Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS1018.roa
File:                     AS1018.roa (raw, json)
Hash identifier:          OFpcyp/ttkjrySrBgLydm3Qo1e2FmqGqb0kEFhxDx3E=
Subject key identifier:   7B:80:3F:F8:71:43:EF:87:F2:C5:4B:51:8D:BF:7E:F6:E9:08:5D:10
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       3E9C3C0F1CCEDBF7D195699BECF4532A4B2A4832
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS1018.roa
Signing time:             Tue 03 Jan 2023 02:07:07 +0000
ROA not before:           Tue 03 Jan 2023 02:02:07 +0000
ROA not after:            Tue 02 Jan 2024 02:07:07 +0000
asID:                     1018
IP address blocks:        2a06:a005:5f8::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9c:3c:0f:1c:ce:db:f7:d1:95:69:9b:ec:f4:53:2a:4b:2a:48:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan  3 02:02:07 2023 GMT
            Not After : Jan  2 02:07:07 2024 GMT
        Subject: CN=7B803FF87143EF87F2C54B518DBF7EF6E9085D10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ff:8d:d6:f5:a1:d5:36:c0:77:b8:30:48:c2:
                    09:40:1a:a1:45:f0:c7:32:1d:6b:54:34:76:4f:10:
                    9d:05:a8:3d:77:b3:ec:b1:1c:9c:61:3d:5d:12:73:
                    1b:f6:34:71:45:a2:bd:3f:3d:16:7c:84:53:50:d1:
                    ab:b5:cd:a5:65:b9:6a:84:d2:ef:36:a3:55:bb:e6:
                    4f:3c:33:c8:77:4d:34:48:66:df:66:f0:74:b1:2b:
                    d2:78:62:27:2c:52:89:20:a0:e1:c7:36:b2:d8:eb:
                    0f:6a:ea:35:6b:45:c0:00:c7:d7:12:51:13:fd:4f:
                    73:b1:d2:5f:ba:41:68:7d:39:1a:cf:53:97:d4:a9:
                    bc:aa:c3:de:87:06:0e:16:92:cf:92:c1:10:44:fc:
                    1d:e6:87:98:fa:7f:aa:0b:68:8b:51:42:e8:34:c5:
                    06:2b:89:ca:1b:b6:7e:9f:ac:9f:66:04:ff:97:0b:
                    fd:55:1c:50:87:f6:29:25:04:36:5c:a5:23:e8:46:
                    3c:37:8e:72:62:49:97:c7:99:c5:2a:ee:af:9a:a2:
                    f0:c4:55:04:3d:b4:78:16:41:69:27:03:b8:d3:43:
                    3a:0a:d6:28:03:d8:0b:fc:ad:14:cf:45:bb:91:2e:
                    d5:ab:ee:47:f0:05:82:35:d8:80:05:75:ed:14:30:
                    74:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:80:3F:F8:71:43:EF:87:F2:C5:4B:51:8D:BF:7E:F6:E9:08:5D:10
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS1018.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:bb:dd:fc:4a:c6:c4:9b:e6:d7:9b:8d:07:8e:e0:1f:3a:a1:
         91:a1:6a:0f:31:03:8d:fd:16:56:d2:fe:68:fd:eb:3c:a1:c9:
         71:e8:cd:8d:ce:46:f8:4b:9d:d5:df:0f:97:08:5e:7c:7e:41:
         e8:06:e2:84:69:8d:a5:29:8b:ff:52:b2:79:14:e0:5b:60:8c:
         91:3a:3d:ef:3c:bd:a5:68:cd:f0:6b:13:3a:38:da:02:e3:42:
         a5:91:fe:0a:a8:6d:70:fa:cc:7d:d1:1c:27:7c:5b:ff:4e:0e:
         39:83:20:56:a6:34:22:a5:7b:06:e4:d2:e6:6a:2c:72:ef:72:
         eb:e1:0f:2f:80:fa:80:52:5c:1e:57:96:c2:fa:06:c2:05:b6:
         ac:f9:07:98:25:62:16:9b:87:b9:5f:46:e6:c6:f0:6a:f5:f1:
         2f:23:ed:9b:fb:44:73:83:9d:93:5a:94:d5:26:33:4d:79:6b:
         74:81:9d:52:51:4c:e3:49:3f:31:26:b6:07:a2:97:d4:19:1f:
         6e:30:db:35:ce:81:fe:b8:3a:58:fd:df:6f:7c:a4:85:da:24:
         21:ce:9c:c2:93:87:6c:67:82:f6:5a:7f:3d:a1:84:74:97:f6:
         c7:61:45:a0:53:01:10:d1:3f:06:c4:84:33:6a:e1:71:01:5e:
         98:2a:d0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org