Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3138312e302f32342d3234203d3e203630373231.roa
File:                     36342e35302e3138312e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          yZAvviXBeRHcnZF3SSRya7cBQdRa/E0mbCrgVV3Hnao=
Subject key identifier:   DA:A0:AB:63:16:2E:A5:E7:F2:93:71:04:05:10:31:FF:2E:CF:73:65
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       6A920C314D9B98862CAD1D684A46349565A114
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3138312e302f32342d3234203d3e203630373231.roa
Signing time:             Tue 06 Dec 2022 16:21:17 +0000
ROA not before:           Tue 06 Dec 2022 16:16:17 +0000
ROA not after:            Tue 05 Dec 2023 16:21:17 +0000
asID:                     60721
IP address blocks:        64.50.181.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:92:0c:31:4d:9b:98:86:2c:ad:1d:68:4a:46:34:95:65:a1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  6 16:16:17 2022 GMT
            Not After : Dec  5 16:21:17 2023 GMT
        Subject: CN=DAA0AB63162EA5E7F2937104051031FF2ECF7365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5e:bb:1c:c6:71:c5:80:c0:a2:68:e8:38:6f:
                    72:a6:23:b7:8d:95:2d:b9:57:80:ee:13:26:03:fd:
                    59:e2:38:f8:2a:69:95:1a:2e:c3:8c:3a:b6:dc:72:
                    75:e7:03:9b:b3:8d:a1:d5:0a:4a:cc:c7:41:07:fe:
                    18:86:c9:fe:3a:a0:ed:35:bd:16:e6:99:c5:87:b4:
                    bd:e7:50:68:cc:a3:9b:d8:b2:08:35:77:36:4d:67:
                    fa:62:f7:e1:d0:89:bd:4d:5f:61:ad:65:5d:7e:f1:
                    f9:fc:ba:28:0c:e4:2d:49:8c:ec:8f:b4:5e:de:99:
                    4b:19:1f:46:87:df:72:61:42:27:e3:eb:4b:59:bd:
                    82:ff:13:43:24:96:0a:e4:1a:64:a3:28:e2:f9:2b:
                    b9:8e:17:01:b1:aa:49:4a:71:ae:15:49:9f:a9:a1:
                    7e:23:d7:1f:bb:52:c5:b1:0b:53:f4:ba:b2:03:92:
                    77:7d:6e:18:d5:ab:dd:90:bf:12:3f:a4:51:c3:87:
                    10:8b:03:c2:ed:3a:41:e2:0a:2f:9c:49:96:8f:b3:
                    68:65:95:91:d3:24:bd:fe:c1:02:10:af:c7:a5:20:
                    e0:c1:f9:21:d3:89:68:cb:89:35:1b:75:d8:39:ad:
                    58:05:46:a8:fe:3d:35:29:03:a1:b1:32:10:e1:28:
                    3b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A0:AB:63:16:2E:A5:E7:F2:93:71:04:05:10:31:FF:2E:CF:73:65
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3138312e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:95:26:4e:a1:3c:67:b8:9f:cf:ca:fa:81:d0:1a:e3:c9:30:
         75:40:ec:13:3d:81:49:e1:b3:66:31:15:50:57:cf:90:2f:11:
         0e:7d:ef:f4:b9:d2:02:52:8a:90:b3:a3:ce:8b:8c:3d:4f:23:
         c0:49:16:40:9c:11:9f:4e:83:7f:1d:dd:5b:3b:f1:c5:dc:ba:
         5c:e9:1d:e6:4e:ab:85:7a:0c:ec:7f:75:08:e0:ef:54:25:2a:
         b3:91:40:5c:ce:d6:5e:f5:87:f4:96:35:c7:a4:bf:72:7e:2e:
         8f:92:5f:73:30:12:45:4e:6a:b9:b1:2c:b2:f1:fa:0e:31:8f:
         8e:1a:6e:d9:1e:ff:9c:67:af:71:89:6b:b8:96:66:42:c6:2d:
         e1:65:d5:9c:d7:e2:d9:78:9e:2b:0b:ce:a1:d1:69:85:23:b6:
         b0:c4:7f:e2:0c:b5:f6:77:24:f3:d5:e9:d3:b9:f5:e5:d3:eb:
         93:1b:a3:31:b0:3c:96:b6:10:ac:53:3f:c1:a8:ab:49:f0:fb:
         88:f5:4b:27:5f:a5:81:06:49:3e:83:4e:18:89:d8:78:01:7e:
         f3:86:41:47:11:e9:f2:91:83:1f:0b:88:48:03:3a:e2:34:57:
         c5:22:54:7f:f7:f5:51:74:2c:42:68:6f:3e:ab:f8:4f:d2:f8:
         2a:a2:1e:53
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgITapIMMU2bmIYsrR1oSkY0lWWhFDANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI0NGRhNWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJi
YTc5NDI1MzU3YmI1NmVlZDAeFw0yMjEyMDYxNjE2MTdaFw0yMzEyMDUxNjIxMTda
MDMxMTAvBgNVBAMTKERBQTBBQjYzMTYyRUE1RTdGMjkzNzEwNDA1MTAzMUZGMkVD
RjczNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzXrscxnHFgMCi
aOg4b3KmI7eNlS25V4DuEyYD/VniOPgqaZUaLsOMOrbccnXnA5uzjaHVCkrMx0EH
/hiGyf46oO01vRbmmcWHtL3nUGjMo5vYsgg1dzZNZ/pi9+HQib1NX2GtZV1+8fn8
uigM5C1JjOyPtF7emUsZH0aH33JhQifj60tZvYL/E0MklgrkGmSjKOL5K7mOFwGx
qklKca4VSZ+poX4j1x+7UsWxC1P0urIDknd9bhjVq92QvxI/pFHDhxCLA8LtOkHi
Ci+cSZaPs2hllZHTJL3+wQIQr8elIODB+SHTiWjLiTUbddg5rVgFRqj+PTUpA6Gx
MhDhKDu3AgMBAAGjggKwMIICrDAdBgNVHQ4EFgQU2qCrYxYupefyk3EEBRAx/y7P
c2UwHwYDVR0jBBgwFoAUW0DTc9ZxfHBMSDygZYz7UlfE6TwwDgYDVR0PAQH/BAQD
AgeAMIGFBgNVHR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0
L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0OTBkMzMvMS81
QjQwRDM3M0Q2NzE3QzcwNEM0ODNDQTA2NThDRkI1MjU3QzRFOTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNi
MDJlMjkvMmJkMGZhYzYtMWE0Ni00MGI1LWJlNjYtOWUwZjdiNTRkZjc3LzQ0ZGE1
ZDEwMzI3N2M5MzdjNTNkY2UzMDViZDlkNzljMmJhNzk0MjUzNTdiYjU2ZWVkLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEz
ZWVhNDkwZDMzLzEvMzYzNDJlMzUzMDJlMzEzODMxMmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzYzMDM3MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEAytTANBgkqhkiG9w0BAQsFAAOC
AQEAT5UmTqE8Z7ifz8r6gdAa48kwdUDsEz2BSeGzZjEVUFfPkC8RDn3v9LnSAlKK
kLOjzouMPU8jwEkWQJwRn06Dfx3dWzvxxdy6XOkd5k6rhXoM7H91CODvVCUqs5FA
XM7WXvWH9JY1x6S/cn4uj5JfczASRU5qubEssvH6DjGPjhpu2R7/nGevcYlruJZm
QsYt4WXVnNfi2XieKwvOodFphSO2sMR/4gy19nck89Xp07n15dPrkxujMbA8lrYQ
rFM/wairSfD7iPVLJ1+lgQZJPoNOGInYeAF+84ZBRxHp8pGDHwuISAM64jRXxSJU
f/f1UXQsQmhvPqv4T9L4KqIeUw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org