Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e392e302f32342d3234203d3e203631333137.roa
File:                     37342e35302e392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          q49jjn7y/jlGKORXJ/cwz2reeB0OCDpw6tHc1HNXij8=
Subject key identifier:   00:05:84:2D:2A:F0:C5:A3:10:B4:09:EB:48:E2:5A:06:58:AB:26:45
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7E8778FE47962B2D47D69C6EE2070AB9BB8378CE
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e392e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 28 Nov 2022 11:21:59 +0000
ROA not before:           Mon 28 Nov 2022 11:16:59 +0000
ROA not after:            Mon 27 Nov 2023 11:21:59 +0000
asID:                     61317
IP address blocks:        74.50.9.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:87:78:fe:47:96:2b:2d:47:d6:9c:6e:e2:07:0a:b9:bb:83:78:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:59 2022 GMT
            Not After : Nov 27 11:21:59 2023 GMT
        Subject: CN=0005842D2AF0C5A310B409EB48E25A0658AB2645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b7:af:16:c0:a2:c4:98:91:95:e2:e3:75:4d:
                    40:62:52:3c:d6:2b:dd:1d:4f:1b:0f:c2:14:11:0d:
                    80:02:db:c9:25:48:e5:a7:8f:65:7e:c3:69:fd:57:
                    00:7f:36:0c:4f:11:1b:17:e4:3f:45:f2:0b:86:49:
                    c2:b8:09:6b:d6:52:9b:a8:79:be:f2:37:0a:5f:a5:
                    b0:2c:36:83:8f:7b:91:95:49:58:84:51:44:dd:40:
                    ce:dd:94:ef:65:75:35:d3:b1:80:8f:24:62:60:4b:
                    89:14:c7:5c:5c:82:6d:0a:c3:66:f3:d7:56:8b:1e:
                    1b:7d:43:f5:4b:60:f9:bd:78:b8:32:7a:a3:03:08:
                    d1:4a:c6:bf:8e:a6:e8:4c:fc:8e:ad:44:96:46:d0:
                    35:f8:d9:9f:03:29:43:a4:d3:73:ca:0b:1c:b3:ef:
                    de:2f:13:06:85:2f:d2:5c:de:02:95:77:94:92:01:
                    e5:e2:b3:0b:c4:f7:a8:be:9a:52:b2:a3:90:98:10:
                    26:7a:42:ce:48:c4:85:db:b7:df:83:67:d1:3b:4e:
                    38:bf:67:cc:f6:19:f2:60:3e:58:27:53:20:3d:ff:
                    fa:39:3b:5a:bf:24:04:df:3b:2f:22:cb:83:c3:bc:
                    27:bd:73:0a:17:e6:6d:74:d4:38:34:26:51:af:50:
                    54:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:05:84:2D:2A:F0:C5:A3:10:B4:09:EB:48:E2:5A:06:58:AB:26:45
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:17:fe:96:47:21:c6:67:ba:b4:da:07:c7:a5:c2:81:7e:6d:
         fb:ca:40:d6:24:84:6d:01:58:53:10:e5:c1:a9:09:4d:79:e2:
         51:36:d2:0a:89:ae:fa:87:50:28:ce:2e:a2:de:b7:83:df:fe:
         19:b2:2d:d0:db:3b:77:56:e2:95:f7:4a:fd:6c:4c:28:82:1c:
         07:86:98:4f:a5:5f:3a:dd:29:f3:ec:49:17:ab:e9:b4:40:0e:
         ba:1e:5b:03:a8:98:be:3c:94:85:67:dc:4b:8f:4b:e8:6d:cc:
         f1:c9:0d:b7:47:05:91:e2:f9:d3:54:7a:20:68:46:fa:3c:5d:
         d1:b5:06:1d:d2:44:63:c5:3c:5d:61:a3:56:0e:50:d6:d7:be:
         d5:4a:2e:9b:e0:cc:ff:b8:4f:ea:e9:d8:06:63:88:f0:ee:7f:
         b0:8d:8d:a4:b8:c1:6e:a8:f0:09:52:8e:3c:66:bd:11:a2:f9:
         ea:c4:d9:dc:a6:73:e0:57:50:a2:00:11:19:04:69:71:19:21:
         4d:07:ab:47:45:8d:9f:0d:ab:4c:9e:bd:0a:1d:f4:9c:78:27:
         50:64:f6:3f:24:c5:93:d0:6c:f1:77:f0:cc:ef:72:05:f1:c7:
         ae:38:69:d9:ac:b6:4a:d3:d8:ac:2d:ec:fb:1f:7a:8f:44:57:
         26:a2:bd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org