Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e32392e302f32342d3234203d3e203630373231.roa
File:                     37342e35302e32392e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          HtRIx+goRdHGspSPFOxqsvwM8ruu6EvBzzWCyXLhUdI=
Subject key identifier:   95:AE:A1:1B:CB:7D:52:D8:AB:24:FA:85:B3:20:C5:EE:30:62:97:D8
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       3BA8D4083AD32C635B9E5BFF169F16F3F24E95A3
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e32392e302f32342d3234203d3e203630373231.roa
Signing time:             Mon 28 Nov 2022 11:21:59 +0000
ROA not before:           Mon 28 Nov 2022 11:16:59 +0000
ROA not after:            Mon 27 Nov 2023 11:21:59 +0000
asID:                     60721
IP address blocks:        74.50.29.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a8:d4:08:3a:d3:2c:63:5b:9e:5b:ff:16:9f:16:f3:f2:4e:95:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:59 2022 GMT
            Not After : Nov 27 11:21:59 2023 GMT
        Subject: CN=95AEA11BCB7D52D8AB24FA85B320C5EE306297D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3f:0f:42:b2:30:02:19:cf:34:af:23:70:0f:
                    da:33:0a:c8:90:3d:fd:c6:99:ab:cd:9b:ee:9d:5b:
                    93:41:a5:6d:17:89:d5:7b:17:1b:88:a8:aa:40:6e:
                    d9:a1:63:e8:cb:ba:b6:dd:da:21:82:d3:c6:17:7f:
                    bd:76:0d:7d:f0:fc:b4:a0:60:36:95:59:e3:f4:05:
                    0c:65:cc:1f:57:fc:3f:74:ca:a7:af:7c:e2:dd:22:
                    75:d3:c1:16:8c:f2:fb:1a:67:1d:06:31:bd:2c:d6:
                    af:72:c6:84:b5:e9:d0:cc:59:c0:d8:f3:41:9a:4a:
                    81:a3:aa:a6:b3:95:18:04:54:3b:b4:9d:b6:79:d7:
                    46:ba:0d:14:2a:35:6f:0a:9f:83:17:f6:4c:20:74:
                    10:15:a6:70:be:14:26:79:a9:ef:01:75:64:06:ae:
                    af:c5:5f:d9:2d:d1:06:72:90:60:70:8a:7c:2b:23:
                    21:ab:59:3b:fa:51:bd:a4:24:31:c6:87:88:3e:d0:
                    c8:fe:7d:43:20:f2:58:c7:88:20:ab:70:a8:26:ce:
                    fb:f1:40:a8:05:58:6d:6b:66:60:7c:16:e4:8b:ef:
                    46:c0:8e:3a:9e:33:d0:67:5d:56:92:30:5a:a4:d3:
                    80:c7:ab:7f:09:66:f4:a9:87:f2:55:b3:87:dd:af:
                    85:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AE:A1:1B:CB:7D:52:D8:AB:24:FA:85:B3:20:C5:EE:30:62:97:D8
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e32392e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:0a:f6:92:16:35:7d:dd:32:28:a4:d8:e3:1b:af:36:ee:24:
         3c:bb:67:e3:ef:57:99:f9:54:74:c0:30:85:23:60:57:26:ab:
         b6:71:b4:eb:12:dd:29:18:05:06:9a:0d:23:8b:a4:25:b2:9e:
         9e:a3:29:51:85:b6:e7:8b:74:14:34:6a:32:5a:00:d6:bd:b1:
         7e:fe:1b:aa:42:76:28:63:58:45:03:19:25:83:0c:9d:87:c5:
         d0:04:03:74:a6:3e:ad:2a:46:82:6d:75:71:2a:7e:b6:64:21:
         8b:d0:f4:65:42:db:83:38:04:5a:30:51:e8:23:25:54:e4:20:
         40:7b:75:7a:96:46:65:54:98:c4:38:4d:1e:77:3d:be:fc:9d:
         1f:5e:cd:9e:31:87:54:a8:bd:01:a4:08:0d:5a:fc:f4:ad:b6:
         04:3e:05:f7:a6:cb:fc:73:a3:85:85:ce:47:9a:e2:32:70:84:
         ca:23:85:cd:5e:59:6e:9f:00:ec:86:29:6a:03:23:b1:99:49:
         9e:78:11:1c:f3:50:d6:87:a1:d4:86:12:fb:8a:d8:f5:5e:2d:
         54:29:ba:98:d6:45:45:00:b3:2e:0f:56:92:b1:68:18:35:bd:
         bd:a5:05:16:0b:24:75:55:52:51:23:61:d8:80:6e:09:35:0d:
         69:b9:38:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----