Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232332e302f32342d3234203d3e203535313534.roa
File:                     3135372e3235342e3232332e302f32342d3234203d3e203535313534.roa (raw, json)
Hash identifier:          ImD/oGu/2Lfk2FC174FpaONVG1YqniiPZ0raX8LHqBY=
Subject key identifier:   82:A5:57:39:98:87:0A:65:AC:70:9F:91:F1:C4:6B:4C:BE:9C:17:F7
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       5BFCA0F3EFDB215A5575EAAAE76BE4E4B41296C6
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232332e302f32342d3234203d3e203535313534.roa
Signing time:             Fri 21 Apr 2023 13:48:42 +0000
ROA not before:           Fri 21 Apr 2023 13:43:42 +0000
ROA not after:            Fri 19 Apr 2024 13:48:42 +0000
asID:                     55154
IP address blocks:        157.254.223.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:fc:a0:f3:ef:db:21:5a:55:75:ea:aa:e7:6b:e4:e4:b4:12:96:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 21 13:43:42 2023 GMT
            Not After : Apr 19 13:48:42 2024 GMT
        Subject: CN=82A5573998870A65AC709F91F1C46B4CBE9C17F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:cb:a0:f8:ec:f2:04:52:80:2c:1c:56:8b:
                    b4:99:eb:bc:5d:09:de:1b:60:0e:8b:dc:36:20:65:
                    ab:b4:ca:99:77:3a:be:cb:3b:26:01:f5:33:13:e1:
                    c0:97:ab:13:84:f5:4f:09:8f:54:1a:61:a1:86:9c:
                    00:31:68:b1:5b:46:6b:24:14:6b:1a:c5:b9:76:c2:
                    33:99:88:09:89:2f:a3:7c:8b:06:7a:1f:c0:95:63:
                    ac:13:16:5d:14:b9:03:55:f1:05:8c:3d:1d:06:d6:
                    44:46:5b:bd:3f:50:13:b9:c1:0a:a9:60:07:25:df:
                    b6:0d:43:a2:35:76:20:24:ef:9a:0f:17:fc:9a:b8:
                    1b:c9:d7:49:08:fc:d2:d4:5d:7c:22:8d:b9:37:50:
                    c6:75:3d:10:25:58:5d:53:21:f4:ec:da:a0:39:08:
                    e9:6b:a0:1c:8d:e1:b9:28:fb:11:f6:3d:4f:21:c8:
                    f5:33:f3:4f:cb:c2:75:96:34:13:b9:9f:a0:08:67:
                    3a:7e:f4:be:a7:8e:90:b0:a9:d1:71:8f:65:10:9a:
                    de:df:b4:b8:0a:79:2a:8f:eb:3a:66:69:71:aa:06:
                    96:d0:6c:77:64:da:e0:09:ff:fa:b3:41:01:bc:e4:
                    99:1f:f0:0f:00:e9:61:33:7f:ad:9a:85:4e:ea:cf:
                    d1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A5:57:39:98:87:0A:65:AC:70:9F:91:F1:C4:6B:4C:BE:9C:17:F7
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232332e302f32342d3234203d3e203535313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:b8:f4:b9:83:b1:b4:4f:e0:a0:c1:80:f9:e7:df:52:ea:95:
         2e:47:02:4d:37:6c:12:da:6c:e8:60:ab:cd:2f:03:6f:ad:7c:
         04:1b:a5:63:ad:80:2d:7a:95:25:86:1b:76:6a:ee:0a:79:a9:
         68:dd:7b:71:8b:fd:cf:6b:15:8d:77:99:2b:b4:13:db:13:66:
         52:19:5b:ee:04:0e:d9:af:80:d5:d0:d8:69:07:92:5b:c9:9b:
         e8:8a:9f:9e:5f:cc:5d:28:b6:f8:91:c5:1b:59:69:03:00:9d:
         b5:f4:9b:34:ed:c1:bc:96:74:05:3f:c1:22:a0:d8:5c:4a:d5:
         97:29:55:8f:95:2f:e5:02:ba:3f:02:bb:e2:a6:9f:c4:af:f4:
         ba:03:f8:77:d0:79:64:ec:e9:ec:53:22:9f:f0:b1:e2:25:ee:
         9a:bf:11:40:c1:e0:e1:a0:e7:49:6d:cc:60:72:ac:03:c3:be:
         d3:a1:2f:0f:64:89:6a:b7:3e:f8:93:2b:9c:d0:9a:bf:0e:db:
         f5:54:3b:49:0d:2c:a0:86:c2:52:43:3d:72:78:90:b0:00:75:
         23:07:1e:7c:bb:93:29:94:c4:87:62:bf:e2:a5:bf:cc:20:e6:
         11:0d:4b:b9:8f:3b:d9:b7:c1:7e:33:9b:40:c4:d1:80:d1:d6:
         4f:06:65:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org