Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e20333939373934.roa
File:                     34352e34322e34362e302f32342d3234203d3e20333939373934.roa (raw, json)
Hash identifier:          vf6Fr6ZSx6QrF1JuzxZix2EXwT27cV2XVpKeYMQSPu0=
Subject key identifier:   E4:6E:21:56:16:30:15:17:DC:DB:6E:13:0B:AD:8B:16:E7:34:91:93
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       758BE5915D8CB0E90F2BDD4D3FCEE9A539323808
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e20333939373934.roa
Signing time:             Fri 20 Jan 2023 06:13:29 +0000
ROA not before:           Fri 20 Jan 2023 06:08:29 +0000
ROA not after:            Fri 19 Jan 2024 06:13:29 +0000
asID:                     399794
IP address blocks:        45.42.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8b:e5:91:5d:8c:b0:e9:0f:2b:dd:4d:3f:ce:e9:a5:39:32:38:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Jan 20 06:08:29 2023 GMT
            Not After : Jan 19 06:13:29 2024 GMT
        Subject: CN=E46E215616301517DCDB6E130BAD8B16E7349193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:cc:6b:b4:75:04:89:75:d1:95:ff:e3:db:13:
                    c3:cc:12:8d:d6:f9:da:55:4d:35:91:95:4a:05:7c:
                    fe:d8:8a:7d:c5:f1:5a:9e:89:a4:9d:cd:c9:d9:f2:
                    fc:3a:15:e2:bf:fd:cd:98:a7:52:a2:3c:dc:5a:7c:
                    bb:94:62:59:df:e5:69:bc:ff:00:06:f4:17:6a:7b:
                    61:0c:1f:e0:33:2a:04:19:d1:b0:dc:a1:e7:da:be:
                    92:37:bf:85:ee:89:a7:80:c3:a2:c1:9f:70:2a:d1:
                    2e:ce:98:df:79:fd:3c:36:7b:38:64:89:ce:bc:e1:
                    e8:2e:f5:32:27:1a:7e:7d:6a:02:c2:5a:20:7a:b2:
                    c8:85:3b:31:de:20:35:60:97:5b:be:81:7a:11:d4:
                    2a:d2:88:3c:f0:73:b0:9e:4f:a1:55:09:c8:07:93:
                    f1:47:ad:46:17:4f:52:8f:bf:f4:46:55:5e:23:73:
                    7e:8d:c8:f1:a1:62:13:28:43:18:70:27:e5:eb:d6:
                    e7:59:a7:22:36:9e:29:56:59:b4:d3:e0:e1:f6:6b:
                    90:9d:4e:cf:5e:8e:2e:09:6a:0d:5d:92:d3:65:ae:
                    ec:0a:f6:26:2a:1c:85:e6:de:53:1a:f7:ab:93:08:
                    04:e8:a3:02:e6:1f:c5:60:1b:f5:1d:ff:6a:71:ea:
                    ae:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6E:21:56:16:30:15:17:DC:DB:6E:13:0B:AD:8B:16:E7:34:91:93
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e20333939373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:d6:dd:32:50:7d:5d:3e:f4:b8:79:04:ec:dc:bd:2b:9f:25:
         02:be:66:6f:fd:1f:c0:f2:98:64:39:b6:71:0d:f1:6e:03:6b:
         06:4f:a6:4e:c9:50:47:1b:fc:3e:5e:3a:51:3c:e4:ef:c8:9b:
         db:9f:3f:60:89:61:6d:6b:28:29:13:5a:aa:08:26:85:40:88:
         45:1d:1e:da:08:2e:bb:e6:5d:bd:27:9f:7c:b9:5b:34:7d:90:
         d7:55:b0:de:19:3b:6e:41:42:a1:af:d0:33:ff:e2:0d:df:8d:
         c8:a0:88:3b:c4:1f:18:fa:8b:0a:d4:ac:73:08:b2:3d:fd:4b:
         20:6a:da:a5:57:37:40:69:99:df:00:9c:f1:ac:0d:86:04:29:
         b1:3c:cc:31:71:37:3d:72:a8:9e:12:36:f1:20:f4:b4:e1:5c:
         8d:7e:7a:14:74:40:a6:f1:76:9a:73:e7:e5:b0:32:fb:37:bd:
         2a:74:44:e3:d5:9d:3f:89:ae:82:78:00:95:83:b5:ce:40:dd:
         e8:68:86:67:62:33:18:ca:dc:1b:f0:01:1b:ec:50:6c:b4:ec:
         d1:9a:1b:b0:db:0d:1d:3f:f3:d0:11:4d:51:c0:59:b4:39:7f:
         54:5b:f5:83:a1:27:d7:86:9d:ab:18:cd:93:5a:09:72:1c:c6:
         2b:1a:dd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----