd:dd:6f:71:59:91:56:94:77:ef:3a:18:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 10 12:12:50 2023 GMT
            Not After : Mar  8 12:17:50 2024 GMT
        Subject: CN=B5763AC1F5C08B3088F1FE1AED9DD2045DE6FC5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:08:69:61:de:a5:f9:93:b2:8d:92:d9:e9:46:
                    29:c5:e2:3a:cd:02:dd:97:96:9f:8e:03:99:0b:6f:
                    f6:95:a8:61:78:9f:12:c0:f7:95:5a:a3:b2:41:b3:
                    37:ec:e5:55:1d:18:f3:0d:b6:21:24:18:51:0f:43:
                    37:cb:65:65:d3:32:c2:4d:66:d5:f4:5d:60:fc:25:
                    7e:bc:1c:1f:c5:ec:45:02:95:bb:b3:51:ed:a5:bc:
                    06:53:7a:fe:bf:81:c4:5b:95:05:38:b4:05:9b:87:
                    ea:ca:bd:11:91:9e:6f:72:12:cf:ab:1e:49:41:d5:
                    70:61:ed:cb:29:d6:11:2b:bd:fc:0c:66:c8:d9:fe:
                    6e:39:33:1b:a7:38:3f:59:72:fd:44:5f:84:a0:17:
                    ba:2b:02:1d:88:5e:90:aa:33:71:d8:2f:fb:6e:a7:
                    78:3d:30:c5:18:79:95:d5:63:65:42:45:d0:14:80:
                    91:9d:69:d3:fe:a1:fb:8c:a8:82:cb:27:ca:62:c7:
                    4c:0c:0f:7d:6d:a8:7a:6e:b4:de:9a:41:d5:fc:f7:
                    13:b6:87:2c:bf:e9:3b:ae:04:95:25:67:4e:7a:df:
                    cf:40:40:1a:a4:dd:85:2c:9d:13:d5:23:3f:21:69:
                    3c:24:62:93:45:78:2d:e6:af:67:9e:07:c1:5f:db:
                    98:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:76:3A:C1:F5:C0:8B:30:88:F1:FE:1A:ED:9D:D2:04:5D:E6:FC:5A
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207326.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:35:1c:69:47:ce:37:c5:b7:a6:e7:53:be:1e:03:71:f2:12:
         1b:c8:02:9f:0f:0a:7c:5f:10:4f:91:65:3c:36:56:b7:00:ae:
         0e:70:0d:5b:eb:56:5e:de:35:e0:a6:fc:61:01:61:18:bc:a9:
         71:c4:79:70:28:4d:93:ec:80:01:ab:27:29:67:08:f9:7c:1d:
         f5:83:ab:d8:99:32:d9:d4:17:b6:0a:65:f9:08:de:90:d1:cb:
         4f:ec:93:d2:49:de:f6:3f:9f:21:31:9d:88:0b:42:7d:89:7d:
         cd:17:78:fb:be:bf:ef:ea:88:8b:d1:92:7c:5f:78:dc:d1:e7:
         c3:a4:b5:25:e0:18:f0:21:3c:03:f1:06:db:be:54:04:95:62:
         55:83:de:98:1d:53:12:1a:dc:ae:d9:67:5b:c7:5f:18:13:92:
         05:3c:a1:ad:98:02:2e:bc:cb:b8:35:13:84:f5:5e:13:d4:6b:
         0d:d7:68:95:10:93:ee:d8:ed:73:2c:31:da:f9:b1:12:de:b4:
         28:8c:e6:8e:2a:a9:98:0f:d7:21:87:2f:d3:06:0f:e5:ec:0c:
         c0:44:53:0f:c7:81:0a:68:4c:a2:f9:ab:f0:e5:58:45:37:ec:
         93:7b:67:40:af:93:d3:c4:5c:59:11:3c:17:09:c7:ad:89:87:
         0d:41:37:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org