Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136382e302f32342d3234203d3e2037343839.roa
File:                     3135372e3235342e3136382e302f32342d3234203d3e2037343839.roa (raw, json)
Hash identifier:          EUOgClC9prG3V6I+hIUfyW19yQiNhdXbqjx+bk6gnUY=
Subject key identifier:   C4:16:A3:17:90:42:32:57:59:94:51:63:95:7B:90:1F:68:6E:0A:42
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4DE02E3B17A26C5FAF64CDEF0054DE165FBB063C
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136382e302f32342d3234203d3e2037343839.roa
Signing time:             Fri 30 Dec 2022 19:54:18 +0000
ROA not before:           Fri 30 Dec 2022 19:49:18 +0000
ROA not after:            Fri 29 Dec 2023 19:54:18 +0000
asID:                     7489
IP address blocks:        157.254.168.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e0:2e:3b:17:a2:6c:5f:af:64:cd:ef:00:54:de:16:5f:bb:06:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:18 2022 GMT
            Not After : Dec 29 19:54:18 2023 GMT
        Subject: CN=C416A3179042325759945163957B901F686E0A42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:73:d8:9f:a5:43:4c:97:7f:db:d4:34:90:98:
                    f6:db:3c:b5:ee:15:ce:05:17:a7:f4:23:db:56:75:
                    cb:4f:d9:2a:df:98:b4:df:e8:3b:9b:c0:c5:ab:1a:
                    0d:11:df:18:e6:2c:2c:11:12:02:37:29:93:15:2e:
                    8a:d9:7a:20:a2:c9:2a:c0:f5:f7:28:32:66:26:6f:
                    60:05:e0:78:d2:d6:ad:23:78:4e:96:52:b8:8c:26:
                    17:aa:99:39:b6:9f:b2:83:c1:76:b7:46:cd:8e:a9:
                    12:4d:41:82:03:52:b4:8c:cf:45:cb:eb:fa:f9:f9:
                    e7:d6:2a:9b:9f:27:b1:7f:ef:99:7a:1a:24:16:49:
                    6f:1d:41:67:23:ab:58:6b:b7:b4:d4:19:3e:67:af:
                    c0:48:94:a2:60:83:e3:95:4d:d4:af:b2:8e:b3:cf:
                    bf:12:26:0d:78:e9:e7:77:62:fd:78:d3:64:63:45:
                    1b:47:de:e6:62:03:40:7d:7a:15:f3:68:45:de:9e:
                    63:ca:e6:b3:cf:7a:43:ad:5b:e2:f3:31:61:79:63:
                    74:22:8c:59:c5:3e:ee:df:ff:22:08:15:00:4a:f4:
                    19:c7:f4:fb:d5:99:59:7b:26:0f:ed:18:de:2c:b4:
                    2e:dd:8c:c3:3d:dc:d1:27:30:be:88:14:42:7e:3a:
                    21:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:16:A3:17:90:42:32:57:59:94:51:63:95:7B:90:1F:68:6E:0A:42
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136382e302f32342d3234203d3e2037343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:10:52:0b:68:8a:8b:a8:db:09:80:39:c3:29:0e:7a:87:d9:
         00:59:42:12:e2:6d:9b:88:40:32:22:ec:ad:af:db:e0:e1:12:
         25:45:d6:f2:50:fc:03:41:e4:27:81:19:e2:55:a3:bc:53:2f:
         fc:10:37:83:c7:d1:67:6b:67:58:ea:f3:c0:1e:ed:c7:5b:22:
         6b:b1:f6:d4:b7:2c:8e:ec:60:47:e6:f7:95:9e:af:ce:fc:b1:
         12:d3:d3:57:95:a2:a4:02:26:43:60:6c:0b:6b:f2:66:6e:5a:
         57:91:ab:a9:ee:2d:f6:80:10:8a:ba:83:93:45:54:66:75:cf:
         45:34:95:03:99:11:68:75:a9:06:92:43:9f:15:9d:1f:59:3a:
         7c:99:f7:78:ff:6e:de:3e:dd:ac:39:26:1b:dd:2b:81:4a:85:
         de:43:69:4c:28:2d:0c:45:68:7a:fa:af:09:56:66:12:f0:22:
         26:69:49:40:3c:fa:92:fa:6c:8f:c1:59:38:42:ca:75:3e:7d:
         c8:dc:25:1f:b3:83:e1:98:de:5a:20:f8:30:a9:fa:00:95:61:
         77:89:c5:f6:04:56:05:0d:40:e4:39:d9:22:de:a3:a1:b6:7b:
         b8:78:98:a4:34:3c:98:a7:7f:e3:45:03:3a:3c:61:17:d9:98:
         bd:d2:e3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org