Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3138362e302f32342d3234203d3e203439393939.roa
File:                     36342e35302e3138362e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          pOTl8jBbLjjf8ko9PioCMrXoZhBjwDDHhF6nVSRbF0Q=
Subject key identifier:   79:8C:89:0B:E8:A9:0F:94:7A:AF:13:B2:42:9C:FE:EF:24:21:72:96
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       05F6D0F65539CFC5096F702D81FFD301B104790C
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3138362e302f32342d3234203d3e203439393939.roa
Signing time:             Thu 08 Dec 2022 18:29:52 +0000
ROA not before:           Thu 08 Dec 2022 18:24:52 +0000
ROA not after:            Thu 07 Dec 2023 18:29:52 +0000
asID:                     49999
IP address blocks:        64.50.186.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f6:d0:f6:55:39:cf:c5:09:6f:70:2d:81:ff:d3:01:b1:04:79:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  8 18:24:52 2022 GMT
            Not After : Dec  7 18:29:52 2023 GMT
        Subject: CN=798C890BE8A90F947AAF13B2429CFEEF24217296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c1:97:9c:99:07:a7:b2:a1:e5:86:ef:f9:56:
                    3a:dc:e5:02:85:6e:a6:b7:fe:e6:0a:79:50:44:65:
                    9a:e2:ec:c6:f6:d4:64:00:70:3e:85:f2:ae:61:67:
                    1c:ea:4e:37:2f:67:aa:1b:27:d1:98:66:e0:13:e0:
                    97:cb:a2:5c:84:40:e7:52:d3:3f:da:65:6b:49:7c:
                    0f:a6:8b:00:5e:8a:68:a1:bb:dd:fc:e5:c6:43:7e:
                    bc:96:e9:45:9a:0b:a1:08:3b:fd:6c:cd:0d:26:01:
                    47:95:5f:dd:df:83:ec:3b:40:19:0f:7f:79:95:92:
                    f3:d4:d5:ce:62:f1:bf:76:34:29:44:31:cb:c2:f0:
                    fc:91:44:aa:da:bb:89:ed:0c:4c:1f:da:5b:9f:1e:
                    f8:74:25:60:85:80:17:f9:5e:36:f7:c1:73:09:f6:
                    6b:33:94:57:c3:28:57:d9:7d:9e:2a:ba:62:c7:50:
                    8c:27:62:5d:bd:b9:fe:8d:0f:48:32:91:54:26:27:
                    d7:bc:cf:88:ea:60:cd:2f:4d:03:46:09:03:1c:f1:
                    e8:7b:be:be:64:8b:15:dd:f4:14:9e:bd:29:cc:01:
                    aa:7f:8b:a6:6f:61:23:32:33:56:34:b4:3a:45:7f:
                    ce:67:49:61:67:72:8c:bf:54:1e:dc:3e:f0:a6:98:
                    ab:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8C:89:0B:E8:A9:0F:94:7A:AF:13:B2:42:9C:FE:EF:24:21:72:96
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3138362e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:8a:3b:91:93:ab:be:4c:6e:0e:ca:4e:a9:af:5e:90:9b:a6:
         a3:4f:09:d7:28:b3:0b:53:4e:5e:56:98:c0:eb:64:8c:a1:03:
         b4:e3:74:a6:3f:f9:6c:6f:28:4d:6f:d7:86:05:eb:c2:7e:d2:
         47:ab:53:b0:81:42:23:57:8f:a3:96:a5:31:66:38:7e:9f:82:
         1c:b3:e2:68:92:85:6e:46:e9:96:c3:2d:77:f6:d3:bc:63:be:
         82:f5:e8:91:56:c4:19:b2:ed:3f:ef:d0:02:0c:5f:f7:3c:d0:
         6d:33:ee:14:d0:18:0b:96:22:5d:3a:47:41:c4:66:72:3a:a4:
         ff:85:a5:69:41:23:ab:73:99:14:60:c3:b9:27:10:0c:71:5e:
         be:0e:03:fe:a3:0f:85:f0:23:36:65:3b:3e:14:ab:9e:c9:47:
         94:00:5e:aa:9a:3f:bf:13:67:44:1c:1c:d5:c9:77:e3:d4:10:
         71:55:84:23:1e:04:f7:0b:ec:67:b6:3a:59:ed:4d:9e:72:bc:
         a7:34:27:a9:9c:6d:f6:61:ff:a9:f1:2f:2b:e1:bd:26:b8:48:
         07:aa:21:22:fa:d4:c4:c1:83:b3:27:03:80:de:33:49:77:e7:
         85:a8:df:a0:95:c4:2f:76:be:1e:96:79:5f:cc:20:d0:6a:e5:
         5f:f2:de:ce
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUBfbQ9lU5z8UJb3Atgf/TAbEEeQwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjIxMjA4MTgyNDUyWhcNMjMxMjA3MTgyOTUy
WjAzMTEwLwYDVQQDEyg3OThDODkwQkU4QTkwRjk0N0FBRjEzQjI0MjlDRkVFRjI0
MjE3Mjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MGXnJkHp7Kh
5Ybv+VY63OUChW6mt/7mCnlQRGWa4uzG9tRkAHA+hfKuYWcc6k43L2eqGyfRmGbg
E+CXy6JchEDnUtM/2mVrSXwPposAXopoobvd/OXGQ368lulFmguhCDv9bM0NJgFH
lV/d34PsO0AZD395lZLz1NXOYvG/djQpRDHLwvD8kUSq2ruJ7QxMH9pbnx74dCVg
hYAX+V4298FzCfZrM5RXwyhX2X2eKrpix1CMJ2Jdvbn+jQ9IMpFUJifXvM+I6mDN
L00DRgkDHPHoe76+ZIsV3fQUnr0pzAGqf4umb2EjMjNWNLQ6RX/OZ0lhZ3KMv1Qe
3D7wppirNQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHmMiQvoqQ+Ueq8TskKc/u8k
IXKWMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8xLzM2MzQyZTM1MzAyZTMxMzgzNjJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM0MzkzOTM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABAMrowDQYJKoZIhvcNAQELBQAD
ggEBAMmKO5GTq75Mbg7KTqmvXpCbpqNPCdcoswtTTl5WmMDrZIyhA7TjdKY/+Wxv
KE1v14YF68J+0kerU7CBQiNXj6OWpTFmOH6fghyz4miShW5G6ZbDLXf207xjvoL1
6JFWxBmy7T/v0AIMX/c80G0z7hTQGAuWIl06R0HEZnI6pP+FpWlBI6tzmRRgw7kn
EAxxXr4OA/6jD4XwIzZlOz4Uq57JR5QAXqqaP78TZ0QcHNXJd+PUEHFVhCMeBPcL
7Ge2OlntTZ5yvKc0J6mcbfZh/6nxLyvhvSa4SAeqISL61MTBg7MnA4DeM0l354Wo
36CVxC92vh6WeV/MINBq5V/y3s4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org