Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e3132362e302f32342d3234203d3e203631313338.roa
File:                     36372e3231302e3132362e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          WyP9GKjZ6rLAkrwPo2W1pwupe4n7SyvdSpQ01N9fqWo=
Subject key identifier:   1E:87:5F:14:A4:88:7B:46:17:77:E7:03:39:AA:A7:FB:B5:E9:BE:FD
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       32DA5421957F51C90F7C0E43986C89BA3AEAF5C4
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e3132362e302f32342d3234203d3e203631313338.roa
Signing time:             Tue 06 Dec 2022 05:41:38 +0000
ROA not before:           Tue 06 Dec 2022 05:36:38 +0000
ROA not after:            Tue 05 Dec 2023 05:41:38 +0000
asID:                     61138
IP address blocks:        67.210.126.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:da:54:21:95:7f:51:c9:0f:7c:0e:43:98:6c:89:ba:3a:ea:f5:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  6 05:36:38 2022 GMT
            Not After : Dec  5 05:41:38 2023 GMT
        Subject: CN=1E875F14A4887B461777E70339AAA7FBB5E9BEFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:be:dd:97:5f:bd:12:ac:f5:06:de:10:00:17:
                    af:0b:74:b3:66:5a:d7:24:43:99:32:f0:4d:fd:d9:
                    4e:ee:18:bd:0a:3c:ce:5c:55:7e:4d:92:37:af:f0:
                    1d:d2:45:3f:f0:4f:f7:76:af:96:7c:ab:31:d5:db:
                    df:05:a8:4c:47:4a:72:09:78:d8:5f:24:e3:f4:ed:
                    52:00:49:12:21:72:81:81:6e:49:a9:3d:cb:b6:3d:
                    26:40:7d:e4:ce:10:6b:01:b4:5b:aa:2f:c8:04:75:
                    d3:cc:20:59:4d:dd:a6:ef:ee:06:fd:35:af:95:7f:
                    ee:87:a1:e2:15:8b:21:a7:45:0a:f7:57:19:81:49:
                    c5:2b:49:36:cb:3a:da:8f:1c:43:8c:60:5c:0f:19:
                    44:cc:fb:73:12:61:7d:9e:31:03:c8:8d:8c:22:7e:
                    7a:5f:da:f2:82:5c:8c:4e:07:9a:fd:b0:8a:df:79:
                    dd:0c:fc:37:6b:77:dd:71:9c:96:da:8f:75:e4:c4:
                    f8:e6:31:5c:27:6a:a8:ff:88:87:10:e8:dd:6c:85:
                    5c:c8:43:4c:39:e5:d9:08:79:a1:3b:49:77:1b:ec:
                    47:c9:c3:7d:4b:c8:39:4c:b5:6e:4b:f4:b1:32:09:
                    08:c7:62:65:65:17:ec:2a:89:f5:19:3e:82:9b:73:
                    e8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:87:5F:14:A4:88:7B:46:17:77:E7:03:39:AA:A7:FB:B5:E9:BE:FD
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e3132362e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:c3:ab:e2:5e:61:57:cd:d0:81:fb:73:81:5b:79:45:a3:fe:
         3b:96:96:d7:c0:a1:1c:55:08:f0:0e:4c:79:20:6a:74:74:68:
         5c:8a:26:de:cc:5f:7e:a0:25:f0:cc:22:1a:5f:81:41:7f:cb:
         89:a8:44:4a:e7:a3:44:ad:27:29:4e:73:dd:7e:7f:ff:73:3d:
         3c:5e:2c:34:39:29:76:f3:a4:ea:41:30:f7:2a:a8:f6:79:bd:
         ee:c6:11:f0:83:fa:28:04:a4:a9:66:51:41:dd:a3:b0:b9:f3:
         4a:f4:69:1b:3d:b2:17:c2:fd:02:8f:22:5e:b4:f9:d9:d4:b4:
         9a:53:f6:4d:72:4c:ec:67:63:0e:26:ef:a4:ea:57:bb:4c:93:
         35:dc:4b:00:1a:1a:d8:a0:d6:99:5d:e6:14:51:e1:df:6e:1f:
         bb:e1:05:48:4a:5b:57:c4:8a:06:8b:5f:53:ce:5e:f1:ef:bf:
         8d:46:48:e3:b2:1f:f0:39:fa:a0:95:74:5d:b3:a5:cd:7e:fb:
         2d:98:11:e6:69:31:17:0c:28:e0:37:3d:ca:67:44:b3:b9:85:
         4e:b0:a5:1e:82:72:b2:e6:b0:8e:f5:88:b8:9b:19:1a:7a:45:
         25:4e:44:bf:81:80:b4:d8:0e:23:b6:89:d1:4b:01:2e:46:46:
         41:a0:5c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org