Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3136352e302f32342d3234203d3e203631333137.roa
File:                     36342e35302e3136352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Iscnz7xaR7aWY3HvvXdM/H9m5Eb8imyA7bmkbxe6oO8=
Subject key identifier:   AD:C6:9D:41:CB:CF:43:6A:97:21:B3:BE:C3:C4:AD:48:64:1A:BF:0A
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       0AC04C23E13266F2842387DB6413B532E1342845
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3136352e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 28 Nov 2022 11:21:59 +0000
ROA not before:           Mon 28 Nov 2022 11:16:59 +0000
ROA not after:            Mon 27 Nov 2023 11:21:59 +0000
asID:                     61317
IP address blocks:        64.50.165.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c0:4c:23:e1:32:66:f2:84:23:87:db:64:13:b5:32:e1:34:28:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:59 2022 GMT
            Not After : Nov 27 11:21:59 2023 GMT
        Subject: CN=ADC69D41CBCF436A9721B3BEC3C4AD48641ABF0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:91:48:6f:08:36:69:40:13:a2:24:0e:58:55:
                    f9:f5:48:1a:54:33:aa:70:ed:01:2f:ef:e5:dd:70:
                    45:70:98:3c:55:82:73:50:4e:83:34:7d:74:56:d1:
                    d1:bc:dc:ac:1e:37:01:ae:9e:aa:30:f8:8c:c4:19:
                    0c:d0:cf:5b:af:d6:85:88:8b:c7:f3:3d:0c:3a:44:
                    a9:98:6b:cb:88:14:6d:68:c6:43:12:6e:ec:e7:54:
                    3a:98:11:9f:71:01:66:16:39:97:a2:50:b4:ba:53:
                    ee:50:0c:26:c2:f7:63:5d:9d:9e:51:12:9e:27:f6:
                    6f:2a:4d:78:12:9a:7d:f4:a7:cd:ce:df:f8:5a:ea:
                    49:7b:f7:69:7b:67:b1:b9:d5:83:bc:60:8f:e1:60:
                    d2:af:4e:c6:5a:48:c0:29:2c:d9:ec:36:8e:2e:56:
                    5f:7e:15:2f:09:3e:25:a6:af:77:c3:06:e0:a6:bc:
                    c2:0e:87:58:3c:50:a7:9d:9e:0c:62:7e:27:52:b5:
                    23:93:e6:fc:0d:26:74:f3:e1:ec:27:46:6d:be:b7:
                    f6:de:61:37:30:fc:78:64:cc:58:35:24:d6:84:eb:
                    23:95:17:9e:ec:cd:45:40:5d:25:04:a0:a2:a0:74:
                    73:c5:4f:eb:18:b6:11:56:95:64:ac:bd:3f:92:2e:
                    34:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C6:9D:41:CB:CF:43:6A:97:21:B3:BE:C3:C4:AD:48:64:1A:BF:0A
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3136352e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:ad:dc:68:2a:ab:90:f9:1f:2f:b2:23:8a:c9:49:6c:ce:93:
         ff:6a:52:1e:bf:b6:bb:7f:fb:ad:6f:43:c0:37:89:f0:a3:c4:
         dc:73:cc:86:6d:2d:cf:73:df:fa:16:d0:4e:18:44:59:f7:36:
         86:7b:82:27:2e:16:4b:fe:67:fa:8b:1b:e2:cc:dc:8c:da:c8:
         31:6f:d3:02:5e:1a:95:01:65:38:cd:f3:7a:f5:dd:ff:59:e9:
         a0:b3:1a:05:29:9e:a4:59:7c:f1:1e:bf:2f:53:22:b3:03:58:
         fa:f9:dd:5d:d0:f8:ab:f6:14:9b:0c:93:7c:5d:6d:82:87:3d:
         37:7a:a1:25:d1:a4:e7:8e:e8:d1:d9:02:66:8f:fa:03:63:01:
         6b:e2:22:13:c6:88:f0:09:96:20:88:be:13:7d:58:cb:b6:ab:
         d9:3e:3a:13:da:5d:d3:86:20:87:e7:b1:28:91:07:97:b0:64:
         14:5a:46:85:55:58:3a:b4:33:b9:ac:bb:03:2a:e4:69:3c:1e:
         90:31:6f:66:1e:c8:45:46:46:8a:c5:b5:08:d1:87:87:80:2f:
         3f:e9:10:5a:fd:99:7f:8c:d1:9b:38:fe:5c:66:4d:08:7b:14:
         de:62:4c:06:f2:b6:94:ee:58:74:47:b0:c2:25:cf:a9:14:20:
         53:2f:08:2e
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUCsBMI+EyZvKEI4fbZBO1MuE0KEUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjIxMTI4MTExNjU5WhcNMjMxMTI3MTEyMTU5
WjAzMTEwLwYDVQQDEyhBREM2OUQ0MUNCQ0Y0MzZBOTcyMUIzQkVDM0M0QUQ0ODY0
MUFCRjBBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JFIbwg2aUAT
oiQOWFX59UgaVDOqcO0BL+/l3XBFcJg8VYJzUE6DNH10VtHRvNysHjcBrp6qMPiM
xBkM0M9br9aFiIvH8z0MOkSpmGvLiBRtaMZDEm7s51Q6mBGfcQFmFjmXolC0ulPu
UAwmwvdjXZ2eURKeJ/ZvKk14Epp99KfNzt/4WupJe/dpe2exudWDvGCP4WDSr07G
WkjAKSzZ7DaOLlZffhUvCT4lpq93wwbgprzCDodYPFCnnZ4MYn4nUrUjk+b8DSZ0
8+HsJ0Ztvrf23mE3MPx4ZMxYNSTWhOsjlRee7M1FQF0lBKCioHRzxU/rGLYRVpVk
rL0/ki40nwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFK3GnUHLz0NqlyGzvsPErUhk
Gr8KMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8xLzM2MzQyZTM1MzAyZTMxMzYzNTJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABAMqUwDQYJKoZIhvcNAQELBQAD
ggEBACet3Ggqq5D5Hy+yI4rJSWzOk/9qUh6/trt/+61vQ8A3ifCjxNxzzIZtLc9z
3/oW0E4YRFn3NoZ7gicuFkv+Z/qLG+LM3IzayDFv0wJeGpUBZTjN83r13f9Z6aCz
GgUpnqRZfPEevy9TIrMDWPr53V3Q+Kv2FJsMk3xdbYKHPTd6oSXRpOeO6NHZAmaP
+gNjAWviIhPGiPAJliCIvhN9WMu2q9k+OhPaXdOGIIfnsSiRB5ewZBRaRoVVWDq0
M7msuwMq5Gk8HpAxb2YeyEVGRorFtQjRh4eALz/pEFr9mX+M0Zs4/lxmTQh7FN5i
TAbytpTuWHRHsMIlz6kUIFMvCC4=
-----END CERTIFICATE-----