Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233302e302f32342d3234203d3e203631333137.roa
File:                     3135372e3235342e3233302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          ZWdoagLLkx4R63etkR3nddF4qwzl4CutqauClDn6CMA=
Subject key identifier:   E6:4B:28:C9:13:41:B9:46:29:BC:CF:0E:3B:B8:CC:7D:9A:57:8D:40
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       2916568DAE5F2CE087CF49CCB461AD53F9BA3CDB
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233302e302f32342d3234203d3e203631333137.roa
Signing time:             Sun 07 May 2023 19:36:57 +0000
ROA not before:           Sun 07 May 2023 19:31:57 +0000
ROA not after:            Sun 05 May 2024 19:36:57 +0000
asID:                     61317
IP address blocks:        157.254.230.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:16:56:8d:ae:5f:2c:e0:87:cf:49:cc:b4:61:ad:53:f9:ba:3c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May  7 19:31:57 2023 GMT
            Not After : May  5 19:36:57 2024 GMT
        Subject: CN=E64B28C91341B94629BCCF0E3BB8CC7D9A578D40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6f:f2:2d:6a:18:3a:4f:80:cb:e6:66:f8:00:
                    5a:cf:90:5a:e4:55:f7:3d:4c:52:24:39:ae:99:d1:
                    a3:9c:f2:cf:7d:c0:ef:24:9e:ca:0d:49:fc:2a:3c:
                    55:78:e9:3a:bc:04:cd:f1:b6:4c:43:ba:9a:59:e4:
                    f3:a8:2c:29:74:54:d7:b0:a4:3c:8f:4e:05:1f:f8:
                    ea:d4:04:e5:fe:e0:06:59:fe:0c:62:b0:51:03:1e:
                    a0:d4:7a:29:cb:b2:56:7b:e3:7f:c2:3c:bc:10:b2:
                    b7:53:fe:4c:da:b3:14:e5:61:22:81:70:04:50:50:
                    47:30:38:3b:19:de:b6:a7:80:f7:d8:11:5b:d0:33:
                    e5:25:c3:bb:6e:a6:aa:f3:3a:84:49:1b:94:a4:0f:
                    aa:fb:51:65:bd:2a:87:51:51:55:64:7b:96:a6:86:
                    f4:35:29:f0:75:7f:6c:b6:59:44:fe:51:a1:ca:c8:
                    98:a5:71:ec:ef:40:4b:59:e0:b5:89:6d:30:26:02:
                    21:0c:0f:80:e4:b6:5d:1b:94:10:3f:a3:16:4f:f8:
                    a3:bd:16:65:07:a7:0a:15:eb:ba:f1:3d:6c:dd:66:
                    24:5c:be:23:dc:8a:d3:7d:1e:46:5c:5d:05:b7:aa:
                    4b:0c:25:f1:17:eb:1d:60:96:69:8d:bd:5f:5d:b8:
                    fe:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4B:28:C9:13:41:B9:46:29:BC:CF:0E:3B:B8:CC:7D:9A:57:8D:40
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:6e:32:8e:e4:5b:f8:d8:df:de:70:3f:d6:49:86:ce:10:b6:
         ce:09:4d:03:17:a7:c9:98:4e:1b:ba:92:11:6d:d5:6d:ab:0b:
         47:f2:71:7c:7f:65:b2:1f:76:e8:b9:26:a7:76:ee:0c:23:81:
         ac:a5:26:49:89:d6:f3:4a:29:5b:45:49:ec:d3:34:4e:4b:b5:
         6a:df:4b:97:6d:3d:7c:32:05:6d:af:da:c3:4e:c5:3f:15:ff:
         8b:44:83:af:f5:ee:62:85:38:5a:1d:55:c3:ee:db:f6:a5:75:
         ba:dc:6b:5f:45:e8:74:c8:89:73:1d:18:cc:35:c1:98:f0:86:
         f2:bf:6a:56:82:35:86:1a:dc:68:d5:bc:0a:14:2b:db:92:2f:
         fe:af:34:df:aa:db:7b:c3:12:2b:cc:18:2e:52:1d:32:11:90:
         d9:6b:a7:8f:a4:49:a3:e2:ce:18:c9:0e:a0:67:95:26:41:e8:
         3c:95:ad:de:da:0c:e7:44:ef:09:28:4a:6c:33:7e:08:7f:e1:
         1e:d3:87:06:9a:89:ab:f6:30:db:37:b2:2f:f5:48:ad:b0:24:
         ae:d5:90:8b:58:35:1e:c1:a4:09:27:0e:44:58:35:a9:95:8e:
         3f:01:f5:b8:14:2b:69:c8:03:0f:62:9e:09:06:25:06:34:fa:
         b5:ee:7b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org