Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS8100.roa
File:                     AS8100.roa (raw, json)
Hash identifier:          JdQ6Il7ROBrmU62T1tkSeHWk/uUOv7Q51qS2ac3B+Nc=
Subject key identifier:   27:28:EE:05:05:E5:C4:01:D0:43:BB:1D:FE:E8:D7:7E:99:72:D6:BF
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2E0F1168C21A7691A40F1551689FC51DCA4F8566
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS8100.roa
Signing time:             Mon 10 Apr 2023 14:00:12 +0000
ROA not before:           Mon 10 Apr 2023 13:55:12 +0000
ROA not after:            Mon 08 Apr 2024 14:00:12 +0000
asID:                     8100
IP address blocks:        216.97.232.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:0f:11:68:c2:1a:76:91:a4:0f:15:51:68:9f:c5:1d:ca:4f:85:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 10 13:55:12 2023 GMT
            Not After : Apr  8 14:00:12 2024 GMT
        Subject: CN=2728EE0505E5C401D043BB1DFEE8D77E9972D6BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:41:06:ca:1f:69:4e:c7:75:dd:5c:28:dd:66:
                    87:c1:b4:72:cf:1a:f0:08:e9:b4:f0:bf:5d:9e:e0:
                    31:cf:b1:93:30:b8:1b:96:a0:19:2f:c9:15:f8:b5:
                    f9:e6:aa:f0:29:47:92:3b:04:52:89:49:ff:81:d5:
                    e4:2e:5b:b5:6d:0f:b2:e1:33:1b:5f:38:b3:75:b9:
                    1d:5f:3e:b1:b0:80:ef:2c:e1:48:85:9a:f3:dd:9c:
                    e2:17:68:ff:79:0c:31:a6:13:dc:39:92:fa:a6:09:
                    c1:c6:9a:5a:e1:9a:5c:41:10:8f:bc:0d:38:7d:13:
                    09:b3:a1:e5:c4:ff:6b:31:63:e6:52:7e:6a:10:41:
                    31:8f:b2:e8:69:cf:cb:61:23:59:52:aa:ef:3f:e2:
                    f5:c1:64:7b:28:4e:e9:89:f0:1a:84:6a:5f:f5:f8:
                    e6:1e:3d:5c:65:0e:6c:44:d1:55:9b:26:45:49:60:
                    e0:2b:2c:51:41:60:22:2f:58:e7:fe:eb:be:7b:ab:
                    8c:d5:1a:db:b1:bd:27:9a:d0:02:5f:64:2e:dc:75:
                    96:bd:87:3a:80:56:9d:05:a0:f7:4e:8a:64:a4:2b:
                    2a:14:6d:2f:c0:91:fe:f2:56:d3:4d:e3:da:bd:a0:
                    f3:06:3c:9c:f4:f9:ab:e0:e1:a4:ee:48:d6:2a:fb:
                    22:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:28:EE:05:05:E5:C4:01:D0:43:BB:1D:FE:E8:D7:7E:99:72:D6:BF
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS8100.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:eb:77:71:c5:49:45:71:35:61:02:5b:df:45:17:88:e7:8b:
         31:09:9b:d1:18:98:1e:27:d3:a7:25:8f:4c:4e:65:ad:04:eb:
         71:1a:b7:0e:29:01:ed:4c:8c:0c:3a:a3:82:04:5e:40:de:68:
         74:fa:80:69:6d:33:bf:c9:7e:aa:b5:d7:f3:1c:14:fe:2d:3a:
         80:fd:12:a0:66:19:22:7a:d6:b2:3a:33:7f:87:ee:af:5d:0a:
         e5:78:b7:85:91:24:b1:e6:3b:c3:8c:9e:ee:55:a9:e0:b0:58:
         7e:1d:8c:11:66:11:30:b0:23:4d:68:3f:2c:19:6c:08:07:31:
         4c:08:7d:f6:f2:be:52:b8:74:eb:b3:6b:52:10:ab:57:a1:c0:
         5b:b5:94:bb:22:92:16:65:de:e3:74:0c:c6:02:ff:ba:1e:22:
         89:0c:75:8e:0a:8d:60:48:54:33:3b:34:98:b5:b6:81:76:18:
         a3:26:d6:ef:2b:5a:8e:20:89:ff:53:38:c6:94:c8:6a:0e:e5:
         19:f4:ae:29:6a:0b:f2:7f:37:d3:38:65:10:8f:09:2b:33:d4:
         f0:8d:48:05:d3:66:f4:df:c4:83:08:9b:0a:87:ee:13:dc:7a:
         44:7b:62:3f:d7:ce:51:05:8b:3d:9f:bb:a2:25:0e:9d:18:2a:
         77:87:8b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org