Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232362e302f32342d3234203d3e203139343337.roa
File:                     3135372e3235342e3232362e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          u8iY1+sMKH43zqNAsT0BKLESiYd3SFgiUmfd5AeYL9Q=
Subject key identifier:   11:E8:3D:1B:D8:E1:01:D7:07:03:58:73:AA:34:54:46:C2:29:8A:D8
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       5AED5E3C56A1160148F7B3DB71731DA23572E5EB
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232362e302f32342d3234203d3e203139343337.roa
Signing time:             Fri 14 Apr 2023 15:14:59 +0000
ROA not before:           Fri 14 Apr 2023 15:09:59 +0000
ROA not after:            Fri 12 Apr 2024 15:14:59 +0000
asID:                     19437
IP address blocks:        157.254.226.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ed:5e:3c:56:a1:16:01:48:f7:b3:db:71:73:1d:a2:35:72:e5:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 14 15:09:59 2023 GMT
            Not After : Apr 12 15:14:59 2024 GMT
        Subject: CN=11E83D1BD8E101D707035873AA345446C2298AD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:eb:d5:fc:dc:a8:dc:f0:2f:8d:1a:db:04:70:
                    6b:63:05:e5:91:44:d2:ea:78:ff:10:5b:f7:a9:65:
                    00:5f:37:4a:01:22:83:c7:f2:9a:7e:c0:d2:33:73:
                    dd:e7:4c:fc:a2:82:8b:18:04:11:1d:25:77:54:c1:
                    15:40:14:fc:1f:5c:86:d9:70:0d:0f:7c:cf:60:4e:
                    0f:d8:f1:9c:b1:e6:5d:fc:97:91:d5:68:4d:3d:52:
                    39:c0:87:9b:73:dc:42:9d:50:b4:b1:6a:65:98:b9:
                    41:65:65:06:d7:e5:33:c7:47:46:d4:07:26:9b:c1:
                    96:2d:aa:4d:16:97:8b:78:a5:4a:f1:15:bd:76:20:
                    3d:75:ad:ff:32:23:b8:69:39:cb:1a:2f:c3:84:fe:
                    e5:5d:61:20:93:2c:7b:ab:86:72:fa:b1:ab:f2:fb:
                    6d:f6:32:b9:8a:53:d7:99:60:2a:d2:c6:e8:51:fe:
                    81:71:54:53:7e:97:02:e4:5b:56:54:58:a4:28:99:
                    bc:28:dd:42:11:2f:04:1e:33:c5:46:1c:72:06:72:
                    f1:4c:e0:88:eb:ac:58:a2:20:4c:4d:63:07:04:f8:
                    a7:48:9b:23:47:0c:9c:45:03:5b:8d:31:34:ee:7f:
                    ce:02:eb:3a:d8:5f:3d:9e:ef:ba:3c:e3:bc:a9:b8:
                    f8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E8:3D:1B:D8:E1:01:D7:07:03:58:73:AA:34:54:46:C2:29:8A:D8
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232362e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:26:f1:29:ff:0e:52:b8:3b:7c:94:5b:10:96:10:25:82:df:
         f5:b7:94:78:54:f0:4e:0c:b1:49:45:f9:cf:26:ad:96:99:45:
         77:9d:2d:d3:18:d5:b2:98:60:2f:b4:41:7b:40:8c:7c:10:e1:
         f1:18:e6:75:57:f3:4a:83:be:9f:b5:1f:17:7f:f9:97:d4:0f:
         85:78:b8:54:af:98:70:ca:6d:54:8a:e7:ad:3a:e9:3c:60:75:
         81:78:2d:78:55:fc:f5:dc:5e:5e:c4:f6:73:d6:ee:f6:ef:81:
         4b:f2:31:34:c2:4f:39:4d:ed:dc:6d:7d:21:5e:48:38:e0:4e:
         1f:6b:88:92:55:3c:9f:ed:de:c5:87:39:cb:da:4a:c2:1f:40:
         f0:f2:bd:d3:20:3d:e8:df:3e:6c:12:7f:46:67:12:62:e4:06:
         07:55:08:a2:88:f1:fd:ec:88:0e:04:cb:ff:81:9e:e0:28:bb:
         58:5a:ae:74:e0:30:0c:cc:aa:37:18:0e:2d:67:03:16:4c:4a:
         04:e8:a9:c9:b1:4d:28:02:a3:61:d1:07:db:d0:26:1e:67:95:
         2d:28:b2:3a:bf:9a:18:73:1e:7d:57:b3:cd:1f:33:4a:76:1c:
         7f:50:dc:50:93:fc:3a:63:a8:bb:86:ec:b9:d6:f8:13:ed:db:
         f1:8c:b0:49
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUWu1ePFahFgFI97PbcXMdojVy5eswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwNDE0MTUwOTU5WhcNMjQwNDEyMTUxNDU5
WjAzMTEwLwYDVQQDEygxMUU4M0QxQkQ4RTEwMUQ3MDcwMzU4NzNBQTM0NTQ0NkMy
Mjk4QUQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uvV/Nyo3PAv
jRrbBHBrYwXlkUTS6nj/EFv3qWUAXzdKASKDx/KafsDSM3Pd50z8ooKLGAQRHSV3
VMEVQBT8H1yG2XAND3zPYE4P2PGcseZd/JeR1WhNPVI5wIebc9xCnVC0sWplmLlB
ZWUG1+Uzx0dG1Acmm8GWLapNFpeLeKVK8RW9diA9da3/MiO4aTnLGi/DhP7lXWEg
kyx7q4Zy+rGr8vtt9jK5ilPXmWAq0sboUf6BcVRTfpcC5FtWVFikKJm8KN1CES8E
HjPFRhxyBnLxTOCI66xYoiBMTWMHBPinSJsjRwycRQNbjTE07n/OAus62F89nu+6
POO8qbj4OwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFBHoPRvY4QHXBwNYc6o0VEbC
KYrYMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMjMyMzYyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM5MzQzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf7iMA0GCSqGSIb3DQEB
CwUAA4IBAQASJvEp/w5SuDt8lFsQlhAlgt/1t5R4VPBODLFJRfnPJq2WmUV3nS3T
GNWymGAvtEF7QIx8EOHxGOZ1V/NKg76ftR8Xf/mX1A+FeLhUr5hwym1UiuetOuk8
YHWBeC14Vfz13F5exPZz1u7274FL8jE0wk85Te3cbX0hXkg44E4fa4iSVTyf7d7F
hznL2krCH0Dw8r3TID3o3z5sEn9GZxJi5AYHVQiiiPH97IgOBMv/gZ7gKLtYWq50
4DAMzKo3GA4tZwMWTEoE6KnJsU0oAqNh0Qfb0CYeZ5UtKLI6v5oYcx59V7PNHzNK
dhx/UNxQk/w6Y6i7huy51vgT7dvxjLBJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org