Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3138322e302f32342d3234203d3e203631313338.roa
File:                     36342e35302e3138322e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          eN1gm+zVRgiO/z3pjUGillwWmwaB+83deKjYnrAc0j8=
Subject key identifier:   25:EB:98:03:EC:D7:04:C3:FF:5E:03:60:8F:8E:FD:53:E6:53:60:6D
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       17E09E91237955F7726FA249E4FAD11BAC890F63
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3138322e302f32342d3234203d3e203631313338.roa
Signing time:             Mon 28 Nov 2022 11:21:58 +0000
ROA not before:           Mon 28 Nov 2022 11:16:58 +0000
ROA not after:            Mon 27 Nov 2023 11:21:58 +0000
asID:                     61138
IP address blocks:        64.50.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e0:9e:91:23:79:55:f7:72:6f:a2:49:e4:fa:d1:1b:ac:89:0f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:58 2022 GMT
            Not After : Nov 27 11:21:58 2023 GMT
        Subject: CN=25EB9803ECD704C3FF5E03608F8EFD53E653606D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:ca:6c:e7:62:b5:cd:8f:9d:20:18:af:a3:
                    a9:ab:a2:ed:e1:23:f4:53:b5:36:fe:a7:dd:b6:86:
                    7a:ce:77:f5:aa:77:87:0b:6f:05:4a:6b:ba:75:4a:
                    22:66:b0:c0:0d:ce:b1:d0:2c:1f:b3:79:eb:a7:2d:
                    4e:31:c4:5b:b2:f0:ce:04:3a:35:c9:37:e7:73:ec:
                    d0:09:cb:c2:5a:44:4b:40:c1:49:e2:ac:41:97:01:
                    2a:bd:ab:0f:8e:5a:3e:4d:13:1b:f3:48:87:cf:45:
                    a9:24:fd:94:29:76:dd:28:f6:f1:c5:5d:2d:90:49:
                    77:d0:da:20:aa:cb:b5:b2:38:1f:6b:fa:f8:f1:0b:
                    9f:1f:c6:a3:7f:99:6a:5e:ef:92:f8:21:75:3f:7e:
                    17:8b:56:9f:b4:b5:5c:06:33:36:2f:74:18:16:42:
                    92:cf:70:51:b0:51:95:5a:d3:21:da:41:43:09:02:
                    36:82:94:fb:f3:4f:e4:5c:3f:ae:e9:7c:5a:a3:2f:
                    48:56:e3:7c:db:b8:56:97:ff:bb:e3:65:c6:15:52:
                    b2:9a:54:cb:02:85:20:47:ca:b9:d0:42:79:1c:9e:
                    b0:72:46:8d:19:a5:97:0e:44:eb:8d:89:c6:77:85:
                    d5:73:16:27:03:8c:bf:7c:1a:c2:48:84:5f:d8:8e:
                    2e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EB:98:03:EC:D7:04:C3:FF:5E:03:60:8F:8E:FD:53:E6:53:60:6D
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3138322e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:7d:34:df:87:c9:28:f8:26:d1:b2:10:25:8d:b4:1f:d8:9f:
         6c:2d:83:3a:3a:42:56:8a:c8:89:e0:20:a2:5e:71:96:7d:fe:
         f9:01:93:f9:14:04:d0:59:5a:8a:a6:d3:d9:b1:4b:15:b1:13:
         51:fa:da:71:d1:54:c3:65:40:98:f3:c9:b4:63:bb:bc:7f:de:
         e9:4e:37:fb:90:fd:6c:d8:40:af:e4:14:0b:4e:1f:ae:ab:eb:
         01:5b:2a:af:9b:88:c2:6b:f1:6a:d9:f0:05:e3:9c:d0:d1:93:
         17:5c:89:0c:79:b6:78:22:b0:89:95:a7:73:c0:30:4d:de:ac:
         6a:3f:c1:17:58:f6:f7:e1:0a:72:82:9b:1c:08:88:60:25:5b:
         b8:fd:5b:e3:2a:97:e2:a1:c1:15:82:18:a2:74:7d:2c:ea:d0:
         2d:08:de:c9:3d:9d:9e:71:fc:d3:7c:b0:3c:51:64:d7:b0:55:
         98:10:ee:c8:bf:45:09:fc:14:e3:86:f4:45:e8:46:e9:7f:05:
         be:ce:c4:bf:21:1c:25:d4:e3:e8:1a:c0:8e:a8:5f:4b:03:df:
         a0:e0:35:f2:cc:28:1b:7b:12:c8:07:3b:99:fe:41:80:b8:16:
         e5:39:12:ff:ba:7b:bc:5b:85:f1:c8:fc:4b:57:33:51:75:49:
         eb:72:bf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----