Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS60721.roa
File:                     AS60721.roa (raw, json)
Hash identifier:          DNajZJ7B/3QrCaBAgXPYjAVZy0kGCBXkpCgBrTsSR7o=
Subject key identifier:   1E:BF:46:77:22:F1:CE:D4:FE:1D:7B:9D:B3:C6:76:E7:12:E4:DA:AF
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7583DF0EBEE28DBB0BC718C51D2DF0BE5702FDF4
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS60721.roa
Signing time:             Mon 01 May 2023 08:30:03 +0000
ROA not before:           Mon 01 May 2023 08:25:03 +0000
ROA not after:            Mon 29 Apr 2024 08:30:03 +0000
asID:                     60721
IP address blocks:        74.50.19.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:83:df:0e:be:e2:8d:bb:0b:c7:18:c5:1d:2d:f0:be:57:02:fd:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May  1 08:25:03 2023 GMT
            Not After : Apr 29 08:30:03 2024 GMT
        Subject: CN=1EBF467722F1CED4FE1D7B9DB3C676E712E4DAAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7c:ca:1c:8b:07:c4:f0:89:0c:31:d2:65:51:
                    be:29:d8:61:a2:7e:de:ae:1d:44:e1:34:dd:ef:d6:
                    8f:08:8b:f3:b7:cf:ce:cb:56:05:97:54:a1:ae:9c:
                    1b:79:02:a0:35:5b:9f:41:fb:82:bf:69:ce:3b:03:
                    bc:70:72:ea:15:31:f9:20:c9:83:cd:55:ee:f4:0a:
                    ba:66:d5:e4:ae:b8:05:f2:48:55:aa:d2:01:a2:ae:
                    01:dc:68:aa:a1:cc:e8:12:92:da:88:93:d7:e9:a1:
                    47:35:4a:87:e5:e6:65:9c:c0:08:e1:5e:4b:54:77:
                    6d:93:72:eb:b6:a2:e9:56:43:36:02:f6:4a:ba:54:
                    a1:ef:7d:7e:c8:48:dd:28:ad:c5:4f:21:07:9e:8f:
                    59:ce:9a:45:c1:6c:04:f5:5a:5a:e1:6a:a9:b1:28:
                    1a:23:65:8a:e3:da:23:35:f9:aa:75:0f:04:45:d9:
                    27:17:ad:15:f8:d8:77:25:4b:14:49:16:48:56:91:
                    4b:59:3b:3b:d9:a6:c4:59:67:8d:2a:ee:fd:0f:bc:
                    88:e6:07:48:6f:e6:82:24:4c:3c:b5:c7:cd:f3:54:
                    16:19:2f:53:5b:a9:7a:b6:70:e0:e5:57:8d:68:be:
                    b8:3d:29:4e:9d:1a:54:0a:42:4c:7c:2c:fc:48:ce:
                    f6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BF:46:77:22:F1:CE:D4:FE:1D:7B:9D:B3:C6:76:E7:12:E4:DA:AF
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS60721.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:2d:40:10:e2:4a:a1:91:4b:f2:12:f1:dd:e5:19:94:31:ba:
         9c:03:af:84:7d:9c:16:0d:13:88:1c:e7:17:88:0c:2e:41:83:
         3f:74:58:76:d0:ac:9f:ed:10:96:42:f2:c2:c0:06:ff:3b:73:
         d1:02:85:e8:55:97:80:4d:d0:80:33:c5:bf:4f:c7:1f:42:08:
         07:61:bf:47:be:7d:52:e8:a4:86:29:f6:5b:f8:59:1f:e8:8b:
         f0:6b:34:f3:9b:61:e1:87:5e:b2:dc:7a:8e:90:58:81:d3:9b:
         e6:c1:cf:c3:5a:df:59:bf:8d:cb:69:9b:26:81:8d:8e:42:6d:
         06:1d:75:53:e6:cc:77:11:f5:3f:f0:98:49:3c:4c:6c:22:23:
         c0:d1:ee:c6:a2:59:c3:87:96:36:08:98:77:5c:29:39:38:14:
         61:f0:b1:03:b0:89:63:fe:b8:13:f7:8d:09:c2:8e:24:07:8e:
         d6:db:c1:81:5a:ed:f0:36:db:0e:24:b4:ed:09:90:55:95:94:
         74:f5:f3:34:f1:a8:b9:09:cc:8c:5a:39:b4:c1:48:3e:19:63:
         86:35:59:50:f8:1e:6e:38:ac:c6:0e:e6:3d:9e:9f:0b:81:48:
         02:be:6e:8b:fd:dd:2a:ed:82:93:84:f6:94:8a:03:e7:00:32:
         d9:42:7a:62
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUdYPfDr7ijbsLxxjFHS3wvlcC/fQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjMwNTAxMDgyNTAzWhcNMjQwNDI5MDgzMDAz
WjAzMTEwLwYDVQQDEygxRUJGNDY3NzIyRjFDRUQ0RkUxRDdCOURCM0M2NzZFNzEy
RTREQUFGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HzKHIsHxPCJ
DDHSZVG+Kdhhon7erh1E4TTd79aPCIvzt8/Oy1YFl1ShrpwbeQKgNVufQfuCv2nO
OwO8cHLqFTH5IMmDzVXu9Aq6ZtXkrrgF8khVqtIBoq4B3GiqoczoEpLaiJPX6aFH
NUqH5eZlnMAI4V5LVHdtk3LrtqLpVkM2AvZKulSh731+yEjdKK3FTyEHno9ZzppF
wWwE9Vpa4WqpsSgaI2WK49ojNfmqdQ8ERdknF60V+Nh3JUsUSRZIVpFLWTs72abE
WWeNKu79D7yI5gdIb+aCJEw8tcfN81QWGS9TW6l6tnDg5VeNaL64PSlOnRpUCkJM
fCz8SM72TwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFB6/Rnci8c7U/h17nbPGducS
5NqvMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzYwNzIxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjITMA0GCSqGSIb3DQEBCwUAA4IB
AQCGLUAQ4kqhkUvyEvHd5RmUMbqcA6+EfZwWDROIHOcXiAwuQYM/dFh20Kyf7RCW
QvLCwAb/O3PRAoXoVZeATdCAM8W/T8cfQggHYb9Hvn1S6KSGKfZb+Fkf6IvwazTz
m2Hhh16y3HqOkFiB05vmwc/DWt9Zv43LaZsmgY2OQm0GHXVT5sx3EfU/8JhJPExs
IiPA0e7GolnDh5Y2CJh3XCk5OBRh8LEDsIlj/rgT940Jwo4kB47W28GBWu3wNtsO
JLTtCZBVlZR09fM08ai5CcyMWjm0wUg+GWOGNVlQ+B5uOKzGDuY9np8LgUgCvm6L
/d0q7YKThPaUigPnADLZQnpi
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org