Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e32302e302f32342d3234203d3e203630373231.roa
File:                     37342e35302e32302e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          SQzEnnzMekU0PsNTYncBEwZ3zJnnCntKqO+HGHkFyL4=
Subject key identifier:   26:C1:F8:13:4E:B0:FF:98:68:48:FF:E6:12:5C:C4:D1:F5:50:3E:EF
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       52D48CC5612B9B9E358E5171F041A17272F2A482
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e32302e302f32342d3234203d3e203630373231.roa
Signing time:             Mon 28 Nov 2022 11:22:01 +0000
ROA not before:           Mon 28 Nov 2022 11:17:01 +0000
ROA not after:            Mon 27 Nov 2023 11:22:01 +0000
asID:                     60721
IP address blocks:        74.50.20.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d4:8c:c5:61:2b:9b:9e:35:8e:51:71:f0:41:a1:72:72:f2:a4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:17:01 2022 GMT
            Not After : Nov 27 11:22:01 2023 GMT
        Subject: CN=26C1F8134EB0FF986848FFE6125CC4D1F5503EEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:42:00:d9:03:39:fa:32:f9:5f:de:c2:9c:
                    e8:01:69:07:72:9a:c4:74:38:25:72:71:42:c7:9d:
                    e0:b2:c5:4c:a1:5a:6c:23:1f:e5:43:69:06:14:7e:
                    1a:44:bc:74:ec:4b:d5:cb:df:af:b5:93:e1:19:f6:
                    ac:e0:28:15:af:21:87:e9:5b:e3:43:18:61:60:68:
                    de:33:26:5b:c3:87:2b:a7:3c:d8:7d:2f:e0:c9:9b:
                    0c:64:45:9b:39:1c:ab:66:14:78:6b:74:3c:40:41:
                    af:7c:86:2f:c5:71:5e:e2:23:14:04:c8:a2:9b:f5:
                    79:93:08:e7:0d:fb:7d:cb:40:f3:16:2f:35:fd:7e:
                    1d:9c:d3:29:f8:32:d8:79:f4:ba:27:8c:8f:4c:53:
                    1c:8e:95:07:4e:d9:68:86:4f:bf:83:bd:cf:28:d9:
                    73:70:a0:42:aa:9a:65:35:2c:17:d1:3d:d5:0d:0a:
                    d7:2b:fd:1f:d2:04:57:66:8b:87:ae:d3:0e:a1:75:
                    4d:6f:9d:f4:7a:4c:c6:c9:17:25:d8:f9:2b:74:e6:
                    22:cb:c3:b6:71:18:8d:cd:54:44:ac:cd:16:13:9c:
                    7e:5f:5e:46:e4:54:b2:8c:ff:8a:22:3e:f0:6c:31:
                    39:63:07:11:45:dc:31:0f:47:2b:6f:2a:67:4e:ce:
                    e0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C1:F8:13:4E:B0:FF:98:68:48:FF:E6:12:5C:C4:D1:F5:50:3E:EF
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e32302e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:23:cc:46:db:1b:ee:11:1d:67:c5:04:12:35:5a:c7:1a:81:
         94:f5:fd:f4:67:82:6b:7c:6c:60:4b:1f:24:fe:56:f2:e3:24:
         ec:62:4d:b6:b4:6e:5b:2d:6b:d1:8c:17:05:f6:48:24:fc:40:
         1b:44:d5:7a:5a:db:73:8a:3a:9c:b0:03:2b:21:cb:8d:50:8a:
         9f:0a:8e:dc:d2:f2:96:0d:8b:66:35:f7:13:fb:30:6b:69:f7:
         69:5b:7c:04:2f:87:c5:82:c4:ff:23:97:c2:19:f2:b6:a8:72:
         b0:da:5c:ab:20:c6:60:fc:3c:53:f1:b5:71:97:53:9d:c0:9b:
         dc:23:29:51:2b:85:b1:00:7f:32:61:38:04:66:ab:e5:a5:f6:
         18:15:c6:b6:fb:38:3b:b3:b5:25:15:1b:e0:f1:58:39:5e:f6:
         56:b2:ba:26:18:64:2d:c7:d5:af:59:76:31:72:63:65:2e:27:
         a0:43:6b:81:2c:9a:ba:22:ea:5c:d9:01:d0:0e:86:e4:bc:34:
         e7:e4:dd:1c:93:86:97:53:59:25:63:be:70:6e:1f:18:ac:b0:
         a5:a9:39:6f:4a:50:52:3e:fc:4d:04:22:fa:6c:27:92:28:ca:
         2c:7a:03:69:db:2a:7c:28:3b:02:ff:47:6b:06:41:e9:97:54:
         b2:d8:c2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----