Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS142519.roa
File:                     AS142519.roa (raw, json)
Hash identifier:          egrmc6ea5t80NZztY6ki1XOvxEQi4Dp2O8G9YFSkFD8=
Subject key identifier:   29:BC:34:B3:C6:60:CA:C0:DF:22:CD:90:7A:BD:66:6B:F8:06:D7:4A
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       451C14312333A7C9F2616F687CF56E78B6E37B8B
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS142519.roa
Signing time:             Fri 10 Mar 2023 11:31:58 +0000
ROA not before:           Fri 10 Mar 2023 11:26:58 +0000
ROA not after:            Fri 08 Mar 2024 11:31:58 +0000
asID:                     142519
IP address blocks:        64.50.161.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1c:14:31:23:33:a7:c9:f2:61:6f:68:7c:f5:6e:78:b6:e3:7b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 10 11:26:58 2023 GMT
            Not After : Mar  8 11:31:58 2024 GMT
        Subject: CN=29BC34B3C660CAC0DF22CD907ABD666BF806D74A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:58:61:76:42:d0:be:81:0d:02:00:03:1b:14:
                    89:fa:96:8d:8f:1e:d1:68:33:ea:b2:45:b5:f5:38:
                    a0:34:e6:74:14:e0:b1:76:a0:2e:b8:0a:9c:4b:1f:
                    dc:e7:fc:67:7a:1f:9f:6d:d2:ce:7a:1e:77:97:b9:
                    27:c9:ee:a3:ef:0f:69:9d:62:0e:a5:d4:4b:0d:ad:
                    12:b2:c4:e4:f6:a7:01:21:b5:c9:b4:c1:48:de:3e:
                    b2:1d:95:1f:cd:ed:0f:48:43:0c:d8:a7:13:51:07:
                    49:68:d0:f3:3c:c6:1d:40:81:00:64:8f:3e:22:c9:
                    6c:69:f4:2d:24:f7:a4:59:8d:bf:03:9a:89:9e:d3:
                    73:d8:22:23:b2:b5:d8:ad:20:c9:82:66:b1:b1:f2:
                    f2:03:21:cb:43:c4:d3:38:7f:f7:c6:40:b7:d7:5f:
                    5f:55:f0:99:28:3f:d2:49:66:64:57:e0:87:a5:8d:
                    32:18:b0:ed:bb:e7:64:41:2a:cf:a4:a0:59:1b:89:
                    85:4f:a6:15:83:a5:89:57:2b:de:89:54:e7:e9:9d:
                    3f:77:a7:aa:7f:e5:90:30:ce:d8:c7:eb:50:a7:a4:
                    83:5b:6b:c2:61:b7:74:ea:b8:06:33:3a:1f:e3:b8:
                    ff:55:58:6b:f8:68:e2:d5:c7:15:53:ac:55:ab:d9:
                    70:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BC:34:B3:C6:60:CA:C0:DF:22:CD:90:7A:BD:66:6B:F8:06:D7:4A
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS142519.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:70:fb:91:74:ab:23:f5:2d:72:f8:64:4a:d3:73:72:e3:e9:
         9a:40:03:35:ff:59:29:ee:c5:42:46:9d:66:b0:83:3a:1c:dd:
         2d:7c:4b:3e:b3:8f:c4:2c:24:8d:3d:19:3d:4a:9f:d3:16:21:
         60:43:6e:a2:b9:eb:02:97:dd:81:e7:8d:e8:a1:a9:d5:9c:dc:
         94:9e:0f:c7:7a:27:11:1f:0d:e3:de:48:38:00:6d:08:12:4d:
         fc:c6:43:6e:54:ee:32:6f:e8:5b:da:62:b2:ef:e1:71:2f:10:
         20:ce:b3:37:e0:c4:d7:98:52:ad:d2:24:4a:88:66:81:7b:c8:
         6a:5f:c5:be:f2:c1:7a:a8:48:ff:6d:97:e1:9b:b6:50:dd:71:
         55:e2:22:0d:b3:74:05:87:ad:0b:84:66:52:37:ff:2c:30:15:
         5f:9d:32:e7:3b:0e:8f:2e:33:00:d3:61:4e:ff:f9:cb:35:99:
         11:50:0d:00:15:db:91:ec:f3:33:23:6a:57:6f:5d:70:bb:47:
         8b:06:68:4e:64:d8:fa:6b:5f:23:6a:c7:d9:31:ef:88:c5:6f:
         7b:f5:d0:c9:07:c4:ad:34:1c:d0:0e:7c:da:d0:ff:48:7c:77:
         26:f3:f1:ee:7f:6f:25:b2:5e:74:91:42:2f:42:cb:52:cb:b3:
         21:8a:24:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org