Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e35302e302f32332d3233203d3e20323131353835.roa
File:                     37352e3130322e35302e302f32332d3233203d3e20323131353835.roa (raw, json)
Hash identifier:          JJTRq9QkO1JBFJgzO8xPoITZiz6AsUCu+ACdFpW+8J8=
Subject key identifier:   B3:50:5A:6C:A6:3A:4C:50:BF:08:A6:F9:E5:5E:B0:9F:44:14:D8:34
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       1DD0904AFACFA46DD6C4628A983CC0FA25020506
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e35302e302f32332d3233203d3e20323131353835.roa
Signing time:             Fri 05 May 2023 17:39:06 +0000
ROA not before:           Fri 05 May 2023 17:34:06 +0000
ROA not after:            Fri 03 May 2024 17:39:06 +0000
asID:                     211585
IP address blocks:        75.102.50.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d0:90:4a:fa:cf:a4:6d:d6:c4:62:8a:98:3c:c0:fa:25:02:05:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May  5 17:34:06 2023 GMT
            Not After : May  3 17:39:06 2024 GMT
        Subject: CN=B3505A6CA63A4C50BF08A6F9E55EB09F4414D834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:43:c1:49:26:4d:b6:e0:4a:f4:cb:bf:ae:
                    b0:a9:42:bf:37:00:fd:1d:ef:6b:90:e2:f6:cb:10:
                    2e:26:02:9a:47:d6:46:cb:9c:7d:1b:bc:84:d2:11:
                    b8:80:d1:1a:5c:b5:07:dc:04:64:82:b8:6b:07:fc:
                    fd:8d:94:4a:c2:1b:7c:95:80:a1:74:52:95:98:b3:
                    43:36:00:ce:16:5c:01:89:1f:f1:50:32:bb:3e:60:
                    d6:9e:a6:cc:c5:4c:77:4d:08:b1:bd:84:b1:04:43:
                    72:1d:18:dd:04:7c:cb:9f:45:a3:e5:7f:2a:68:63:
                    7c:a2:20:2a:ce:b8:20:69:7d:57:b4:2a:3b:78:86:
                    f8:5a:58:43:52:94:99:83:09:7a:ca:e8:a2:12:86:
                    11:5a:a5:e6:48:63:f8:89:1c:49:a3:79:fa:f9:86:
                    9e:1f:76:d5:b2:47:c0:be:26:1b:71:74:d9:42:e0:
                    44:ce:44:69:d0:2e:6f:b1:b3:f0:26:6b:bc:bc:7d:
                    0a:74:13:50:69:f0:6c:c5:21:50:13:5e:cb:0b:de:
                    a6:03:c2:ad:55:4c:5c:5f:8d:5a:f9:74:99:ec:c9:
                    73:69:73:9e:5f:ab:d6:3f:9a:34:6a:3d:35:1c:cc:
                    3c:e8:38:99:79:27:fc:87:0d:78:73:ff:c5:32:e1:
                    2c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:50:5A:6C:A6:3A:4C:50:BF:08:A6:F9:E5:5E:B0:9F:44:14:D8:34
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e35302e302f32332d3233203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:e6:aa:c9:9a:b7:bd:0e:83:cc:7d:38:de:6a:1d:82:8f:5a:
         01:99:6c:75:cb:de:18:a0:7c:9a:5f:ce:3b:0f:ec:ea:c7:8f:
         14:09:a2:77:52:ea:f2:74:58:23:c1:90:11:b4:3a:23:1a:18:
         4a:cc:51:db:b7:3f:82:fa:9b:13:8d:5a:b7:46:8b:fc:7b:cb:
         d1:a7:3c:3b:65:49:8e:84:ca:ae:45:5d:42:4a:6d:cd:43:f2:
         68:0f:e4:9d:a5:10:e9:54:92:db:91:5a:10:4e:00:ac:47:51:
         6f:c4:74:72:00:7c:33:92:1c:1a:e5:21:05:ba:0c:17:bd:65:
         6e:28:ef:e7:bc:3d:e9:ce:cf:47:76:b0:56:f6:71:ba:5b:6a:
         06:aa:0e:29:70:bb:64:2f:51:54:91:ec:59:5d:a1:f3:ac:0a:
         7e:79:7e:1e:c3:b2:2c:9b:45:23:f2:db:4c:37:73:0b:f7:bc:
         d7:a4:ae:9c:09:a7:8c:48:3f:5a:4a:32:20:10:76:84:74:7b:
         6e:24:cf:fe:d9:f5:d5:a6:d9:2d:8e:09:a1:62:85:b9:28:3e:
         d6:db:7d:4b:3e:31:e2:31:44:3c:45:5a:23:f7:8d:d9:73:fa:
         06:86:cc:ed:9c:93:07:ba:00:73:97:ad:5a:5a:89:a8:9f:71:
         2e:d8:8c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org