Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e32332e302f32342d3234203d3e203439393939.roa
File:                     37342e35302e32332e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          HWgm6mZ38twXnN49tdlAdk1iBVOvfWIiFr0dEwX5kws=
Subject key identifier:   05:9C:80:33:D3:7E:4B:F4:C6:57:AF:6E:83:1C:E4:7A:22:62:2A:67
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1D1BA3E2EB521BE0C21FEC588111DEFE12C5C68D
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e32332e302f32342d3234203d3e203439393939.roa
Signing time:             Mon 28 Nov 2022 11:22:00 +0000
ROA not before:           Mon 28 Nov 2022 11:17:00 +0000
ROA not after:            Mon 27 Nov 2023 11:22:00 +0000
asID:                     49999
IP address blocks:        74.50.23.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:1b:a3:e2:eb:52:1b:e0:c2:1f:ec:58:81:11:de:fe:12:c5:c6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:17:00 2022 GMT
            Not After : Nov 27 11:22:00 2023 GMT
        Subject: CN=059C8033D37E4BF4C657AF6E831CE47A22622A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:15:05:3b:c1:e6:03:ac:ea:b7:eb:e9:67:2f:
                    e2:b5:80:7c:3c:26:94:74:72:9e:60:61:55:80:74:
                    54:0c:8b:f4:71:7e:48:4b:a2:01:aa:ce:6b:33:c1:
                    3e:10:0f:e3:96:51:cc:59:71:6e:d8:9a:b1:10:4b:
                    75:13:32:d2:e1:75:d8:6e:09:53:75:59:8e:7a:1c:
                    7c:c9:a6:72:fc:4d:60:21:3e:41:39:09:81:b0:08:
                    33:77:d1:a2:cb:46:cb:d1:af:d7:17:73:0e:16:1f:
                    3c:54:17:b5:9b:82:f7:52:cb:71:38:30:6d:21:6d:
                    23:99:77:ab:74:2b:41:e1:91:43:3e:a0:94:c0:18:
                    f5:41:a7:e0:e9:79:20:88:ad:d1:45:c4:5d:86:77:
                    5f:11:49:c3:0c:a9:0b:c0:27:46:9c:8d:cb:7e:3b:
                    99:07:69:e4:14:30:9c:f3:4d:b7:21:02:a9:37:fb:
                    04:57:5f:ef:f5:7f:10:dc:d0:74:d7:d1:d0:18:2f:
                    9e:33:a6:cf:52:bb:1f:12:f4:20:a4:70:0d:81:9a:
                    54:08:94:5c:39:b1:7f:4e:81:d8:10:03:91:0a:f1:
                    81:a1:ba:f9:75:04:33:78:73:76:af:ed:5f:ec:89:
                    52:56:18:ef:1f:ba:9c:6b:51:4a:a3:dc:a1:07:67:
                    6a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9C:80:33:D3:7E:4B:F4:C6:57:AF:6E:83:1C:E4:7A:22:62:2A:67
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e32332e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:d8:6d:6f:c2:84:a7:24:91:a9:46:0e:09:6b:1f:76:57:b1:
         c3:99:c4:5a:9f:db:3d:0d:ae:b9:4f:96:b5:e8:f9:f5:fe:91:
         5f:a9:38:37:fd:91:14:f0:ac:a8:b6:05:2a:e7:49:53:af:7e:
         8e:75:47:d2:1f:50:f7:9d:af:4b:b9:f5:50:a5:c4:cc:6f:72:
         6b:a3:44:0d:45:36:8d:f4:cc:a3:2e:dc:7e:c7:88:4e:78:18:
         a5:e6:9a:d6:29:7d:c1:52:18:9c:ab:d9:f8:5a:c3:67:d1:d8:
         5a:91:24:fc:1b:7a:48:7e:d8:92:a6:8a:25:10:7c:e3:aa:9b:
         fb:80:6e:67:0d:1b:a3:6b:37:61:f5:7c:1c:00:45:12:f1:ab:
         eb:fa:1b:86:ab:7e:1d:76:44:ff:c6:12:66:cd:a6:4d:1b:9b:
         35:0b:6f:c9:ec:f2:70:57:5c:c9:43:3c:b9:69:ae:90:3a:6a:
         ab:99:0e:fd:55:1e:89:66:ca:e9:72:53:30:89:6e:39:79:a3:
         fc:16:92:68:a2:ff:9a:44:84:b4:50:74:eb:f2:fb:78:1b:bd:
         3c:42:ba:e8:a9:91:6d:35:1e:fd:9a:78:5d:6b:e8:69:72:60:
         d4:5f:b7:55:c6:8b:37:c5:c2:aa:17:20:70:3e:b3:bf:3a:15:
         84:57:58:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----