Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3136362e302f32342d3234203d3e203439393939.roa
File:                     36342e35302e3136362e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          oyiwRGSyRTbGt6lmXzwCC6Mvk6EmwruPDySngUs2Z5o=
Subject key identifier:   F8:4D:9A:6A:FF:C4:5D:C9:A1:12:76:DA:C5:9D:BD:D9:E3:DF:30:32
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       52C50A3AE13A5D8A7C0CC52517D7E69610FC6230
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3136362e302f32342d3234203d3e203439393939.roa
Signing time:             Wed 07 Dec 2022 22:16:23 +0000
ROA not before:           Wed 07 Dec 2022 22:11:23 +0000
ROA not after:            Wed 06 Dec 2023 22:16:23 +0000
asID:                     49999
IP address blocks:        64.50.166.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c5:0a:3a:e1:3a:5d:8a:7c:0c:c5:25:17:d7:e6:96:10:fc:62:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  7 22:11:23 2022 GMT
            Not After : Dec  6 22:16:23 2023 GMT
        Subject: CN=F84D9A6AFFC45DC9A11276DAC59DBDD9E3DF3032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:25:22:49:b8:54:08:d8:52:14:01:35:9f:
                    c2:43:e8:ee:be:35:08:48:92:0b:21:cb:dd:7a:0e:
                    ac:3e:26:0f:5c:4b:41:e9:fe:7c:5e:14:cd:d1:fe:
                    b6:2b:a4:69:44:86:c9:46:06:c6:fd:86:58:d9:7c:
                    a0:ac:d5:08:e9:ba:50:4f:73:04:3f:a9:41:96:fe:
                    6f:fd:d2:c5:0d:41:42:97:3c:d6:fb:16:6a:7b:1f:
                    8a:94:b1:c9:2e:50:f3:25:4f:87:cc:3f:a5:a0:c9:
                    b2:32:17:29:f0:df:d9:9d:67:6f:44:35:4e:71:98:
                    38:a3:24:7f:ab:cb:a5:40:6b:d8:c7:d3:c1:62:34:
                    ba:6a:c2:af:f9:6a:76:0f:e7:9b:0f:94:99:2f:e2:
                    0d:43:3f:75:02:e0:09:13:cd:20:77:1a:73:2b:7c:
                    eb:a8:54:b0:88:b9:6c:9d:79:8d:5c:1c:3d:16:c4:
                    60:eb:13:5e:32:83:16:f2:57:2b:00:7b:81:49:6c:
                    cf:69:af:e3:32:ee:04:cc:6e:48:5a:93:15:5e:a7:
                    b2:c0:1f:b1:89:e1:d3:e0:c3:41:66:6a:f6:55:13:
                    a5:a9:bf:9b:25:09:bb:68:27:04:96:08:63:6c:3a:
                    06:1a:fc:36:a1:c5:03:d6:25:41:b6:34:0c:7e:63:
                    68:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4D:9A:6A:FF:C4:5D:C9:A1:12:76:DA:C5:9D:BD:D9:E3:DF:30:32
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3136362e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:bb:3a:3c:4e:14:c8:23:e2:26:08:81:ec:d4:c5:06:56:ff:
         33:b0:b8:41:36:9e:44:3d:3d:c5:d6:83:5d:92:bc:41:40:f0:
         31:d4:84:c1:a1:7f:b6:0f:64:88:60:5b:9a:09:37:06:2a:0d:
         f3:aa:44:c6:4b:d8:ce:f1:b1:12:5c:ac:00:80:f1:91:05:7f:
         d9:4c:64:a2:1f:6f:b0:c1:56:6f:45:e6:06:db:3c:f4:6f:78:
         00:9e:dd:fb:d3:56:9c:15:29:1a:d4:91:fb:f0:98:b6:60:07:
         1e:b1:8d:7a:2a:75:15:51:81:cb:a0:e0:b7:7d:a6:7e:1b:f8:
         84:c1:28:e6:5c:35:66:5b:a0:b2:2c:0f:ec:20:66:09:a8:fc:
         ec:56:25:f7:98:cf:27:42:b9:d4:57:00:b7:07:82:2a:7c:06:
         c5:21:e2:8c:b8:e3:db:ea:ff:de:0b:d7:dd:fc:64:9d:d6:39:
         25:60:3a:99:ac:bd:b2:da:05:37:36:29:8f:e8:5b:c7:aa:f5:
         bd:d7:e8:65:12:79:07:ed:e6:ea:11:93:ea:19:06:c5:1d:70:
         d8:72:84:e4:db:3a:08:03:94:a6:c6:b0:7e:d0:72:d8:fb:5f:
         5c:e3:7f:f5:4c:82:71:f4:39:7f:d5:a9:76:3b:60:ce:09:1c:
         1d:d2:7f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org