Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3257.roa
File:                     AS3257.roa (raw, json)
Hash identifier:          i7acq/ETmpz9dDLmGVERX+jvg8h+zLGl196BgZnh5/I=
Subject key identifier:   CA:EF:68:13:1D:B4:42:FE:76:56:F5:32:AE:68:03:06:99:B3:68:05
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       43119E4F585DBC78818DBFD56E6DBAF2735F8A90
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3257.roa
Signing time:             Fri 09 Dec 2022 11:41:27 +0000
ROA not before:           Fri 09 Dec 2022 11:36:27 +0000
ROA not after:            Fri 08 Dec 2023 11:41:27 +0000
asID:                     3257
IP address blocks:        66.102.128.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:11:9e:4f:58:5d:bc:78:81:8d:bf:d5:6e:6d:ba:f2:73:5f:8a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  9 11:36:27 2022 GMT
            Not After : Dec  8 11:41:27 2023 GMT
        Subject: CN=CAEF68131DB442FE7656F532AE68030699B36805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:53:4c:2c:dd:8d:b3:9d:b3:90:88:e2:a8:
                    3e:d1:ef:de:78:cf:bc:db:75:85:52:af:05:c6:4d:
                    3d:e9:e0:2c:fc:06:fb:f6:22:09:37:f0:5c:a2:ea:
                    d1:93:57:00:33:ee:0b:28:77:53:5f:8e:97:99:a1:
                    ac:28:1b:51:69:e9:3b:02:fd:2c:6a:86:94:0f:a6:
                    a4:a2:df:e0:0c:20:2a:57:66:83:c1:99:e9:dc:47:
                    71:c5:85:28:53:2a:b9:17:76:96:4a:66:1c:2d:77:
                    5b:42:fb:9b:e5:0b:6d:ee:39:12:56:eb:b7:09:28:
                    55:e8:0a:77:3a:c7:9c:fb:d6:0a:96:12:a5:9d:ce:
                    94:57:4e:02:3d:a5:23:ef:3e:8d:11:34:d2:bf:a1:
                    2d:b7:06:51:af:5f:0b:0d:60:63:ce:c4:3a:42:ba:
                    03:c0:e9:15:23:44:8d:6b:5d:38:42:d2:10:c8:85:
                    b9:f4:49:b1:25:39:e3:eb:05:c5:76:a9:37:88:72:
                    1d:4c:79:6a:40:71:39:6c:4a:25:b4:15:b0:85:16:
                    ea:56:31:c5:53:6e:64:ad:5d:84:44:37:e1:8a:f5:
                    4a:4a:e9:e6:85:60:95:18:72:8b:05:64:2f:ab:e6:
                    8a:ea:92:f6:aa:5b:ac:e3:fa:e5:3e:2f:6a:ee:49:
                    df:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EF:68:13:1D:B4:42:FE:76:56:F5:32:AE:68:03:06:99:B3:68:05
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3257.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:74:98:61:66:37:18:7a:d0:34:c6:99:0d:09:5d:5f:b8:79:
         48:44:8f:59:63:13:16:5b:13:71:af:96:b9:5e:e1:ed:ce:27:
         16:a8:82:72:a3:63:4d:44:f8:ca:6d:73:8d:bc:7c:b6:7e:ff:
         54:66:79:5b:6c:e9:a6:72:a8:d8:58:9d:9f:6e:f5:57:de:89:
         83:65:33:fc:de:b5:0c:7c:83:d4:c5:3f:d2:4e:56:f0:1d:62:
         66:0f:e4:4a:12:95:fc:d7:e7:ef:90:7e:05:fe:c5:e5:48:f9:
         f9:6c:2a:7b:5d:92:b7:3f:ce:db:30:d9:d8:35:26:fe:d3:ff:
         0f:60:f4:54:0f:30:d7:3d:76:49:fa:63:24:37:bd:1f:51:c5:
         ef:71:64:59:ab:33:5c:b4:08:cb:31:fe:c2:0c:2f:69:be:70:
         45:1b:8b:ae:b1:94:1b:ee:d3:45:80:0f:ae:ef:7a:01:32:67:
         c5:1a:88:ea:46:59:19:ec:1f:46:f4:a5:18:8c:5e:db:f7:bc:
         37:23:31:e1:5d:2f:b9:82:45:46:86:93:1b:db:dd:b0:2b:ee:
         13:1b:2e:0b:f3:09:72:64:df:27:a9:c1:b8:8f:37:91:59:b3:
         fe:64:f0:13:ac:5e:83:35:7e:91:37:24:19:a8:c0:17:2a:6a:
         f3:a3:9a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org