Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203434343836.roa
File:                     34352e34322e34322e302f32342d3234203d3e203434343836.roa (raw, json)
Hash identifier:          ZFkSs2LTYb3oxjelQ7D9H79cCMFbdw5L6+sgjLNamcI=
Subject key identifier:   2E:B8:C2:03:1E:D4:52:E6:26:93:F8:A7:66:EE:13:32:7F:D2:BD:BE
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       768A18422032919305961E6E6E37774F396A984F
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203434343836.roa
Signing time:             Fri 20 Jan 2023 06:11:09 +0000
ROA not before:           Fri 20 Jan 2023 06:06:09 +0000
ROA not after:            Fri 19 Jan 2024 06:11:09 +0000
asID:                     44486
IP address blocks:        45.42.42.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:8a:18:42:20:32:91:93:05:96:1e:6e:6e:37:77:4f:39:6a:98:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Jan 20 06:06:09 2023 GMT
            Not After : Jan 19 06:11:09 2024 GMT
        Subject: CN=2EB8C2031ED452E62693F8A766EE13327FD2BDBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:19:40:15:b1:46:15:a2:f6:02:4f:e0:dd:42:
                    ae:76:72:10:62:93:fc:ca:12:a9:c4:ed:d0:05:30:
                    ad:ec:d2:c2:77:6b:a6:ae:96:9c:d5:c5:5a:a5:9c:
                    f7:c3:51:a0:ce:93:09:ee:ef:ca:d1:e7:ab:75:b4:
                    51:79:4d:4b:bd:e6:52:37:fa:93:d5:bd:f2:66:38:
                    93:80:2e:29:5b:5a:fd:a4:c3:b5:e3:ad:6f:b2:b4:
                    75:3e:8b:42:9b:f6:a5:0f:97:34:d9:98:db:8d:69:
                    d3:20:83:e5:85:b8:a1:fe:a6:cb:9e:21:12:b8:90:
                    9b:3c:db:63:de:35:e0:62:3d:c6:f4:2e:8a:93:04:
                    c2:e9:1f:06:a6:95:8c:ed:24:b4:0a:f4:e7:ea:7f:
                    73:ef:20:7d:a0:03:14:26:2f:02:60:0b:fa:13:33:
                    c2:d0:9b:11:ae:4e:07:fc:2b:65:fd:1a:ec:71:c8:
                    e0:14:a2:d5:02:ba:00:40:e6:33:f6:da:c2:5d:71:
                    6c:eb:6c:eb:d5:b2:7d:61:fb:10:d4:4c:1e:30:9d:
                    d7:73:b8:5a:ee:31:5b:9a:f8:9e:39:01:7a:6d:12:
                    61:e8:75:22:54:79:ba:d6:ea:f2:99:52:fe:6f:b1:
                    b4:85:78:bd:1c:77:25:7e:1f:44:54:76:69:f3:77:
                    31:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B8:C2:03:1E:D4:52:E6:26:93:F8:A7:66:EE:13:32:7F:D2:BD:BE
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203434343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:04:44:9e:2e:b0:46:f7:0b:b6:70:d4:91:8c:67:52:62:5f:
         2c:d9:20:54:0b:b2:eb:5f:e8:48:f5:12:c7:1a:ef:db:68:17:
         f7:f3:a5:53:47:65:26:27:85:8a:3f:cc:d2:08:5e:87:02:0a:
         a9:64:e9:e4:19:da:57:a5:78:5d:fb:90:f0:d5:0f:d5:95:6b:
         d5:de:20:c1:45:53:48:5d:60:63:bc:ab:13:05:69:00:7e:09:
         25:ae:22:86:65:cf:ba:45:87:74:50:d5:32:be:46:9f:9c:45:
         7d:96:ce:13:25:2e:d1:e7:3b:94:e1:cb:60:2c:24:2a:4f:6d:
         c8:85:ce:56:13:7d:b7:e6:73:c5:70:16:67:07:dd:8d:20:e8:
         a0:b1:e1:1d:b9:ac:f1:11:64:74:2a:e6:af:4f:5c:de:20:aa:
         9b:d1:b0:d9:63:28:a6:dc:dc:a1:7a:c8:dc:4f:42:76:36:6b:
         9c:b1:31:7f:58:3f:8b:39:1c:b3:3f:e6:6a:74:52:d7:17:1d:
         b8:bb:3c:e6:06:cd:d1:d3:3b:6b:93:65:5f:b5:b7:8b:94:f7:
         69:34:40:e5:b3:85:54:56:bf:1e:e8:20:ec:14:87:47:47:f2:
         58:d9:7b:6b:38:06:39:c5:b9:ef:57:59:8a:48:06:47:75:aa:
         c2:b1:d0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----