Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3139332e302f32342d3234203d3e203439393939.roa
File:                     36362e3232352e3139332e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          HxDMuAby331cJNM0TUO4FJOSBDIIAJwkqM+t01wfI5I=
Subject key identifier:   50:53:B0:21:C2:9F:C7:34:90:F0:95:17:5C:66:CD:07:F6:55:48:57
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       7BA088881E809C17330E72DF991B8A6BCEBD6CC0
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3139332e302f32342d3234203d3e203439393939.roa
Signing time:             Fri 19 May 2023 10:56:27 +0000
ROA not before:           Fri 19 May 2023 10:51:27 +0000
ROA not after:            Fri 17 May 2024 10:56:27 +0000
asID:                     49999
IP address blocks:        66.225.193.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a0:88:88:1e:80:9c:17:33:0e:72:df:99:1b:8a:6b:ce:bd:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 19 10:51:27 2023 GMT
            Not After : May 17 10:56:27 2024 GMT
        Subject: CN=5053B021C29FC73490F095175C66CD07F6554857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:1f:4c:59:3f:bc:04:0d:51:fc:ea:1b:c8:
                    e3:11:d8:18:10:dc:37:e7:94:ab:ec:71:d0:bc:61:
                    77:48:0c:d0:03:75:8b:ea:c3:b3:4f:14:f6:71:8c:
                    60:37:f4:91:02:b5:bb:8a:34:cc:c7:75:5e:10:96:
                    99:15:ee:56:8b:8c:50:31:93:e4:f3:82:bc:dd:10:
                    45:d8:84:f5:31:e4:da:53:84:ff:d8:73:c1:95:f4:
                    85:8e:35:55:cb:be:42:3c:c7:fd:bb:c9:12:28:a3:
                    e4:17:2b:f8:30:9a:76:04:b2:54:05:12:ec:13:66:
                    4d:90:0c:42:df:2f:09:de:6b:e9:59:9f:aa:28:2f:
                    ff:a4:74:3e:68:ff:ed:9c:2d:42:ce:fc:89:41:6f:
                    56:5a:58:b0:6f:50:f4:24:e2:f2:ed:6e:57:27:ae:
                    f9:d2:8b:2a:59:d1:4b:78:9e:59:6c:d3:3b:f4:11:
                    f3:0e:c9:e1:e9:4f:68:65:2c:48:57:f3:08:9d:97:
                    ba:0d:ed:92:e4:b7:2c:cb:9c:37:83:25:0a:03:c5:
                    4f:52:d2:c7:84:17:12:04:41:25:b3:0b:f4:5e:b0:
                    0b:b9:5f:a6:37:7f:7e:4b:78:5f:71:f2:51:ae:9d:
                    2e:3a:ef:e6:d1:74:f6:27:88:b0:ec:e8:ca:47:08:
                    45:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:53:B0:21:C2:9F:C7:34:90:F0:95:17:5C:66:CD:07:F6:55:48:57
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3139332e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:11:ce:5e:16:91:16:88:0e:df:12:4e:94:d6:18:a1:91:b2:
         c3:6d:22:26:3b:e0:a2:2f:36:52:48:7e:d4:dc:a3:66:be:5a:
         d0:c9:59:d9:a8:48:fd:88:8c:51:d2:39:f3:30:fb:f3:09:99:
         c7:4a:91:28:f9:0b:d4:87:cd:3c:b8:46:c2:58:4b:6c:74:ee:
         38:98:86:6c:04:8e:56:9a:c3:dd:44:92:87:33:9c:15:91:58:
         af:a7:ea:73:99:51:85:21:33:1c:2e:d3:73:24:f1:c0:96:7d:
         bb:39:7b:1e:64:0e:c5:1c:99:ad:94:68:71:93:94:e3:77:39:
         d5:55:ab:95:0d:c4:db:94:5a:80:16:d4:5f:1a:2f:6e:82:3b:
         a5:eb:88:fc:52:8d:ac:15:db:3c:94:14:eb:2b:14:80:82:de:
         21:5b:8f:04:85:3c:fa:da:d5:d1:a5:78:1d:1a:90:ce:0d:fa:
         dd:22:6c:1f:f2:a2:12:08:ae:4f:e0:19:da:5b:98:8a:25:70:
         e6:f5:5a:3a:f5:f7:07:39:d8:3a:26:e5:36:f4:a1:20:4f:6b:
         f9:7e:25:0b:b0:40:4f:ee:09:f9:e9:2c:b5:5b:4b:8b:7c:09:
         21:5b:52:9e:26:0a:d7:39:dc:54:d2:9d:8c:53:23:92:cc:23:
         ce:ac:19:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org