Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3137332e302f32342d3234203d3e203631313338.roa
File:                     36342e35302e3137332e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          awcLf2+ncCn7QCCuYFOR8yrL3CuirMu+cln9zzM6Q1Y=
Subject key identifier:   6A:6B:CE:72:83:46:8C:BB:87:D5:6B:7C:4D:88:47:1D:EC:92:F5:3A
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7C938E8B46EEF33403791032F56C0CE8F79510D7
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3137332e302f32342d3234203d3e203631313338.roa
Signing time:             Wed 07 Dec 2022 14:52:55 +0000
ROA not before:           Wed 07 Dec 2022 14:47:55 +0000
ROA not after:            Wed 06 Dec 2023 14:52:55 +0000
asID:                     61138
IP address blocks:        64.50.173.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:93:8e:8b:46:ee:f3:34:03:79:10:32:f5:6c:0c:e8:f7:95:10:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  7 14:47:55 2022 GMT
            Not After : Dec  6 14:52:55 2023 GMT
        Subject: CN=6A6BCE7283468CBB87D56B7C4D88471DEC92F53A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:0f:c6:78:1e:3a:24:3a:db:44:93:bd:34:
                    14:e0:39:bb:69:db:4b:fd:4b:37:c5:b6:85:5e:de:
                    7c:4f:25:53:5e:4f:8b:37:da:28:dc:29:d2:a0:7e:
                    52:d1:0c:13:ba:ec:6b:7a:6c:e1:b5:7b:ca:ee:7c:
                    4b:bd:8e:65:94:ad:06:ee:c4:85:2f:42:f6:f0:07:
                    a9:54:50:6a:7b:76:f4:08:f8:ac:11:6b:c6:c2:7e:
                    a6:48:b0:ee:97:06:e9:d6:c8:34:57:bc:91:17:0b:
                    fe:97:45:0e:77:ff:59:bc:80:80:78:87:09:7b:a5:
                    38:cf:80:60:58:45:5f:2f:01:c2:06:db:b8:86:e9:
                    5a:ac:3c:d9:51:08:61:8f:bb:ab:ea:e5:6a:78:6f:
                    da:2a:1e:ee:2b:e2:39:21:3a:82:8a:f4:5a:99:4b:
                    a4:4e:f6:e8:1e:c4:91:ad:d0:4b:76:69:15:14:d1:
                    b9:99:9e:22:1d:68:b6:66:84:ee:fc:f5:2f:b4:21:
                    71:e2:fd:0e:60:45:be:84:25:7e:7b:17:90:f5:9f:
                    95:aa:78:37:51:69:87:bd:db:db:63:dd:3c:ad:55:
                    db:75:25:4d:ee:21:f5:27:f0:dc:8e:2b:47:79:1c:
                    e0:43:ff:61:1c:b7:34:4e:21:85:1a:dd:77:c8:cd:
                    16:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6B:CE:72:83:46:8C:BB:87:D5:6B:7C:4D:88:47:1D:EC:92:F5:3A
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3137332e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:ff:e7:22:27:71:44:47:3e:10:9b:76:87:65:4c:76:8f:d0:
         75:23:9b:5d:35:02:a9:e8:63:7b:bd:6f:01:4b:92:b7:b3:2b:
         a6:62:34:0b:72:ba:83:09:93:b1:31:ae:49:0d:a3:9c:4e:f9:
         a9:b0:f8:11:95:83:49:c7:05:53:f7:22:a7:b2:52:a3:c3:da:
         7e:c5:4d:23:ef:aa:78:b4:bd:80:ed:dd:02:ab:c4:ea:fb:d2:
         f1:4d:f5:ee:ad:74:05:af:67:a1:cd:83:95:ff:11:ea:08:ac:
         39:25:8f:db:c9:30:f2:4f:ae:1c:22:bd:82:ae:1e:7d:05:b1:
         93:ec:c1:24:6e:ae:06:74:dd:38:84:4d:fe:ee:87:22:aa:ac:
         12:b6:c6:f9:76:b8:57:dc:c0:ed:a9:12:91:f0:1a:26:3e:db:
         d7:88:69:79:03:ad:41:b5:2e:92:ac:2c:cb:30:24:24:67:44:
         28:83:0b:9d:27:29:f0:e1:84:d8:51:d6:fb:aa:60:15:7a:f0:
         07:45:98:9d:1a:78:82:a9:ca:b1:42:0f:e0:56:b1:9f:8e:e7:
         b5:52:65:00:89:0e:54:c0:2c:a6:16:c2:24:4d:8c:71:00:39:
         c8:c7:96:9c:da:d9:31:a4:60:c7:af:fd:d5:75:b7:c3:bb:3a:
         36:59:c1:d8
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUfJOOi0bu8zQDeRAy9WwM6PeVENcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjIxMjA3MTQ0NzU1WhcNMjMxMjA2MTQ1MjU1
WjAzMTEwLwYDVQQDEyg2QTZCQ0U3MjgzNDY4Q0JCODdENTZCN0M0RDg4NDcxREVD
OTJGNTNBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9APxngeOiQ6
20STvTQU4Dm7adtL/Us3xbaFXt58TyVTXk+LN9oo3CnSoH5S0QwTuuxremzhtXvK
7nxLvY5llK0G7sSFL0L28AepVFBqe3b0CPisEWvGwn6mSLDulwbp1sg0V7yRFwv+
l0UOd/9ZvICAeIcJe6U4z4BgWEVfLwHCBtu4hularDzZUQhhj7ur6uVqeG/aKh7u
K+I5ITqCivRamUukTvboHsSRrdBLdmkVFNG5mZ4iHWi2ZoTu/PUvtCFx4v0OYEW+
hCV+exeQ9Z+Vqng3UWmHvdvbY908rVXbdSVN7iH1J/DcjitHeRzgQ/9hHLc0TiGF
Gt13yM0WbQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFGprznKDRoy7h9VrfE2IRx3s
kvU6MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8xLzM2MzQyZTM1MzAyZTMxMzczMzJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM2MzEzMTMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABAMq0wDQYJKoZIhvcNAQELBQAD
ggEBAHP/5yIncURHPhCbdodlTHaP0HUjm101AqnoY3u9bwFLkrezK6ZiNAtyuoMJ
k7ExrkkNo5xO+amw+BGVg0nHBVP3IqeyUqPD2n7FTSPvqni0vYDt3QKrxOr70vFN
9e6tdAWvZ6HNg5X/EeoIrDklj9vJMPJPrhwivYKuHn0FsZPswSRurgZ03TiETf7u
hyKqrBK2xvl2uFfcwO2pEpHwGiY+29eIaXkDrUG1LpKsLMswJCRnRCiDC50nKfDh
hNhR1vuqYBV68AdFmJ0aeIKpyrFCD+BWsZ+O57VSZQCJDlTALKYWwiRNjHEAOcjH
lpza2TGkYMev/dV1t8O7OjZZwdg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org