Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e31342e302f32342d3234203d3e203439393939.roa
File:                     37342e35302e31342e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          4k2w3uS6w4lvVnJrv9c9JjpaN3UJ43ZtFAVvTBSKTvc=
Subject key identifier:   4B:F3:96:0B:B1:F5:EF:2C:A8:9E:45:08:B7:E8:D4:E4:E9:35:93:B5
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       6EAE628A70A821F829D327CA32CEECE6BB5D57C0
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e31342e302f32342d3234203d3e203439393939.roa
Signing time:             Sat 03 Dec 2022 20:03:12 +0000
ROA not before:           Sat 03 Dec 2022 19:58:12 +0000
ROA not after:            Sat 02 Dec 2023 20:03:12 +0000
asID:                     49999
IP address blocks:        74.50.14.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ae:62:8a:70:a8:21:f8:29:d3:27:ca:32:ce:ec:e6:bb:5d:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  3 19:58:12 2022 GMT
            Not After : Dec  2 20:03:12 2023 GMT
        Subject: CN=4BF3960BB1F5EF2CA89E4508B7E8D4E4E93593B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:95:19:43:f0:11:c3:72:1c:43:27:3c:8b:ea:
                    fa:10:18:43:f8:76:d7:de:a2:3d:90:f2:ac:53:db:
                    19:94:ed:5b:28:8f:b2:6d:ac:33:84:b6:d5:b4:8a:
                    ed:42:2c:eb:55:d4:e1:91:5f:66:a1:84:47:7e:b7:
                    58:b4:d4:5e:10:6d:9c:c7:5f:93:5b:75:ab:b0:4e:
                    80:fc:f6:7e:e4:44:9e:66:ed:22:e0:eb:f7:a7:78:
                    73:cb:9e:25:fc:79:50:c1:7f:39:b0:8c:a8:1b:3f:
                    97:74:e2:07:60:2d:38:8f:f6:b8:35:bd:49:e3:3a:
                    5c:73:a4:b8:89:a6:5c:a4:52:7e:aa:a8:5b:aa:88:
                    b7:35:be:8c:68:50:fc:61:aa:0a:a5:77:3a:ec:5b:
                    25:ab:75:81:b3:ad:23:99:1b:8d:d0:a3:ba:a1:d4:
                    9f:c3:37:6b:7f:ed:c0:c1:77:b7:2d:10:ce:5d:3f:
                    62:9e:55:03:f0:5b:2f:3d:2c:bf:98:17:e9:a6:b0:
                    b3:30:a7:7b:bc:85:b4:bc:b4:74:3a:a0:a8:29:75:
                    16:7b:57:15:50:bd:8c:42:2c:c9:b2:8a:31:5d:0b:
                    07:67:8c:a8:ab:96:0d:db:b2:a5:b8:c6:4f:a6:23:
                    06:83:6f:11:b9:a0:37:b8:22:08:96:b1:4c:f6:1c:
                    a5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F3:96:0B:B1:F5:EF:2C:A8:9E:45:08:B7:E8:D4:E4:E9:35:93:B5
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e31342e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:bf:37:23:ed:c2:04:ed:56:52:c9:50:82:90:aa:37:4b:49:
         8c:b3:51:c6:81:88:f4:5d:c3:ac:d2:d2:fc:6a:0a:f7:4f:cb:
         fb:5a:9c:1b:d4:3d:54:de:86:50:f5:b0:29:e2:e8:c8:b8:60:
         b4:10:75:07:bc:f1:c5:b0:11:44:a8:04:b0:6e:2d:09:aa:50:
         3c:1c:a7:fd:cd:21:e1:52:b4:31:d8:3e:25:bf:a4:3b:9b:72:
         d1:95:c0:a3:c0:00:52:92:07:37:c9:9b:5f:9b:d6:c1:82:6c:
         70:10:db:35:90:1d:d3:c6:b8:d6:7b:9a:75:3e:0b:d5:34:7d:
         6f:74:f9:91:be:08:d1:b2:8e:77:ac:30:c9:a6:f0:47:82:97:
         c9:2d:39:e0:bc:1d:3f:4f:e6:c7:fa:2e:17:d4:f8:b3:2a:0a:
         29:c9:e4:88:5a:d7:29:a8:48:c3:17:32:f2:3e:87:e2:79:cf:
         a0:41:a1:46:71:25:e3:a8:3f:cd:37:9d:50:cc:27:dd:49:66:
         2f:d2:cf:a5:d3:a3:27:66:79:38:03:ea:f9:fa:b8:9d:5e:eb:
         1f:82:dc:60:9e:68:f4:2f:c8:82:f9:be:53:2e:ee:e2:a0:8f:
         2f:fc:b0:1d:99:70:aa:71:6e:a5:35:1a:a7:9b:7a:17:60:27:
         ca:b3:54:7f
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUbq5iinCoIfgp0yfKMs7s5rtdV8AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjIxMjAzMTk1ODEyWhcNMjMxMjAyMjAwMzEy
WjAzMTEwLwYDVQQDEyg0QkYzOTYwQkIxRjVFRjJDQTg5RTQ1MDhCN0U4RDRFNEU5
MzU5M0I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZUZQ/ARw3Ic
Qyc8i+r6EBhD+HbX3qI9kPKsU9sZlO1bKI+ybawzhLbVtIrtQizrVdThkV9moYRH
frdYtNReEG2cx1+TW3WrsE6A/PZ+5ESeZu0i4Ov3p3hzy54l/HlQwX85sIyoGz+X
dOIHYC04j/a4Nb1J4zpcc6S4iaZcpFJ+qqhbqoi3Nb6MaFD8YaoKpXc67Fslq3WB
s60jmRuN0KO6odSfwzdrf+3AwXe3LRDOXT9inlUD8FsvPSy/mBfpprCzMKd7vIW0
vLR0OqCoKXUWe1cVUL2MQizJsooxXQsHZ4yoq5YN27KluMZPpiMGg28RuaA3uCII
lrFM9hylHQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFEvzlgux9e8sqJ5FCLfo1OTp
NZO1MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEz
ZWVhNDkwZDMzLzEvMzczNDJlMzUzMDJlMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDM0MzkzOTM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABKMg4wDQYJKoZIhvcNAQELBQADggEB
ADK/NyPtwgTtVlLJUIKQqjdLSYyzUcaBiPRdw6zS0vxqCvdPy/tanBvUPVTehlD1
sCni6Mi4YLQQdQe88cWwEUSoBLBuLQmqUDwcp/3NIeFStDHYPiW/pDubctGVwKPA
AFKSBzfJm1+b1sGCbHAQ2zWQHdPGuNZ7mnU+C9U0fW90+ZG+CNGyjnesMMmm8EeC
l8ktOeC8HT9P5sf6LhfU+LMqCinJ5Iha1ymoSMMXMvI+h+J5z6BBoUZxJeOoP803
nVDMJ91JZi/Sz6XToydmeTgD6vn6uJ1e6x+C3GCeaPQvyIL5vlMu7uKgjy/8sB2Z
cKpxbqU1GqebehdgJ8qzVH8=
-----END CERTIFICATE-----