Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210912.roa
File:                     AS210912.roa (raw, json)
Hash identifier:          53fOpSnrg/34jmlu1toulOGq9Gs6N6ngAxI428aZN+Y=
Subject key identifier:   C6:73:69:5F:32:52:7B:87:A9:6E:CD:93:45:4F:B0:F4:2A:2F:B0:95
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       323B48399A6B8D8E1E5F8340495FBA96D61F3F3B
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210912.roa
Signing time:             Sat 21 Jan 2023 18:14:45 +0000
ROA not before:           Sat 21 Jan 2023 18:09:45 +0000
ROA not after:            Sat 20 Jan 2024 18:14:45 +0000
asID:                     210912
IP address blocks:        2a06:a005:2600::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:3b:48:39:9a:6b:8d:8e:1e:5f:83:40:49:5f:ba:96:d6:1f:3f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan 21 18:09:45 2023 GMT
            Not After : Jan 20 18:14:45 2024 GMT
        Subject: CN=C673695F32527B87A96ECD93454FB0F42A2FB095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:13:97:b9:94:86:1b:b4:5a:99:9c:52:2f:1b:
                    44:7f:d2:af:98:6b:c8:f1:2c:a3:d1:e9:72:47:49:
                    f4:4f:df:26:0f:3f:43:19:a6:c5:76:86:71:bc:b3:
                    4b:a6:45:a7:a8:ac:71:fa:2c:da:2e:32:14:03:5f:
                    10:4e:6c:72:24:74:26:9e:45:b1:f8:1e:bf:53:64:
                    a6:f1:4e:fb:71:0a:be:95:61:f8:2a:9c:a5:b3:5f:
                    96:33:65:4b:3b:de:18:35:85:07:82:ef:41:cd:3d:
                    f3:81:23:ef:90:14:0e:9a:9a:03:9a:3f:80:26:ca:
                    d5:12:13:b0:00:5a:0b:12:59:24:9f:92:7f:9e:e1:
                    82:b1:1a:f2:e3:a3:d1:6f:2b:dd:bd:3e:5a:29:1f:
                    90:08:7d:1f:8e:01:72:4f:9a:af:9b:54:c5:8e:71:
                    de:1b:12:1e:fd:9b:a2:6b:ff:1c:7c:98:12:8c:7a:
                    04:d1:11:9d:8e:0c:cd:00:f3:ec:f5:41:28:eb:f0:
                    03:20:e1:d6:66:97:38:9f:0a:22:5b:42:d8:4f:ae:
                    91:77:f5:30:6a:e9:2d:01:04:4e:0a:96:71:5c:99:
                    83:b1:19:dd:e8:2f:3d:71:f6:7a:29:9f:79:0c:a5:
                    e4:c3:87:8c:a2:3d:87:47:cb:21:55:68:e3:2c:36:
                    ed:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:73:69:5F:32:52:7B:87:A9:6E:CD:93:45:4F:B0:F4:2A:2F:B0:95
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210912.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2600::/44

    Signature Algorithm: sha256WithRSAEncryption
         ac:82:7d:71:ce:70:da:34:5f:52:4c:40:9d:ff:99:ea:e5:31:
         b8:8a:a1:ae:07:46:82:b7:50:1a:61:e2:49:a0:eb:fe:37:fb:
         49:d1:f8:41:2c:27:42:60:f0:b6:d7:a7:4d:36:b6:fc:7a:7d:
         66:f8:d0:b5:1f:b3:0e:dd:7f:dc:2c:09:82:b4:a2:6d:6a:b9:
         27:1c:7d:6e:c7:62:d3:0f:1a:65:5b:66:47:b5:a0:86:a9:5e:
         7a:c3:55:87:19:4b:20:1e:74:6b:ac:e0:a9:8f:54:8b:e6:59:
         51:b9:5a:4e:07:01:ad:b2:c4:94:63:69:a1:34:9d:9f:9f:4b:
         d6:16:0a:d5:28:6a:bc:7c:4a:33:a8:8e:75:33:0f:eb:cf:53:
         9f:f9:a4:ee:05:e8:35:79:22:1c:da:16:db:e4:d9:f6:b8:9d:
         6e:84:bf:90:fa:64:e2:9b:63:24:57:ac:f0:eb:33:4a:43:ab:
         9c:5c:c5:41:12:33:28:c7:4f:ba:79:55:4f:ea:b4:e9:6e:1d:
         ca:c7:6d:9d:dd:2a:d1:30:56:52:0d:9a:04:75:f0:12:61:55:
         5a:83:40:ed:49:6a:c6:b2:e9:10:a0:46:8a:29:3a:28:93:f0:
         40:2c:e0:9e:42:56:e4:a7:11:8c:ed:2a:af:c8:ec:5b:d5:31:
         8b:8d:b6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org