Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3137342e302f32342d3234203d3e203439393939.roa
File:                     36342e35302e3137342e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          bZXQ3w1046mUqtJ25j9sGY+8DQjo1e5PfTDIZqgzrXI=
Subject key identifier:   0D:72:9E:31:0D:8D:FE:EA:CB:3B:10:B7:BF:39:FB:D4:F6:6D:5E:21
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7DDBB75E5F5C990F2EDD2CA802C3433458AC79AC
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3137342e302f32342d3234203d3e203439393939.roa
Signing time:             Tue 29 Nov 2022 17:58:52 +0000
ROA not before:           Tue 29 Nov 2022 17:53:52 +0000
ROA not after:            Tue 28 Nov 2023 17:58:52 +0000
asID:                     49999
IP address blocks:        64.50.174.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:db:b7:5e:5f:5c:99:0f:2e:dd:2c:a8:02:c3:43:34:58:ac:79:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 29 17:53:52 2022 GMT
            Not After : Nov 28 17:58:52 2023 GMT
        Subject: CN=0D729E310D8DFEEACB3B10B7BF39FBD4F66D5E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a6:69:56:c9:27:54:2b:1a:aa:00:55:a6:75:
                    f8:45:75:90:e9:65:56:3c:ea:10:75:7e:9f:e7:39:
                    04:21:16:29:83:0e:69:2f:59:f3:f3:f6:45:81:9a:
                    4d:28:98:3d:5c:71:5d:db:4c:0f:27:22:db:b3:b3:
                    1d:e8:d8:51:59:75:09:0f:0c:43:30:8b:80:cd:a0:
                    bc:70:68:36:e7:f4:e8:e9:58:2b:dc:e9:f9:be:3a:
                    df:d1:8a:3d:9e:50:86:8f:67:b3:cb:b8:4f:37:4a:
                    ff:3a:aa:50:2e:ac:51:3b:5c:3d:3e:93:3e:78:f7:
                    3d:81:bc:cc:65:be:a3:26:f6:aa:0b:dd:b2:3f:44:
                    39:30:9e:66:f6:0b:d7:55:1a:35:2c:74:72:d0:13:
                    0a:93:2e:3c:36:25:df:b2:66:3d:13:91:8f:a4:b7:
                    fe:58:82:32:e6:ed:ee:a1:24:b3:e9:28:c6:1c:d8:
                    f9:e1:85:60:f2:30:ef:6f:19:be:a0:8d:4b:88:05:
                    a9:ff:3c:02:9f:16:71:ab:a9:ed:dd:89:a2:94:f9:
                    c4:52:43:76:49:82:c8:66:29:a4:cf:76:2c:2f:ef:
                    0f:4c:c6:49:2e:fb:3b:a0:69:99:fd:8c:e1:5d:fe:
                    1b:91:a4:d2:88:bd:f3:47:9b:63:37:0f:48:69:89:
                    68:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:72:9E:31:0D:8D:FE:EA:CB:3B:10:B7:BF:39:FB:D4:F6:6D:5E:21
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3137342e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:de:83:83:4e:ea:46:dd:7a:1e:19:0e:48:bd:ef:21:23:73:
         e6:25:47:6b:de:13:91:39:c7:18:59:06:6f:bd:38:8e:64:66:
         ba:f1:b5:0f:bf:bb:eb:ff:19:e9:6b:89:62:7d:2b:e7:68:a8:
         da:3e:3a:77:1d:35:b1:35:f4:26:49:1f:c9:91:b1:b3:fb:53:
         11:8f:4f:e3:a0:fe:a7:a2:ce:9c:1e:15:4e:30:b6:ef:0f:0e:
         ce:7e:94:90:2a:07:fa:3f:5e:69:30:58:e5:c4:7f:cd:6d:a3:
         26:4f:5b:56:1b:0f:82:ee:c8:6d:68:94:d8:bf:7d:76:61:9a:
         2a:e0:4a:53:bc:99:be:f4:af:0e:46:97:be:77:97:91:2b:f1:
         ff:5d:66:89:43:cc:46:c9:54:b4:65:c5:57:b5:df:3a:3b:b5:
         c1:fa:c9:37:a6:c6:e5:9c:df:be:5f:82:71:50:5b:0d:cf:de:
         d3:ff:ec:76:62:f5:e1:d6:a5:9b:53:7a:f5:ec:c8:ed:7b:85:
         bb:8f:57:51:59:ac:23:21:dd:27:45:64:cd:15:a6:b5:ff:a4:
         18:1a:ed:f0:9a:a7:dc:06:fa:4c:31:20:33:ac:38:e4:59:90:
         62:3f:b3:e8:fb:1b:3e:4c:97:c6:d8:73:0c:6c:4f:37:e2:83:
         9f:d4:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----