Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e382e302f32342d3234203d3e203631333137.roa
File:                     37342e35302e382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          OICwxYeg/huLiVg7mHXQ0rhVzQQmeShfw4RaV0jO6NE=
Subject key identifier:   3E:D0:BA:97:2F:D0:42:0D:7F:AB:DF:61:49:C5:F3:3F:D4:70:F6:D4
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       58E0F55AAF6F2A12ECAD351366647B60875F8531
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e382e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 28 Nov 2022 11:22:01 +0000
ROA not before:           Mon 28 Nov 2022 11:17:01 +0000
ROA not after:            Mon 27 Nov 2023 11:22:01 +0000
asID:                     61317
IP address blocks:        74.50.8.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e0:f5:5a:af:6f:2a:12:ec:ad:35:13:66:64:7b:60:87:5f:85:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:17:01 2022 GMT
            Not After : Nov 27 11:22:01 2023 GMT
        Subject: CN=3ED0BA972FD0420D7FABDF6149C5F33FD470F6D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:06:22:69:1e:36:06:d0:26:2a:ac:de:1f:2c:
                    5e:29:7c:95:c2:cd:b1:84:3f:6d:27:ea:b4:a6:87:
                    93:5b:4c:e2:f5:d2:07:b8:cb:cf:f6:ca:ff:34:0b:
                    38:89:77:d3:8c:b8:4c:1a:37:0a:10:e2:26:5b:01:
                    88:69:3e:d7:ba:2b:1c:e8:7d:4b:6b:56:c9:4c:d1:
                    4e:86:d4:ca:ad:7d:13:8b:32:a3:73:91:91:8f:7f:
                    4b:1b:93:96:e2:ae:3d:ff:ad:0f:a8:09:42:6f:b5:
                    c0:62:a5:25:55:c1:f6:8c:42:2a:e5:d3:ef:a1:8b:
                    fd:96:3c:9e:ff:ee:fb:e5:66:e1:59:6c:cd:48:91:
                    8c:82:4d:7d:a7:bf:27:d4:85:42:dc:77:07:01:d9:
                    60:a8:a4:04:39:62:28:fa:1c:c6:8e:2c:92:38:23:
                    b9:66:c8:4b:60:d6:cf:7a:41:be:4f:14:a2:8c:16:
                    80:73:9b:85:44:4f:8e:dd:cd:cd:0a:35:00:25:09:
                    fc:6d:db:75:58:32:50:48:a0:36:f1:f1:ea:f6:e3:
                    27:59:1e:c8:4d:6c:33:bf:ca:18:cd:98:5c:6e:60:
                    c8:34:03:3b:7c:ff:a0:10:48:a9:b3:ee:53:db:e3:
                    34:1f:86:56:b1:e7:f9:95:21:1d:46:c9:77:ba:b0:
                    7f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D0:BA:97:2F:D0:42:0D:7F:AB:DF:61:49:C5:F3:3F:D4:70:F6:D4
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:43:66:87:a4:85:34:8c:5e:bb:17:ce:5b:87:9b:43:8d:d4:
         37:85:8f:69:d9:fc:c1:0a:a3:63:81:66:89:46:1d:7b:d4:5a:
         c3:16:14:ae:d6:c1:52:8f:03:ef:98:60:7f:bb:6d:73:9c:a8:
         56:47:c5:8c:d2:fc:2c:30:bc:0e:4d:42:90:1f:0e:09:44:1c:
         43:70:94:15:5b:8f:a9:ff:dc:9f:3d:e2:dc:a8:95:91:6a:7d:
         9e:74:38:9d:b0:73:cc:2f:2e:32:54:22:45:ce:6d:19:c4:41:
         00:b0:de:04:ab:65:78:00:14:1b:bd:94:6b:8e:2c:5b:56:46:
         78:23:da:4f:17:60:b1:b0:11:a2:19:fa:38:30:68:60:a5:e6:
         f9:74:bd:0a:eb:5a:fd:90:4b:bd:5f:8a:80:15:5c:58:a5:ca:
         6b:61:0b:6a:38:39:a8:fa:66:5a:e9:26:ea:36:63:43:6a:d5:
         1c:d3:14:55:6c:d7:c0:d6:08:b7:89:45:89:45:7e:53:b3:d1:
         42:b4:7d:a3:36:34:d8:fe:4e:41:d3:4b:a8:13:e2:ba:62:75:
         3f:c2:fe:d1:9e:63:69:cc:80:cf:93:28:be:62:60:97:46:7b:
         e4:2d:cc:9b:6e:37:4d:89:16:8a:88:e4:30:6c:0d:58:e9:16:
         33:d4:92:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:06 2025 by rpki-client