Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3136392e302f32342d3234203d3e203631313338.roa
File:                     36342e35302e3136392e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          XS6Z/3WZlMihCEMqYMa7bsdb6oahUy3NtkusOjxIA2U=
Subject key identifier:   DA:7F:41:C2:58:DD:A5:10:29:B3:B7:6A:A8:0B:72:2A:98:E1:5F:2D
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       4BDBEAC1F3AA93803658503D11E3ACDD414D135B
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3136392e302f32342d3234203d3e203631313338.roa
Signing time:             Thu 08 Dec 2022 14:03:30 +0000
ROA not before:           Thu 08 Dec 2022 13:58:30 +0000
ROA not after:            Thu 07 Dec 2023 14:03:30 +0000
asID:                     61138
IP address blocks:        64.50.169.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:db:ea:c1:f3:aa:93:80:36:58:50:3d:11:e3:ac:dd:41:4d:13:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  8 13:58:30 2022 GMT
            Not After : Dec  7 14:03:30 2023 GMT
        Subject: CN=DA7F41C258DDA51029B3B76AA80B722A98E15F2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f1:c8:17:40:65:bd:58:1c:40:b1:25:30:ae:
                    c9:59:45:e4:69:9c:72:5e:81:e9:df:46:71:fb:69:
                    69:22:67:08:80:c0:9a:40:9c:c1:88:78:f5:e2:65:
                    b2:e1:5d:d9:55:76:a3:52:fd:70:c6:a8:95:31:15:
                    8d:d0:eb:fd:82:c9:e4:56:5c:74:59:d4:a7:73:30:
                    7d:37:e4:0a:27:63:34:b9:48:12:ef:ee:af:3e:c1:
                    6a:15:8e:88:df:25:26:2a:8d:68:25:0c:e7:70:50:
                    d6:7e:5c:a6:5d:a2:a9:78:0b:d1:44:08:48:1f:bc:
                    74:ca:d3:72:62:86:e3:99:b0:9b:5a:d3:a7:73:c6:
                    0f:c3:59:fd:94:1e:a7:8c:67:46:43:bf:49:54:b1:
                    33:21:d3:fb:32:c1:88:fb:89:b6:87:56:78:f4:6c:
                    92:4b:20:46:97:05:60:d5:49:42:0f:a6:f7:98:50:
                    1f:b6:01:f8:e0:dc:23:fd:77:5b:92:d7:be:2d:ae:
                    3a:70:0e:47:dc:d1:af:ba:c9:9b:b5:f0:11:72:9b:
                    20:01:1f:0b:0a:2d:37:5c:37:8d:fa:12:aa:b4:4f:
                    b9:b0:38:28:5b:ac:65:b5:2b:0f:5d:93:e1:81:93:
                    91:c4:61:bc:4b:36:ea:63:be:74:e6:38:f6:97:8d:
                    f6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7F:41:C2:58:DD:A5:10:29:B3:B7:6A:A8:0B:72:2A:98:E1:5F:2D
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3136392e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:89:ce:22:ab:93:37:e4:ef:c2:6a:52:c0:46:13:13:87:14:
         5c:ac:fe:e7:9c:55:eb:b8:1b:7e:17:18:1b:78:7f:12:d9:cb:
         5e:93:8f:b2:ef:c7:32:98:a4:93:32:04:52:7c:77:c9:50:da:
         05:fe:04:52:fe:59:29:4b:69:0c:d2:03:1e:6f:55:0c:af:4e:
         93:11:54:25:5c:c6:73:a8:40:65:b0:80:4b:27:8f:39:86:b3:
         01:50:c1:11:5d:04:1e:2b:3f:fa:f4:c5:c3:9a:37:48:65:46:
         0f:a0:dd:ac:a3:45:23:c6:76:01:b4:aa:fc:82:ed:f3:32:1a:
         39:e5:3e:69:21:a1:61:9b:2b:ee:03:2c:7a:78:99:b8:94:e1:
         f9:9b:79:e6:14:2a:8e:ad:d9:83:4e:50:85:d2:bc:da:60:0c:
         d0:c0:c1:74:d5:5e:68:46:26:42:26:21:12:c0:6e:66:0c:33:
         91:3a:e9:7d:ce:db:01:f3:1d:c8:32:be:9c:cc:8e:96:c3:81:
         d0:7c:bd:e1:62:28:33:7b:75:68:ab:40:5b:5c:7b:b7:f0:b2:
         97:b4:c2:e9:41:7c:51:54:2f:fa:04:f5:3c:bf:fe:bf:d5:a8:
         4c:cd:9f:4f:77:0e:3a:91:12:ac:9e:36:3c:63:f6:8d:2f:77:
         49:e8:31:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org