Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136322e302f32342d3234203d3e20323036303932.roa
File:                     3135372e3235342e3136322e302f32342d3234203d3e20323036303932.roa (raw, json)
Hash identifier:          ftqa5Kp1VRKBojq0OJ5DSTZFkuxFkgH3UKg9Zbgw1iQ=
Subject key identifier:   44:44:EA:11:A6:21:A5:69:45:F1:9B:62:16:38:82:64:0B:22:F2:55
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       01C68B426D5641C364C79F4C6AF6F0E3F8B393F6
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136322e302f32342d3234203d3e20323036303932.roa
Signing time:             Fri 30 Dec 2022 19:54:17 +0000
ROA not before:           Fri 30 Dec 2022 19:49:17 +0000
ROA not after:            Fri 29 Dec 2023 19:54:17 +0000
asID:                     206092
IP address blocks:        157.254.162.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c6:8b:42:6d:56:41:c3:64:c7:9f:4c:6a:f6:f0:e3:f8:b3:93:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:17 2022 GMT
            Not After : Dec 29 19:54:17 2023 GMT
        Subject: CN=4444EA11A621A56945F19B62163882640B22F255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b8:46:60:c1:95:23:21:bd:22:01:ef:f6:d9:
                    c6:d9:d5:bd:06:34:ea:cc:63:83:91:1a:99:74:4f:
                    af:ef:43:ce:e3:b1:da:e9:c1:9d:7a:f5:43:02:c3:
                    c3:4b:7d:6f:9b:47:9b:e9:91:e5:c0:34:c3:21:19:
                    e5:e9:0c:e3:9d:3e:25:a2:30:58:34:c0:11:7e:83:
                    87:62:36:04:dd:f2:a5:9b:26:8d:56:d6:80:05:54:
                    f7:99:b6:92:e8:6b:ab:48:35:81:2d:b2:16:ef:d6:
                    03:d9:07:77:cf:3a:f0:de:08:61:46:59:e1:eb:ed:
                    cd:1c:73:28:0c:e5:7c:5f:9f:e3:6e:4c:00:b1:db:
                    f2:1f:79:c5:01:ab:61:cd:25:1b:95:1a:0a:01:51:
                    b0:00:81:e5:50:d4:b9:b3:5f:cc:03:e5:b4:3e:35:
                    f7:c1:6b:84:3e:75:7e:9d:e7:18:e3:82:ed:11:be:
                    50:ce:38:d6:d5:c1:84:24:e4:f6:a1:1a:b2:86:a9:
                    31:6e:46:d0:d0:d5:49:32:61:a2:27:8f:e3:11:67:
                    43:94:6a:ac:2d:2e:73:b9:3f:76:48:f9:ed:b2:69:
                    1d:22:0e:38:ce:f7:03:35:11:5a:4e:53:e8:25:34:
                    08:f0:fa:84:18:af:2f:17:e0:b0:fc:ff:77:6e:2f:
                    7d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:44:EA:11:A6:21:A5:69:45:F1:9B:62:16:38:82:64:0B:22:F2:55
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136322e302f32342d3234203d3e20323036303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:44:01:0f:3b:41:f3:bf:54:b5:d1:5e:16:3d:0a:2c:35:3a:
         6b:65:69:4c:3d:46:dd:09:21:3f:1d:ee:2c:01:cf:63:dd:3f:
         aa:88:47:94:cc:1c:85:f5:00:60:23:c8:f7:6d:80:da:4a:11:
         f0:61:31:52:f8:c2:09:ac:40:6c:ef:b4:07:57:fd:85:8b:39:
         35:82:44:97:85:c3:c6:a3:89:df:69:2b:db:ca:3d:39:d7:24:
         d2:20:c7:a5:fd:93:97:95:44:8a:1c:e5:d1:89:e6:4f:12:aa:
         81:fa:45:6b:64:a9:a3:f6:fc:2e:7a:1b:9e:18:00:c3:77:13:
         0c:65:4a:38:a1:3b:2b:6b:21:02:39:53:e9:1c:f8:28:42:2e:
         2e:09:4a:c3:20:cf:c0:53:ac:17:a1:ed:a3:c5:af:50:36:46:
         25:ff:09:3e:a8:cd:dd:1d:5d:61:de:aa:11:3f:99:ba:f8:04:
         ef:8f:80:2e:68:b9:90:90:01:93:f4:37:27:bf:c8:f9:5e:29:
         31:bd:c2:1e:88:19:b2:90:b7:50:98:cb:26:8a:47:60:5f:1e:
         04:67:6f:09:d1:05:02:d8:5d:36:81:cc:ef:54:c3:d1:35:d4:
         6f:d1:2e:8c:af:2b:ff:8f:64:de:43:1c:80:2a:be:4a:65:95:
         30:bf:95:be
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUAcaLQm1WQcNkx59Mavbw4/izk/YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjIxMjMwMTk0OTE3WhcNMjMxMjI5MTk1NDE3
WjAzMTEwLwYDVQQDEyg0NDQ0RUExMUE2MjFBNTY5NDVGMTlCNjIxNjM4ODI2NDBC
MjJGMjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7hGYMGVIyG9
IgHv9tnG2dW9BjTqzGODkRqZdE+v70PO47Ha6cGdevVDAsPDS31vm0eb6ZHlwDTD
IRnl6QzjnT4lojBYNMARfoOHYjYE3fKlmyaNVtaABVT3mbaS6GurSDWBLbIW79YD
2Qd3zzrw3ghhRlnh6+3NHHMoDOV8X5/jbkwAsdvyH3nFAathzSUblRoKAVGwAIHl
UNS5s1/MA+W0PjX3wWuEPnV+necY44LtEb5QzjjW1cGEJOT2oRqyhqkxbkbQ0NVJ
MmGiJ4/jEWdDlGqsLS5zuT92SPntsmkdIg44zvcDNRFaTlPoJTQI8PqEGK8vF+Cw
/P93bi99uwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFERE6hGmIaVpRfGbYhY4gmQL
IvJVMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMTM2MzIyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMwMzYzMDM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACd/qIwDQYJKoZIhvcN
AQELBQADggEBAGBEAQ87QfO/VLXRXhY9Ciw1OmtlaUw9Rt0JIT8d7iwBz2PdP6qI
R5TMHIX1AGAjyPdtgNpKEfBhMVL4wgmsQGzvtAdX/YWLOTWCRJeFw8ajid9pK9vK
PTnXJNIgx6X9k5eVRIoc5dGJ5k8SqoH6RWtkqaP2/C56G54YAMN3EwxlSjihOytr
IQI5U+kc+ChCLi4JSsMgz8BTrBeh7aPFr1A2RiX/CT6ozd0dXWHeqhE/mbr4BO+P
gC5ouZCQAZP0Nye/yPleKTG9wh6IGbKQt1CYyyaKR2BfHgRnbwnRBQLYXTaBzO9U
w9E11G/RLoyvK/+PZN5DHIAqvkpllTC/lb4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org