Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3138342e302f32342d3234203d3e203631313338.roa
File:                     36342e35302e3138342e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          sVBvh9G6lSWxmbeS+qaAEAZySa3YwzUmBcLvMAQg9UM=
Subject key identifier:   28:A5:0E:1D:83:E9:A5:83:B9:AA:86:AC:7F:2B:3B:AB:A6:48:E1:0B
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       393F4EE93B698D1AED733EEEA20DECED717642A0
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3138342e302f32342d3234203d3e203631313338.roa
Signing time:             Mon 28 Nov 2022 11:21:59 +0000
ROA not before:           Mon 28 Nov 2022 11:16:59 +0000
ROA not after:            Mon 27 Nov 2023 11:21:59 +0000
asID:                     61138
IP address blocks:        64.50.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:3f:4e:e9:3b:69:8d:1a:ed:73:3e:ee:a2:0d:ec:ed:71:76:42:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:59 2022 GMT
            Not After : Nov 27 11:21:59 2023 GMT
        Subject: CN=28A50E1D83E9A583B9AA86AC7F2B3BABA648E10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:13:ce:8d:dd:c5:cc:a3:6e:4a:b3:3e:de:99:
                    e0:f4:29:c8:8c:b8:c7:c5:9c:85:ad:a6:22:13:7f:
                    50:21:d0:97:59:59:b9:ce:d0:74:91:87:bc:fe:c4:
                    21:67:5d:d5:de:3d:98:b1:63:6e:96:1d:ac:28:a9:
                    a4:4b:e1:33:51:65:02:cc:79:e2:39:d0:b3:70:70:
                    db:54:e2:51:79:d5:fd:26:bb:d9:d0:05:9e:b9:db:
                    be:2c:aa:16:a8:4d:02:99:0f:2b:46:09:0c:52:f1:
                    50:9b:f7:d9:9a:8e:7b:e5:21:88:6a:c0:09:ed:e9:
                    83:cf:61:06:40:09:01:49:f2:32:da:84:6a:b1:16:
                    ba:1a:52:6f:20:d7:8c:64:d0:ad:f9:03:18:73:a2:
                    38:e3:0d:9c:51:92:e7:db:e2:28:bf:9b:f5:5e:a5:
                    ac:59:93:3a:21:98:9f:c8:26:16:c6:d4:34:1f:b7:
                    4e:16:0d:8d:b0:83:48:7a:62:cd:b5:2c:f9:00:04:
                    dc:c5:6c:04:3b:48:99:0e:06:dc:47:f7:84:c5:01:
                    15:84:f4:a1:11:88:cf:92:8b:23:c1:5c:9f:35:30:
                    12:02:be:53:94:43:bb:d3:37:a7:95:98:87:5f:36:
                    31:a7:24:c1:47:32:4c:cd:56:52:2a:e0:61:6c:c5:
                    80:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A5:0E:1D:83:E9:A5:83:B9:AA:86:AC:7F:2B:3B:AB:A6:48:E1:0B
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3138342e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:f7:d4:14:e6:ce:9b:cd:2b:c5:b9:6a:3f:46:1b:2a:3f:a0:
         2b:b0:bd:5e:3a:c6:dd:46:e8:04:7f:9b:5a:f3:22:e3:ea:f4:
         4c:74:d7:b0:ab:56:5b:87:13:11:b7:e5:d9:77:e1:55:b0:e3:
         a9:51:b6:20:9c:36:46:55:e6:e4:05:1a:8a:94:4d:05:7f:be:
         d6:fe:84:68:ef:cd:69:e5:15:b9:a3:fa:90:2a:d0:90:10:bc:
         66:2e:e2:b4:09:b9:82:57:c6:3f:6a:ba:37:19:b2:bf:b8:c6:
         44:99:d5:6d:88:dd:f3:6d:f9:b1:c2:ff:26:30:a1:35:58:08:
         65:eb:08:ec:35:9c:cf:04:ff:97:34:50:aa:01:7e:6c:21:4d:
         77:8d:4b:aa:09:49:77:d6:8b:d5:87:08:9c:62:9f:25:4e:d0:
         71:2e:00:88:0a:75:54:2f:f8:6f:5a:a2:db:59:a7:f6:6e:8c:
         59:97:63:dd:e2:43:2d:8b:8c:f2:ed:e5:02:09:ae:89:1a:61:
         97:38:45:0e:33:1e:d6:fa:60:08:53:c9:53:48:95:e2:dd:4a:
         bb:f2:bc:0b:a9:fd:b9:90:cb:e6:24:d3:e1:d1:ef:44:74:67:
         1b:56:a2:47:fc:b8:10:bc:77:09:c7:a8:a3:2a:7b:c7:63:c9:
         4b:9f:f3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----