Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3138352e302f32342d3234203d3e203439393939.roa
File:                     36342e35302e3138352e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          7r6R2LfsiXtgM446A9oWZtMlUcC0zU4Ef8y0Dh5fxh8=
Subject key identifier:   5A:55:DF:A4:6F:7E:4B:76:44:90:C3:04:B4:8B:1B:2E:CD:3E:E0:57
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       4E8532F31C160C1EBAC3FEE75030BFEB13120753
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3138352e302f32342d3234203d3e203439393939.roa
Signing time:             Sat 03 Dec 2022 20:03:13 +0000
ROA not before:           Sat 03 Dec 2022 19:58:13 +0000
ROA not after:            Sat 02 Dec 2023 20:03:13 +0000
asID:                     49999
IP address blocks:        64.50.185.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:85:32:f3:1c:16:0c:1e:ba:c3:fe:e7:50:30:bf:eb:13:12:07:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  3 19:58:13 2022 GMT
            Not After : Dec  2 20:03:13 2023 GMT
        Subject: CN=5A55DFA46F7E4B764490C304B48B1B2ECD3EE057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:d3:1e:2a:d3:48:a9:48:d7:ef:c4:79:92:
                    24:c3:93:5d:25:4e:09:a6:67:7b:22:b3:8f:dc:2b:
                    c4:fa:d1:1f:ae:c7:1f:b8:65:64:d1:6f:0f:30:3b:
                    58:5d:e6:f7:d1:37:b1:a7:70:2b:ec:e4:5a:6c:0f:
                    dd:83:0e:54:68:dd:2e:eb:93:12:c0:40:b5:a4:27:
                    24:48:c8:54:55:1e:88:c9:e8:e6:3e:2e:c5:95:92:
                    7c:ac:9b:2c:e2:79:a1:13:3d:03:50:7d:e3:d2:09:
                    1e:8a:5f:32:45:57:da:2f:8a:56:94:7b:a9:02:12:
                    f5:9b:0b:4b:3e:a7:ec:e5:84:b7:18:5f:b4:f9:f1:
                    2c:7e:24:ea:92:b6:ff:02:aa:61:60:2d:3a:23:27:
                    48:76:79:51:94:ed:33:69:9a:6f:1b:12:7f:7a:cd:
                    0a:e0:9d:8a:aa:76:61:68:d8:c7:85:10:08:16:5e:
                    54:03:e6:2d:8a:b3:04:cb:13:9d:d6:0d:89:fc:fc:
                    33:4d:96:d9:83:c7:40:70:d8:54:72:08:bd:a3:b2:
                    9b:27:58:01:7c:f2:02:6b:56:f2:28:35:5c:8d:1b:
                    20:f0:f3:85:83:cc:9f:bc:d8:8e:2e:b5:ef:42:ca:
                    ff:95:d3:93:42:ce:59:58:a7:d5:9a:68:0c:a9:69:
                    c9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:55:DF:A4:6F:7E:4B:76:44:90:C3:04:B4:8B:1B:2E:CD:3E:E0:57
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3138352e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:f6:e0:50:7f:61:64:9f:07:fe:ee:01:fd:b0:ba:15:6d:9f:
         ad:4b:a0:39:6c:81:e8:2c:b3:94:90:ae:b4:13:9c:a0:dc:46:
         83:61:6a:04:23:50:06:a6:ec:7f:b7:73:58:b6:1e:7a:05:85:
         d4:b0:b5:e7:eb:e9:60:ec:3b:6a:1f:5d:27:6e:ea:1a:f5:63:
         d7:02:aa:e7:a0:d0:fa:c6:31:57:f3:5e:c2:f3:65:dc:e2:83:
         fe:28:95:00:40:db:8e:e8:b2:b9:3a:ed:4b:64:20:98:73:46:
         38:b7:02:0e:20:fe:f8:1e:bc:65:31:47:d2:82:55:67:fc:8f:
         25:56:c2:e9:b1:0f:31:a3:9c:b7:14:77:f3:50:b7:7f:ac:f8:
         3c:4a:14:35:64:bc:65:4a:e4:61:7c:c3:81:f9:d7:d6:c8:b7:
         9d:c1:f4:42:bf:72:5a:f0:c2:c2:7f:1c:e0:c0:0c:7c:90:0b:
         0b:52:22:56:23:2d:0f:50:6a:d0:33:e6:a6:ba:60:f8:02:d5:
         7f:3a:55:e7:03:8f:d6:e1:66:e9:78:37:e0:f0:44:d8:3b:8b:
         88:3c:59:f6:fa:4f:e9:0e:04:7a:29:7a:69:91:e1:ea:d5:22:
         ba:8d:24:b3:0f:46:12:6f:0f:94:33:19:ee:21:e7:63:06:6d:
         66:f2:6f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org