Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e302e302f32342d3234203d3e203439333932.roa
File:                     37342e35302e302e302f32342d3234203d3e203439333932.roa (raw, json)
Hash identifier:          LnxBdzUPepF2rTZK55/iuDDA/GSe09z02F74utFq+N0=
Subject key identifier:   EA:75:69:7C:15:6B:23:F7:1F:CA:94:50:12:67:50:89:6F:AB:E7:38
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2F9C13D42C5B909CDC25A47F16FC3880E26930EC
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e302e302f32342d3234203d3e203439333932.roa
Signing time:             Mon 28 Nov 2022 11:21:58 +0000
ROA not before:           Mon 28 Nov 2022 11:16:58 +0000
ROA not after:            Mon 27 Nov 2023 11:21:58 +0000
asID:                     49392
IP address blocks:        74.50.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9c:13:d4:2c:5b:90:9c:dc:25:a4:7f:16:fc:38:80:e2:69:30:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:58 2022 GMT
            Not After : Nov 27 11:21:58 2023 GMT
        Subject: CN=EA75697C156B23F71FCA9450126750896FABE738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4d:8b:b7:f2:58:d1:ba:e1:c6:41:ce:60:02:
                    ca:22:89:ab:2e:00:ca:cb:78:50:14:71:04:11:30:
                    04:8c:ef:2f:06:27:00:5e:ef:40:86:e4:4e:80:17:
                    3b:62:9e:ac:c9:d4:27:02:0c:4a:0d:a7:0a:9d:94:
                    6e:d1:71:95:4d:73:a3:09:25:eb:e8:27:51:53:50:
                    97:c2:84:cf:69:bf:60:e1:ff:62:93:94:e1:d0:bc:
                    4f:c9:d2:c0:15:ac:8f:63:7f:3c:b5:bf:39:25:39:
                    3b:4c:bf:eb:71:48:dd:ff:bb:a4:a0:db:43:32:50:
                    1a:1b:3a:20:56:f4:6f:51:38:83:9f:3a:ce:dd:a9:
                    32:c9:be:0d:26:01:e8:d6:c1:9c:38:d6:7f:b3:6e:
                    4e:36:62:8f:21:e7:c1:0c:dd:c8:93:60:b2:2e:07:
                    28:d1:c2:ae:6a:2e:57:5c:0d:d1:39:c2:88:69:7a:
                    d7:78:32:33:b9:02:89:b0:e8:4d:08:7b:19:13:7a:
                    91:9f:91:ab:59:a2:87:28:ae:f8:eb:ed:65:82:9c:
                    f6:24:18:d3:03:16:82:09:ab:58:cc:d1:13:a1:31:
                    42:d3:36:39:4e:9f:1c:96:48:d9:d0:6e:92:81:81:
                    9a:d9:9f:53:b9:0a:16:03:9f:5f:bc:50:18:cf:d1:
                    06:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:75:69:7C:15:6B:23:F7:1F:CA:94:50:12:67:50:89:6F:AB:E7:38
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e302e302f32342d3234203d3e203439333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:ff:eb:31:95:b7:f5:6b:7e:06:89:96:55:99:ff:f0:0f:c1:
         e4:2c:e4:12:0f:cb:bb:8d:3c:6f:79:32:5f:7f:7f:e7:0f:7c:
         b4:b8:15:4e:aa:49:1b:18:fa:10:3d:4e:62:b2:b1:ce:1e:ef:
         b2:0e:77:74:ba:22:d6:d5:a4:79:e2:25:0c:6b:c4:09:a1:b7:
         25:4b:8b:c2:99:59:89:9a:c5:d9:d0:b1:46:9c:d3:a7:e6:06:
         48:28:f3:cc:2a:9b:16:c1:5b:19:46:58:82:a3:2b:a2:0e:c5:
         6a:3e:5c:7a:34:ee:90:46:b1:3b:07:f3:ad:31:df:07:30:29:
         c1:e4:db:6e:a7:bd:e4:f7:b3:d6:eb:46:2e:2e:4e:af:59:fc:
         6e:48:95:7b:62:66:0f:b5:f5:af:1b:71:f0:6f:c1:47:4a:6d:
         da:c3:45:48:c9:7a:df:59:b2:05:8d:c8:c2:4d:4b:84:96:46:
         14:cc:45:dc:a4:c5:2b:6b:06:cd:0b:3a:e8:41:88:bf:06:fd:
         46:41:cd:2a:a6:ca:f5:13:c9:8f:e7:eb:86:ff:cd:e6:24:e9:
         b2:ac:e2:66:e6:62:57:bd:7e:c8:d7:30:60:77:9b:72:f1:36:
         32:59:16:cb:2e:51:f7:46:e4:0e:9f:0b:6d:c5:64:f5:d6:83:
         84:44:88:a8
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUL5wT1CxbkJzcJaR/Fvw4gOJpMOwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjIxMTI4MTExNjU4WhcNMjMxMTI3MTEyMTU4
WjAzMTEwLwYDVQQDEyhFQTc1Njk3QzE1NkIyM0Y3MUZDQTk0NTAxMjY3NTA4OTZG
QUJFNzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw02Lt/JY0brh
xkHOYALKIomrLgDKy3hQFHEEETAEjO8vBicAXu9AhuROgBc7Yp6sydQnAgxKDacK
nZRu0XGVTXOjCSXr6CdRU1CXwoTPab9g4f9ik5Th0LxPydLAFayPY388tb85JTk7
TL/rcUjd/7ukoNtDMlAaGzogVvRvUTiDnzrO3akyyb4NJgHo1sGcONZ/s25ONmKP
IefBDN3Ik2CyLgco0cKuai5XXA3ROcKIaXrXeDIzuQKJsOhNCHsZE3qRn5GrWaKH
KK746+1lgpz2JBjTAxaCCatYzNEToTFC0zY5Tp8clkjZ0G6SgYGa2Z9TuQoWA59f
vFAYz9EGbwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFOp1aXwVayP3H8qUUBJnUIlv
q+c4MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEz
ZWVhNDkwZDMzLzEvMzczNDJlMzUzMDJlMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNl
MjAzNDM5MzMzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjIAMA0GCSqGSIb3DQEBCwUAA4IBAQBk
/+sxlbf1a34GiZZVmf/wD8HkLOQSD8u7jTxveTJff3/nD3y0uBVOqkkbGPoQPU5i
srHOHu+yDnd0uiLW1aR54iUMa8QJobclS4vCmVmJmsXZ0LFGnNOn5gZIKPPMKpsW
wVsZRliCoyuiDsVqPlx6NO6QRrE7B/OtMd8HMCnB5Ntup73k97PW60YuLk6vWfxu
SJV7YmYPtfWvG3Hwb8FHSm3aw0VIyXrfWbIFjcjCTUuElkYUzEXcpMUrawbNCzro
QYi/Bv1GQc0qpsr1E8mP5+uG/83mJOmyrOJm5mJXvX7I1zBgd5ty8TYyWRbLLlH3
RuQOnwttxWT11oOERIio
-----END CERTIFICATE-----