Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201445.roa
File:                     AS201445.roa (raw, json)
Hash identifier:          uyLDwTd8OsKKGZroclDTCUuYreke/N/lAu4hfC8DCd0=
Subject key identifier:   AE:74:F9:60:63:8D:5B:D0:39:F4:F8:66:E5:8E:8D:60:3D:BE:37:99
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       2E97F64AD1881ABB5A492293C22A5718991D7C34
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201445.roa
Signing time:             Tue 03 Jan 2023 02:07:10 +0000
ROA not before:           Tue 03 Jan 2023 02:02:10 +0000
ROA not after:            Tue 02 Jan 2024 02:07:10 +0000
asID:                     201445
IP address blocks:        2a06:a005:150f::/48 maxlen: 48
                          2a06:a005:1c79::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:97:f6:4a:d1:88:1a:bb:5a:49:22:93:c2:2a:57:18:99:1d:7c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan  3 02:02:10 2023 GMT
            Not After : Jan  2 02:07:10 2024 GMT
        Subject: CN=AE74F960638D5BD039F4F866E58E8D603DBE3799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:da:4b:18:2f:9d:4f:e7:75:d9:1d:ba:84:9e:
                    b0:70:c7:41:30:20:cf:4c:01:65:24:62:f8:f2:d8:
                    2d:30:e3:07:ac:4a:ad:1e:a0:56:40:46:05:0a:45:
                    e4:9b:96:d0:12:67:31:56:df:d8:b6:dc:08:f8:22:
                    ce:3b:9a:a3:be:e9:31:5f:14:65:5b:83:c6:ce:13:
                    ef:fc:5f:69:65:63:87:c2:b5:60:f4:b4:ba:b0:5c:
                    7d:62:cc:17:56:b6:66:6e:58:84:bb:66:89:4b:fe:
                    e4:4a:f1:db:2f:f3:50:3c:4f:b1:1e:07:9e:9c:26:
                    4f:47:12:09:77:11:60:53:bf:75:fd:6a:f7:e2:5f:
                    ad:8f:af:05:e4:72:2c:d6:4c:34:0a:39:51:2e:f8:
                    9c:e8:c2:2b:56:42:6e:62:b6:1f:03:3c:ed:4c:2c:
                    43:11:9d:0f:63:2f:6d:88:79:36:fb:ea:61:da:dd:
                    d7:7d:46:84:b6:8c:3b:75:ce:8c:95:07:23:ec:92:
                    70:3b:b6:67:63:28:52:ce:67:a7:de:91:e0:12:b3:
                    1b:67:c3:55:2c:a3:24:5e:23:e6:ac:cd:09:b8:f3:
                    28:92:e3:3e:65:9e:24:c6:0a:49:31:a6:1a:45:51:
                    71:f2:d7:88:36:2f:28:ed:10:ef:97:f4:4f:7d:44:
                    dd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:74:F9:60:63:8D:5B:D0:39:F4:F8:66:E5:8E:8D:60:3D:BE:37:99
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201445.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:150f::/48
                  2a06:a005:1c79::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:25:bf:5d:cf:25:07:0a:70:7a:d1:f1:81:cc:f7:99:02:89:
         cb:68:ff:f1:42:3c:e6:51:a3:94:cd:0d:d0:bb:17:59:27:c7:
         8d:a7:7f:34:c3:a3:28:92:c1:d9:fa:97:ce:28:22:3e:42:b4:
         1f:35:55:7d:3a:93:46:55:c1:37:69:e3:82:ee:7b:65:f0:7a:
         a1:00:ad:75:39:bb:37:0a:1e:a9:0d:1c:82:3c:64:58:ec:d7:
         41:7b:d2:0d:6d:69:ca:c3:72:dc:b3:c2:39:90:f6:2f:38:fd:
         5d:83:83:30:0f:ac:7b:13:65:b1:60:e4:98:9a:a5:f5:03:81:
         44:85:9a:16:5b:63:cb:82:25:48:90:33:05:bc:b7:29:fe:69:
         87:ad:0d:10:28:e3:40:81:ae:3f:c8:62:56:ea:b6:04:1c:2d:
         ed:4e:63:ee:fd:34:13:52:ec:5f:42:d1:5b:bf:4e:25:46:15:
         b2:38:64:9e:56:90:e7:d1:2c:11:c4:fc:99:e3:46:61:c8:fa:
         42:8f:cd:27:1f:b7:e2:11:32:a1:72:0f:49:3b:37:8b:06:02:
         39:da:e1:76:d2:a2:b5:92:6f:87:2d:de:58:a6:49:c9:23:90:
         2f:c6:a8:7d:71:29:da:7c:b9:cc:d8:fd:86:76:5c:00:07:1b:
         df:c7:a6:b3
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIULpf2StGIGrtaSSKTwipXGJkdfDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzAxMDMwMjAyMTBaFw0yNDAxMDIwMjA3MTBaMDMxMTAvBgNV
BAMTKEFFNzRGOTYwNjM4RDVCRDAzOUY0Rjg2NkU1OEU4RDYwM0RCRTM3OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR2ksYL51P53XZHbqEnrBwx0Ew
IM9MAWUkYvjy2C0w4wesSq0eoFZARgUKReSbltASZzFW39i23Aj4Is47mqO+6TFf
FGVbg8bOE+/8X2llY4fCtWD0tLqwXH1izBdWtmZuWIS7ZolL/uRK8dsv81A8T7Ee
B56cJk9HEgl3EWBTv3X9avfiX62PrwXkcizWTDQKOVEu+JzowitWQm5ith8DPO1M
LEMRnQ9jL22IeTb76mHa3dd9RoS2jDt1zoyVByPsknA7tmdjKFLOZ6fekeASsxtn
w1UsoyReI+aszQm48yiS4z5lniTGCkkxphpFUXHy14g2LyjtEO+X9E99RN2HAgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQUrnT5YGONW9A59Phm5Y6NYD2+N5kwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjAxNDQ1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEH
AQH/BBwwGjAYBAIAAjASAwcAKgagBRUPAwcAKgagBRx5MA0GCSqGSIb3DQEBCwUA
A4IBAQB0Jb9dzyUHCnB60fGBzPeZAonLaP/xQjzmUaOUzQ3QuxdZJ8eNp380w6Mo
ksHZ+pfOKCI+QrQfNVV9OpNGVcE3aeOC7ntl8HqhAK11Obs3Ch6pDRyCPGRY7NdB
e9INbWnKw3Lcs8I5kPYvOP1dg4MwD6x7E2WxYOSYmqX1A4FEhZoWW2PLgiVIkDMF
vLcp/mmHrQ0QKONAga4/yGJW6rYEHC3tTmPu/TQTUuxfQtFbv04lRhWyOGSeVpDn
0SwRxPyZ40ZhyPpCj80nH7fiETKhcg9JOzeLBgI52uF20qK1km+HLd5YpknJI5Av
xqh9cSnafLnM2P2GdlwABxvfx6az
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org