Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3138392e302f32342d3234203d3e203439393939.roa
File:                     36342e35302e3138392e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          RjtbL6DfCCDVNelZMiJCzd3+aQbFO88MzlWXme4y3y0=
Subject key identifier:   80:F1:14:2B:2E:66:44:71:C9:CB:46:B1:72:93:6D:C3:C8:09:7E:02
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5C4F4984F46001ACD43F136DEF252249BCD862D8
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3138392e302f32342d3234203d3e203439393939.roa
Signing time:             Mon 28 Nov 2022 11:21:59 +0000
ROA not before:           Mon 28 Nov 2022 11:16:59 +0000
ROA not after:            Mon 27 Nov 2023 11:21:59 +0000
asID:                     49999
IP address blocks:        64.50.189.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:4f:49:84:f4:60:01:ac:d4:3f:13:6d:ef:25:22:49:bc:d8:62:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:59 2022 GMT
            Not After : Nov 27 11:21:59 2023 GMT
        Subject: CN=80F1142B2E664471C9CB46B172936DC3C8097E02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:22:e8:04:0b:0d:51:5e:b3:18:39:ef:76:c3:
                    47:64:16:3c:fb:41:21:98:d7:9a:70:c4:c0:8c:99:
                    51:90:46:94:76:af:89:98:6c:6e:33:f6:f3:97:5e:
                    63:6e:dd:f6:21:0a:7f:41:08:96:a5:48:89:c8:58:
                    3e:b1:68:29:69:e1:b8:fe:a5:c4:73:a7:29:a4:46:
                    3a:a0:e0:c8:e4:b3:ed:95:7e:05:41:f4:58:46:b6:
                    fd:b3:70:d7:59:15:85:e5:67:bb:6c:b6:dc:64:d1:
                    96:81:ea:d2:f4:e3:72:21:26:e6:72:dd:f0:78:df:
                    91:d9:75:0c:3c:37:5d:b5:c9:c3:61:13:de:70:6d:
                    0b:03:97:9b:2f:35:ca:68:18:f2:d3:36:2f:a1:cd:
                    23:4e:41:57:a5:f3:1c:93:a2:22:8a:c0:f9:9a:48:
                    c6:55:b0:74:93:01:2a:e9:16:00:fe:cc:e1:b9:47:
                    3f:f9:07:4b:7d:16:48:ef:b7:05:5c:2c:64:aa:11:
                    22:ff:c7:3f:18:35:e9:ca:65:f0:4d:b0:a2:5e:08:
                    34:7a:26:45:0f:92:87:9c:54:5f:57:d9:b5:fa:04:
                    59:43:41:bf:d3:c1:17:65:07:82:58:a8:90:bc:e6:
                    82:86:de:35:17:c7:92:b7:a2:88:20:ca:38:0d:fe:
                    73:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F1:14:2B:2E:66:44:71:C9:CB:46:B1:72:93:6D:C3:C8:09:7E:02
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3138392e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:13:3f:19:23:a7:53:1a:62:36:06:2b:d1:01:12:c4:5f:25:
         0f:55:8f:3a:e1:7d:d2:2a:d5:03:83:85:2a:bb:01:01:3b:d7:
         79:e0:45:c7:c3:1a:76:78:8d:15:7f:e2:b5:36:cc:30:5c:dd:
         d9:33:24:13:14:f7:aa:47:0c:30:90:5e:4a:d8:30:b6:fc:da:
         62:53:6b:f7:ec:28:fe:73:95:ed:4d:a3:67:d6:e9:aa:bd:ec:
         96:e6:1d:99:51:8b:3f:a9:82:5c:b2:aa:d1:11:6b:94:ec:4e:
         10:dd:2b:8b:0e:b9:39:aa:28:87:d9:ba:ba:99:08:1e:e1:ec:
         ac:70:c5:9a:31:c5:5e:48:c0:54:97:55:8a:64:5e:f8:f0:49:
         10:b5:00:f6:c9:35:41:83:9b:31:70:8e:ec:b3:c2:ff:0b:ea:
         fd:70:fe:52:54:ce:24:13:26:f5:12:7a:f2:26:00:fb:00:b8:
         9a:84:f3:64:1b:26:05:b2:fe:c2:64:23:2b:50:6b:61:8c:61:
         e4:c3:fa:8b:75:15:98:69:5e:8f:81:ec:a1:75:7d:47:98:06:
         0b:af:35:30:16:f5:77:06:90:be:eb:87:1e:d1:aa:bc:9b:eb:
         d7:16:e0:96:b6:1a:25:a3:39:fc:bc:87:5e:aa:8f:61:86:55:
         90:a8:14:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----