Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS49392.roa
File:                     AS49392.roa (raw, json)
Hash identifier:          qiebcQu2KnHYm3zy4VhM5INuwPL9PrSzNIKNQAahVUw=
Subject key identifier:   1A:CD:56:F4:9F:A0:10:89:21:EE:0D:21:B9:5E:57:2E:C7:A7:84:48
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       13A3DD137DED7BB0D10097FAD9414011EE94A799
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS49392.roa
Signing time:             Fri 09 Dec 2022 11:41:27 +0000
ROA not before:           Fri 09 Dec 2022 11:36:27 +0000
ROA not after:            Fri 08 Dec 2023 11:41:27 +0000
asID:                     49392
IP address blocks:        74.50.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a3:dd:13:7d:ed:7b:b0:d1:00:97:fa:d9:41:40:11:ee:94:a7:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  9 11:36:27 2022 GMT
            Not After : Dec  8 11:41:27 2023 GMT
        Subject: CN=1ACD56F49FA0108921EE0D21B95E572EC7A78448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ad:78:99:5c:bf:c5:e2:bb:b5:f3:c2:8f:cf:
                    ad:17:64:f5:30:a2:db:f1:f2:41:98:4c:d5:d4:4c:
                    6b:f9:9f:15:79:dc:1e:c0:97:78:9b:33:bb:4d:39:
                    7c:c9:76:30:18:e0:72:33:7f:a0:8c:b2:14:7c:05:
                    1b:21:62:2b:33:e6:81:56:8b:b7:02:78:4a:66:39:
                    1f:cc:b8:fb:e6:e6:db:ec:7d:6f:3e:01:0b:43:25:
                    2a:73:9e:9a:28:fb:57:27:f2:50:13:05:7b:6d:19:
                    e3:d4:d4:8c:fb:9c:0a:e8:54:f4:47:dc:ea:a5:9c:
                    f4:a5:19:29:26:28:8b:06:b5:e2:0f:ab:25:d2:ac:
                    c2:90:f8:07:5e:6f:b4:2e:6f:cf:a0:79:c2:3c:4d:
                    8e:11:0a:54:44:0d:56:4d:16:84:10:bf:16:bb:91:
                    3c:df:df:01:01:6f:46:84:c2:cc:67:92:b9:42:c6:
                    d1:c9:98:8b:92:b9:52:f7:a3:9f:0f:be:22:c8:c5:
                    88:22:d7:58:20:6a:87:c2:04:4d:b5:02:71:58:5d:
                    a5:25:c2:66:f9:17:77:f5:20:42:6b:f4:2e:03:f6:
                    af:3c:ce:9b:c1:e0:46:5a:6d:17:07:34:dd:e7:c8:
                    4d:66:ba:67:12:75:2f:95:1a:e1:b1:fd:4b:d5:e2:
                    cc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CD:56:F4:9F:A0:10:89:21:EE:0D:21:B9:5E:57:2E:C7:A7:84:48
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS49392.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:97:88:33:f0:b2:28:6f:8b:3f:91:66:6a:10:57:f6:2f:fe:
         8c:2d:8c:46:d0:f3:f3:6d:65:ac:17:6e:cc:c7:59:af:d8:5a:
         67:24:fb:c3:f2:81:6c:35:ed:11:53:c4:c8:19:29:d1:6f:91:
         dd:9e:a7:59:12:ab:1f:d4:22:c0:f5:60:21:ab:01:49:61:2d:
         dd:be:3c:b5:9a:24:b5:e6:66:ae:cc:c9:75:fb:ab:8e:e0:ac:
         68:d8:2a:f8:8f:4b:00:8b:63:93:32:58:1c:d7:c5:cd:5f:36:
         62:1d:03:6c:76:ee:8c:0f:b9:57:df:3b:82:1f:d3:67:e5:b6:
         be:28:90:0b:e7:6a:63:6c:8a:ff:a5:1e:ef:33:c5:c7:69:92:
         ef:a9:24:9a:00:52:32:78:80:93:ee:68:ed:5e:63:49:e2:cd:
         bf:de:de:05:33:7d:53:cd:36:4d:8f:da:16:c8:dc:2d:5a:ab:
         fe:d8:7e:07:73:8b:f8:20:7f:74:18:22:9f:ea:b4:e0:11:b0:
         cc:b3:75:52:59:ef:07:98:65:85:bf:6c:91:3a:64:a3:39:ae:
         b6:42:f6:cd:46:8a:84:32:83:bc:74:8c:06:7e:ce:0a:f1:87:
         c8:84:44:2d:1c:29:bf:ab:1d:4e:90:2c:3c:ab:6e:cc:29:b3:
         30:ea:d8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org