Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e31362e302f32342d3234203d3e203630373231.roa
File:                     37342e35302e31362e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          RSGGIwDYYdCQHMcXmmkCLJYdlC8XsogJEP2JOjRWmpc=
Subject key identifier:   B7:C5:C6:00:C0:AB:72:27:58:28:AF:6B:F0:AB:EB:9A:23:FA:06:AC
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       0459D3461BE62595E7BA12EB3BADEF0F466B90C9
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e31362e302f32342d3234203d3e203630373231.roa
Signing time:             Mon 28 Nov 2022 11:22:01 +0000
ROA not before:           Mon 28 Nov 2022 11:17:01 +0000
ROA not after:            Mon 27 Nov 2023 11:22:01 +0000
asID:                     60721
IP address blocks:        74.50.16.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:59:d3:46:1b:e6:25:95:e7:ba:12:eb:3b:ad:ef:0f:46:6b:90:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:17:01 2022 GMT
            Not After : Nov 27 11:22:01 2023 GMT
        Subject: CN=B7C5C600C0AB72275828AF6BF0ABEB9A23FA06AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9a:24:5f:90:b6:a6:8b:9f:a2:ea:88:38:7c:
                    46:3a:b7:f0:18:80:b5:fe:d5:b9:5a:02:9c:e6:73:
                    99:fd:9e:20:5b:d2:da:be:ec:ea:bb:cf:0c:f0:d0:
                    28:6c:4f:63:4f:00:24:33:47:4c:7b:7f:f3:c3:0e:
                    a2:33:4f:bc:ad:13:a6:84:22:bc:14:31:93:01:1e:
                    4a:9b:e4:ac:33:05:9e:ae:19:73:45:23:da:18:21:
                    a8:11:0e:fd:62:96:10:d2:c3:ce:23:3a:1e:05:1a:
                    43:6d:c1:c7:13:9e:00:29:17:19:25:3c:64:92:3b:
                    2f:52:7f:c6:07:38:3b:67:30:f0:95:91:f5:ea:dc:
                    a8:41:39:4d:a4:3a:79:86:48:18:f8:12:45:28:bd:
                    3c:ae:93:11:d0:25:99:76:16:6e:7a:da:4a:fc:3f:
                    1c:41:47:c0:58:c4:aa:b0:a6:25:0f:92:4e:2f:c6:
                    49:dc:41:a5:10:21:8b:7a:96:b7:60:cd:9b:bf:a6:
                    36:58:3b:05:da:0f:2f:77:a6:e4:2f:f2:07:4a:8a:
                    7e:2c:8e:94:90:65:a0:14:cb:2d:ab:42:56:c3:5a:
                    c4:83:6f:52:79:12:72:a2:1a:46:04:b9:39:3c:ff:
                    e4:16:df:ca:28:70:70:d2:9f:e4:f2:57:13:23:8e:
                    1d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C5:C6:00:C0:AB:72:27:58:28:AF:6B:F0:AB:EB:9A:23:FA:06:AC
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e31362e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:d2:9c:b5:3f:14:ce:63:c0:ba:61:49:79:04:62:26:2e:01:
         65:da:70:71:a9:cd:c5:9c:ee:fc:67:95:5d:05:c0:4f:09:0e:
         8c:13:f0:97:73:30:05:fa:d5:f6:ea:64:c8:fc:bf:97:ef:78:
         e3:79:8d:5e:13:51:fe:66:68:3b:7f:1b:2d:0f:3b:0a:04:07:
         e9:7b:af:df:82:1e:ed:c5:b1:7c:14:b2:88:3b:fd:d1:22:14:
         bc:10:7a:7d:82:fb:f4:7b:dc:82:3d:5c:e8:23:71:e9:9e:21:
         70:34:d9:19:bd:fe:68:82:aa:9d:d0:49:a9:25:77:2b:37:35:
         17:12:9d:44:ff:fb:b6:ae:7f:68:77:2a:07:88:ab:09:13:60:
         9f:3f:ca:fd:fc:0b:3e:d1:23:ff:ad:b3:7a:87:0a:ac:eb:57:
         19:28:53:3a:ba:bc:1c:39:8e:28:ad:d6:df:17:e2:2f:f0:3e:
         30:b5:df:a1:65:94:a9:9c:5c:ad:14:30:c3:34:e7:be:af:0b:
         db:93:df:be:d9:8f:7a:d7:90:3b:09:eb:b7:ed:bc:3e:8a:ef:
         8c:c1:91:9b:65:35:a4:e5:8a:19:cd:cb:b4:3f:a4:ec:3c:1e:
         c9:16:ac:91:78:9d:dd:4b:42:6a:01:2b:84:46:a9:41:b1:37:
         9c:e9:ef:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----