Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e31382e302f32342d3234203d3e203631313338.roa
File:                     37342e35302e31382e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          MCd4EvHTA1C2idZDR2izgBcE19Z0/8SmKDxa2adqX3s=
Subject key identifier:   37:D9:7C:77:0B:56:9B:A2:D7:2C:CF:7C:C5:68:61:63:F4:7E:AC:10
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2182FC41A3C9D0F14C496D80EE0D8DE5910E5947
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e31382e302f32342d3234203d3e203631313338.roa
Signing time:             Wed 07 Dec 2022 15:03:02 +0000
ROA not before:           Wed 07 Dec 2022 14:58:02 +0000
ROA not after:            Wed 06 Dec 2023 15:03:02 +0000
asID:                     61138
IP address blocks:        74.50.18.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:82:fc:41:a3:c9:d0:f1:4c:49:6d:80:ee:0d:8d:e5:91:0e:59:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  7 14:58:02 2022 GMT
            Not After : Dec  6 15:03:02 2023 GMT
        Subject: CN=37D97C770B569BA2D72CCF7CC5686163F47EAC10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:bf:23:35:41:44:f0:df:e8:3f:01:86:57:
                    2a:8f:84:6e:95:8f:e6:3a:18:c9:6f:41:0c:ce:90:
                    e3:1c:2d:33:0b:28:6c:a1:69:4a:2e:b0:2d:c4:d2:
                    3a:a3:0d:a4:c8:5a:11:77:97:b5:f6:3e:6b:9d:b7:
                    44:11:e6:f6:d1:49:6b:e4:18:db:ab:78:77:1d:03:
                    b4:57:07:fb:c8:0c:61:cd:68:8f:2e:49:d7:8b:57:
                    4b:aa:df:c5:09:69:ff:bb:5d:a8:27:71:67:65:06:
                    55:8c:83:07:6a:9e:c4:79:1f:39:d2:de:d7:08:bb:
                    d8:78:34:25:dd:93:09:eb:96:b6:b7:bf:5a:4e:cd:
                    e1:91:c8:0f:9d:52:06:81:af:63:98:b8:c2:d7:b7:
                    ed:61:c2:36:97:66:fe:41:81:2e:e1:c4:0f:9f:53:
                    85:e3:16:5b:e5:f9:63:6d:fb:ca:cd:c6:9c:92:63:
                    ed:f5:36:36:e7:47:e9:b0:2e:9c:89:87:4f:eb:ef:
                    00:8a:2c:60:59:e8:3d:93:85:42:6b:96:db:6c:87:
                    b5:a7:f0:4e:69:6f:a2:c7:6e:7c:ef:ef:69:15:e0:
                    ca:ea:c5:45:d5:42:2c:03:dc:96:51:32:4b:17:c3:
                    59:7f:71:c9:c1:db:7c:58:30:15:58:03:94:09:f3:
                    03:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D9:7C:77:0B:56:9B:A2:D7:2C:CF:7C:C5:68:61:63:F4:7E:AC:10
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e31382e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:9e:ea:a0:06:e5:be:8b:60:0f:6b:31:dc:8f:0e:2b:c5:29:
         45:ea:ac:c0:93:b5:b2:06:3d:79:52:af:42:99:e0:08:81:ac:
         f3:03:c8:d8:e3:92:bb:fb:0a:6c:51:eb:9b:ad:89:0d:31:28:
         59:80:29:a8:96:51:34:7a:3c:a5:ed:26:f9:19:1e:4e:b6:34:
         14:a4:24:93:b8:1d:40:76:e6:18:5a:47:e9:98:53:fc:f8:89:
         66:e7:b6:5a:83:14:f1:38:51:0e:63:a2:46:6c:6a:55:58:34:
         af:17:91:9d:da:72:c5:bb:f9:3d:9a:e4:d9:73:ec:4c:24:59:
         c3:f3:2c:c2:f1:26:3c:3e:31:2e:a2:f5:5d:04:85:62:02:16:
         a9:e8:8e:df:af:1a:46:94:28:f7:a6:ae:26:7c:8e:c0:0f:b2:
         12:ea:58:42:ee:b1:6e:bd:c3:4d:2d:d8:45:45:71:f3:f0:f2:
         b1:60:96:a9:7d:a4:a8:0f:86:6c:f6:17:ea:87:f9:e8:46:37:
         b7:2e:68:d2:81:77:f2:52:b5:be:e3:ab:d9:c7:82:8c:4a:4d:
         f8:86:f5:8c:f2:a5:f4:04:ea:3b:6e:91:6c:5d:a0:ae:91:43:
         ed:84:6b:48:78:1a:83:20:2d:92:a6:0e:9e:ae:71:1b:6f:e8:
         d6:34:3d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----