Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208185.roa
File:                     AS208185.roa (raw, json)
Hash identifier:          ucKSjJOfKoLM+/tjq9cAQn0+hob0v7ZVJiIy2+khoI0=
Subject key identifier:   24:7D:78:03:D0:34:74:41:D0:21:96:5D:93:CF:D9:C1:D0:7C:00:58
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       3C855696FA5E73CBD2B9BF9CF962264146F1493A
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208185.roa
Signing time:             Fri 27 Jan 2023 11:32:38 +0000
ROA not before:           Fri 27 Jan 2023 11:27:38 +0000
ROA not after:            Fri 26 Jan 2024 11:32:38 +0000
asID:                     208185
IP address blocks:        2a06:a005:d40::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:85:56:96:fa:5e:73:cb:d2:b9:bf:9c:f9:62:26:41:46:f1:49:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan 27 11:27:38 2023 GMT
            Not After : Jan 26 11:32:38 2024 GMT
        Subject: CN=247D7803D0347441D021965D93CFD9C1D07C0058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:be:1a:c2:25:31:08:5c:e3:58:43:7e:00:dc:
                    ff:73:40:09:5c:82:ef:af:3d:58:08:7c:ae:d4:40:
                    d7:0f:77:73:60:22:b0:a9:05:a6:f3:57:ad:66:63:
                    bc:78:86:19:d2:d7:2a:79:7f:ae:c0:db:3f:b3:b0:
                    20:39:e2:66:d9:e3:e3:19:e3:42:85:09:1c:18:07:
                    c3:01:76:f4:b8:5f:60:b3:b4:cd:43:2d:59:7a:60:
                    45:11:33:07:a2:99:e7:d4:d6:a0:db:46:71:8e:0a:
                    4a:9c:27:51:01:bb:9c:34:39:35:02:99:1e:99:47:
                    7c:f4:ca:51:37:5c:d7:60:27:80:fe:9f:1f:ea:67:
                    89:5c:8e:d0:d3:41:a6:a4:c2:7a:a2:a3:6f:bb:74:
                    21:76:6c:cc:2a:73:3f:94:24:90:6d:de:24:f5:d8:
                    ea:8e:bd:fe:ce:43:51:3a:78:5b:26:1e:49:c8:b2:
                    48:f2:9a:fe:8d:fa:e2:03:1c:53:ab:71:c4:58:35:
                    ed:e2:95:fb:eb:e4:dc:2a:19:d8:82:4d:d0:e1:1c:
                    ac:1a:08:b4:eb:fb:4a:96:d9:7c:63:1e:e5:5b:84:
                    91:71:cd:cf:9f:67:1c:aa:e3:2a:ba:69:36:2d:7e:
                    13:83:da:e0:70:05:f9:57:f4:26:f6:2f:8d:08:22:
                    47:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7D:78:03:D0:34:74:41:D0:21:96:5D:93:CF:D9:C1:D0:7C:00:58
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208185.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d40::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:e1:75:2b:94:b5:0a:89:66:ba:30:90:61:9f:07:3f:5c:a1:
         53:9e:6a:0f:3b:dc:ae:42:a7:9a:4b:a5:06:86:f6:2c:c9:2e:
         11:8f:df:f3:51:9a:5a:a9:34:f0:cb:6d:43:c3:d0:04:58:61:
         d4:e4:af:f3:72:82:da:71:0a:ec:da:08:60:48:15:d2:2d:a9:
         fd:d2:03:a6:67:9c:ac:e8:ca:8c:7d:a5:99:81:a4:bd:ee:d4:
         f0:91:38:67:da:ab:46:1d:0c:af:3e:a3:b3:d7:cb:1b:61:73:
         f0:ca:bc:ac:55:f7:25:6e:c0:ae:62:32:1b:9b:8d:52:33:c7:
         9a:b5:9c:de:c3:3d:e9:5b:46:68:93:b2:97:84:ac:0f:9d:40:
         30:1d:2a:19:e0:d7:b6:f8:7f:79:66:71:f3:29:83:3c:3d:51:
         17:8e:12:3f:4b:81:dd:a6:7a:31:a4:0e:9b:7d:54:cb:1c:cd:
         ad:c3:73:d2:19:d6:5f:1e:7e:81:c6:5c:6c:74:e6:d4:00:bd:
         62:83:1c:04:6d:82:05:46:94:21:cd:67:e2:86:25:d2:85:49:
         3f:dc:26:ef:b3:4c:a8:66:3f:0b:a7:82:50:35:be:e4:19:78:
         be:00:bd:44:ba:10:f3:18:d1:16:6b:0e:19:4e:4d:cc:53:f7:
         e7:3f:99:9b
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUPIVWlvpec8vSub+c+WImQUbxSTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzAxMjcxMTI3MzhaFw0yNDAxMjYxMTMyMzhaMDMxMTAvBgNV
BAMTKDI0N0Q3ODAzRDAzNDc0NDFEMDIxOTY1RDkzQ0ZEOUMxRDA3QzAwNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWvhrCJTEIXONYQ34A3P9zQAlc
gu+vPVgIfK7UQNcPd3NgIrCpBabzV61mY7x4hhnS1yp5f67A2z+zsCA54mbZ4+MZ
40KFCRwYB8MBdvS4X2CztM1DLVl6YEURMweimefU1qDbRnGOCkqcJ1EBu5w0OTUC
mR6ZR3z0ylE3XNdgJ4D+nx/qZ4lcjtDTQaakwnqio2+7dCF2bMwqcz+UJJBt3iT1
2OqOvf7OQ1E6eFsmHknIskjymv6N+uIDHFOrccRYNe3ilfvr5NwqGdiCTdDhHKwa
CLTr+0qW2XxjHuVbhJFxzc+fZxyq4yq6aTYtfhOD2uBwBflX9Cb2L40IIkcnAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUJH14A9A0dEHQIZZdk8/ZwdB8AFgwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjA4MTg1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKgagBQ1AMA0GCSqGSIb3DQEBCwUAA4IBAQCD4XUr
lLUKiWa6MJBhnwc/XKFTnmoPO9yuQqeaS6UGhvYsyS4Rj9/zUZpaqTTwy21Dw9AE
WGHU5K/zcoLacQrs2ghgSBXSLan90gOmZ5ys6MqMfaWZgaS97tTwkThn2qtGHQyv
PqOz18sbYXPwyrysVfclbsCuYjIbm41SM8eatZzewz3pW0Zok7KXhKwPnUAwHSoZ
4Ne2+H95ZnHzKYM8PVEXjhI/S4HdpnoxpA6bfVTLHM2tw3PSGdZfHn6BxlxsdObU
AL1igxwEbYIFRpQhzWfihiXShUk/3Cbvs0yoZj8Lp4JQNb7kGXi+AL1EuhDzGNEW
aw4ZTk3MU/fnP5mb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org