Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3136342e302f32342d3234203d3e20323132323338.roa
File:                     36342e35302e3136342e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          9KAgoU7on4BQtGIjf8DfjODvx589VsNJb2l5+ZR1Iac=
Subject key identifier:   00:ED:10:8A:16:52:79:D8:3F:D4:F8:41:3B:83:6E:57:50:36:4D:C3
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7628BEE3B2AC02DD0AFA3BF626F8F0278B8F61FF
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3136342e302f32342d3234203d3e20323132323338.roa
Signing time:             Mon 28 Nov 2022 11:21:59 +0000
ROA not before:           Mon 28 Nov 2022 11:16:59 +0000
ROA not after:            Mon 27 Nov 2023 11:21:59 +0000
asID:                     212238
IP address blocks:        64.50.164.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:28:be:e3:b2:ac:02:dd:0a:fa:3b:f6:26:f8:f0:27:8b:8f:61:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:59 2022 GMT
            Not After : Nov 27 11:21:59 2023 GMT
        Subject: CN=00ED108A165279D83FD4F8413B836E5750364DC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:05:38:30:9e:56:da:ad:56:81:c6:fb:bb:79:
                    0c:ec:19:9e:f8:8c:1c:b2:7b:22:d9:d3:e0:82:35:
                    b2:d2:fa:59:aa:58:0d:9b:a2:ee:95:99:f6:52:38:
                    26:84:18:59:e6:eb:8b:7c:b2:02:1e:b5:b9:44:b4:
                    54:6e:a8:af:a9:61:b4:9d:7b:1e:3a:dc:e9:93:ae:
                    85:e0:e7:ad:db:66:bd:1f:57:a3:3d:63:f5:40:ba:
                    44:cf:8f:04:d2:b4:dd:49:63:a0:e6:dd:c8:87:08:
                    66:db:a4:a5:85:75:08:30:e4:78:59:c9:cc:c0:ae:
                    1c:e6:57:7c:8a:cb:48:54:ff:01:b3:25:c3:9b:02:
                    f7:32:ec:52:6e:65:7b:04:f3:c1:ac:60:3b:63:c5:
                    b5:55:ce:ff:30:13:9d:be:55:f7:db:db:12:ed:28:
                    36:82:87:47:e5:c6:0f:d1:13:8c:d7:ee:30:31:ea:
                    df:ac:82:51:d5:90:e1:1b:f6:97:1f:26:f6:74:97:
                    e2:41:44:82:04:67:bb:0f:c9:b5:b9:23:5d:b8:05:
                    d0:98:39:ef:4b:9c:52:3f:7b:3e:3f:2a:7d:48:bc:
                    23:00:5d:ce:86:e1:1d:ad:e0:09:d4:d9:bc:97:d5:
                    ab:11:3a:67:e1:68:ea:76:ff:e1:45:42:6f:6f:52:
                    78:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:ED:10:8A:16:52:79:D8:3F:D4:F8:41:3B:83:6E:57:50:36:4D:C3
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3136342e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:7a:8d:8c:ca:3c:90:a9:5b:59:52:4f:2d:21:62:44:1c:21:
         60:38:83:6f:44:f2:a7:4f:64:6c:aa:4f:30:e3:08:96:7d:5a:
         f1:20:cd:68:a6:5d:84:1b:5d:cd:10:9b:db:a4:99:ea:20:5f:
         3a:5f:07:29:29:f8:55:b5:ef:c7:04:80:0d:24:d0:20:5a:22:
         57:cb:c9:8b:e0:e1:18:86:a1:eb:49:ad:30:e6:18:54:a5:f9:
         9e:9e:e1:6a:25:df:cb:7a:ee:27:4f:2e:d7:6f:b6:80:8d:b0:
         ee:31:ad:25:be:39:c8:cc:c1:ca:ae:9b:29:b0:2e:bc:9a:08:
         86:c5:90:e8:4a:3c:b8:fa:bd:61:22:ae:3e:b1:f8:93:36:b6:
         96:b3:6e:d3:30:39:48:ae:bd:3d:14:0f:c3:b4:c4:b2:8d:5a:
         f6:ad:84:0d:08:42:cd:ac:59:f5:cd:e8:e4:98:7b:23:90:99:
         1b:90:0f:56:76:8e:49:c0:35:5e:3c:66:12:35:40:23:1c:c1:
         fe:4a:5e:18:1b:18:4f:6a:e1:d4:c9:90:51:12:a8:2a:71:68:
         fc:f4:e9:86:b3:c1:15:e2:89:bb:de:17:8c:62:90:f3:06:72:
         a8:d4:be:9b:bc:cb:f4:a4:99:d3:da:0b:49:74:a6:c1:dd:c9:
         33:60:2b:81
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUdii+47KsAt0K+jv2JvjwJ4uPYf8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjIxMTI4MTExNjU5WhcNMjMxMTI3MTEyMTU5
WjAzMTEwLwYDVQQDEygwMEVEMTA4QTE2NTI3OUQ4M0ZENEY4NDEzQjgzNkU1NzUw
MzY0REMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gU4MJ5W2q1W
gcb7u3kM7Bme+Iwcsnsi2dPggjWy0vpZqlgNm6LulZn2UjgmhBhZ5uuLfLICHrW5
RLRUbqivqWG0nXseOtzpk66F4Oet22a9H1ejPWP1QLpEz48E0rTdSWOg5t3Ihwhm
26SlhXUIMOR4WcnMwK4c5ld8istIVP8BsyXDmwL3MuxSbmV7BPPBrGA7Y8W1Vc7/
MBOdvlX329sS7Sg2godH5cYP0ROM1+4wMerfrIJR1ZDhG/aXHyb2dJfiQUSCBGe7
D8m1uSNduAXQmDnvS5xSP3s+Pyp9SLwjAF3OhuEdreAJ1Nm8l9WrETpn4Wjqdv/h
RUJvb1J4AQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFADtEIoWUnnYP9T4QTuDbldQ
Nk3DMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8xLzM2MzQyZTM1MzAyZTMxMzYzNDJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMyMzEzMjMyMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEAypDANBgkqhkiG9w0BAQsF
AAOCAQEAVHqNjMo8kKlbWVJPLSFiRBwhYDiDb0Typ09kbKpPMOMIln1a8SDNaKZd
hBtdzRCb26SZ6iBfOl8HKSn4VbXvxwSADSTQIFoiV8vJi+DhGIah60mtMOYYVKX5
np7haiXfy3ruJ08u12+2gI2w7jGtJb45yMzByq6bKbAuvJoIhsWQ6Eo8uPq9YSKu
PrH4kza2lrNu0zA5SK69PRQPw7TEso1a9q2EDQhCzaxZ9c3o5Jh7I5CZG5APVnaO
ScA1XjxmEjVAIxzB/kpeGBsYT2rh1MmQURKoKnFo/PTphrPBFeKJu94XjGKQ8wZy
qNS+m7zL9KSZ09oLSXSmwd3JM2ArgQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org