Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232332e302f32342d3234203d3e20323130373033.roa
File:                     3135372e3235342e3232332e302f32342d3234203d3e20323130373033.roa (raw, json)
Hash identifier:          tZW5tAfmK+gOF6DKoljZryudNDyg6VU6yN0Z4OuyQuA=
Subject key identifier:   1F:4C:5B:7F:F0:52:46:CE:87:CA:B2:90:4B:7A:BD:50:69:74:7A:24
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4D4AB2E773AD1627F22E609458F4D8F5DBA02A26
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232332e302f32342d3234203d3e20323130373033.roa
Signing time:             Fri 30 Dec 2022 19:54:21 +0000
ROA not before:           Fri 30 Dec 2022 19:49:21 +0000
ROA not after:            Fri 29 Dec 2023 19:54:21 +0000
asID:                     210703
IP address blocks:        157.254.223.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:4a:b2:e7:73:ad:16:27:f2:2e:60:94:58:f4:d8:f5:db:a0:2a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:21 2022 GMT
            Not After : Dec 29 19:54:21 2023 GMT
        Subject: CN=1F4C5B7FF05246CE87CAB2904B7ABD5069747A24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e8:da:b4:ef:c0:96:01:c8:8e:be:5c:5b:27:
                    9c:5a:7d:03:48:a2:cb:31:1a:5f:2c:19:c5:05:d6:
                    7f:6b:69:13:fa:cc:81:e0:8c:df:38:b1:ea:96:1c:
                    c1:8a:6a:4b:5a:16:dd:03:1d:ff:40:2d:fc:a6:64:
                    e8:3f:a8:64:a8:9a:2a:19:dd:04:bd:5f:e1:0f:b4:
                    a8:59:f2:2c:da:66:73:7d:e6:4a:6c:1e:92:f7:86:
                    b6:49:4d:9d:aa:27:c9:14:70:c2:fb:99:d4:8c:a8:
                    ac:33:8e:1e:f2:5a:0f:af:8a:8f:cd:35:29:ba:e3:
                    bd:0d:03:2d:5e:d2:93:1a:5e:00:a4:82:a3:97:41:
                    06:4f:70:a4:94:1c:52:c2:55:38:49:86:97:3e:88:
                    e5:f3:54:d9:02:71:c0:f9:cd:06:43:8f:35:d5:d6:
                    c6:97:be:8f:bf:d8:c4:0b:c0:7b:79:be:98:b8:61:
                    9a:0c:f5:94:1d:a7:26:72:08:40:96:28:fd:05:30:
                    30:11:b4:9f:02:9a:13:4a:24:ff:42:da:5d:c4:0e:
                    d4:09:59:45:68:55:45:5a:83:85:b8:26:a8:02:38:
                    83:6d:99:0f:cf:6d:f9:7c:b8:b4:22:cb:7b:ec:75:
                    3e:fa:2a:cb:24:8b:1f:33:18:23:bc:b4:90:0a:99:
                    1d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4C:5B:7F:F0:52:46:CE:87:CA:B2:90:4B:7A:BD:50:69:74:7A:24
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232332e302f32342d3234203d3e20323130373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:1d:73:10:de:9b:eb:30:1f:19:fd:94:de:ed:d6:53:0e:28:
         42:07:e4:4c:4f:b9:54:fd:84:c5:34:14:f2:c9:c1:4e:1d:37:
         f0:cb:82:7b:5c:27:a8:95:d0:03:60:3d:54:b8:db:86:8c:41:
         b2:59:08:d8:dd:94:30:78:30:b0:d3:88:f1:86:05:a3:b4:51:
         df:e7:2f:ee:52:02:c8:fb:17:28:47:14:b2:42:38:d8:fd:3c:
         4b:04:7a:55:85:78:df:c5:c9:b6:b0:f4:40:5e:d5:49:87:83:
         f8:68:0e:d1:31:d4:40:34:2c:0a:f3:b9:d9:34:a2:57:0b:7d:
         a8:dd:14:45:2d:b2:3f:04:ac:9c:9d:14:67:83:c4:9b:0f:a1:
         bb:6b:e1:c9:98:10:15:59:c1:ed:23:c3:5b:b8:85:b0:dd:7d:
         57:bc:0c:a8:5b:8d:2a:fc:98:4d:fb:5b:54:4a:53:f0:cb:97:
         23:47:b3:25:8b:58:76:db:e8:39:52:2c:64:ac:d8:28:91:58:
         ee:a2:e1:1c:3a:2c:81:67:31:3c:ff:2e:d3:12:bb:69:55:95:
         f9:5f:5b:98:7b:67:c6:2e:c8:f4:f2:5c:fa:bf:40:9c:2c:50:
         a7:f6:e6:7c:e8:db:e3:33:d8:3b:94:8a:4f:f5:ec:14:0e:01:
         dc:8e:80:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org