Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e33302e302f32342d3234203d3e203630373231.roa
File:                     37342e35302e33302e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          FHF1muCV+8VBXmAqxM81Uaj+NGve2FRn/L1Vx30cFSc=
Subject key identifier:   0C:C1:34:91:43:81:DF:D7:5E:86:AA:56:14:B3:8E:91:DB:EF:63:8C
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       749338A51AE6166A28288DF83BD6BD0F09E5DA5C
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e33302e302f32342d3234203d3e203630373231.roa
Signing time:             Mon 28 Nov 2022 11:22:02 +0000
ROA not before:           Mon 28 Nov 2022 11:17:02 +0000
ROA not after:            Mon 27 Nov 2023 11:22:02 +0000
asID:                     60721
IP address blocks:        74.50.30.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:93:38:a5:1a:e6:16:6a:28:28:8d:f8:3b:d6:bd:0f:09:e5:da:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:17:02 2022 GMT
            Not After : Nov 27 11:22:02 2023 GMT
        Subject: CN=0CC134914381DFD75E86AA5614B38E91DBEF638C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d0:75:c2:49:7e:e9:90:55:a8:a6:85:e5:3e:
                    4a:da:08:d9:b3:5e:65:9f:5c:f5:b6:99:c3:95:31:
                    9e:29:b4:e3:0f:61:45:0b:1f:b9:f7:c1:9f:b9:ad:
                    88:df:dc:e0:fb:36:56:30:2f:8d:15:d8:87:a7:80:
                    2d:c6:0e:cb:dd:20:e0:5b:cc:79:d8:f4:01:a0:8a:
                    bc:7a:89:b9:4a:9d:e1:cf:2c:80:f8:20:c6:6a:3f:
                    0c:f5:d2:0e:b6:d3:4a:84:34:88:ab:89:92:c0:f9:
                    3f:3f:92:b0:6e:0a:e6:fc:b0:bf:60:93:29:68:b1:
                    f7:fd:5e:07:36:f7:d3:79:a6:f9:86:fd:b2:b2:bb:
                    e4:43:6b:3b:cb:9d:1a:0d:fe:b0:b7:4b:95:1f:eb:
                    e3:cd:0c:37:0e:3d:8e:6c:91:fc:69:f4:71:d7:aa:
                    be:fb:6d:e4:05:d2:7d:c0:9e:22:07:94:b6:6d:27:
                    21:d5:26:63:80:af:ad:0b:e9:86:40:67:0a:42:1d:
                    3c:ab:e9:51:f3:0d:6c:f2:aa:3e:e1:16:0c:da:1c:
                    c6:f8:44:e6:12:69:33:3d:80:e2:08:d0:3e:78:72:
                    54:4d:eb:5d:28:f3:75:6f:f2:38:49:bf:b0:d3:ee:
                    7a:bb:3b:03:a4:c9:9d:51:85:fa:49:92:40:55:6b:
                    c5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C1:34:91:43:81:DF:D7:5E:86:AA:56:14:B3:8E:91:DB:EF:63:8C
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e33302e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:d5:42:66:88:4e:8d:a0:17:59:74:12:5b:15:0b:8f:de:bb:
         13:98:b3:0b:5e:05:9e:77:b2:10:d8:a9:a0:93:23:6f:bd:98:
         d5:c1:e2:38:9f:d2:f3:07:4d:72:3e:15:4b:29:0b:b3:a0:94:
         95:9b:ae:66:86:02:7b:18:d2:6d:85:c2:4d:84:1c:7c:5c:cd:
         0c:57:7c:4e:2a:0f:cc:a4:5c:a7:e2:4b:7f:7a:d8:fb:7d:37:
         b4:d5:43:31:28:12:77:a4:0b:d9:4f:12:57:cc:bb:5a:a4:90:
         55:15:b3:e4:93:ea:0f:3d:21:00:07:9e:49:21:e0:46:4b:bd:
         00:5b:52:74:52:4c:b0:eb:00:41:d2:80:e2:5e:98:ed:b8:08:
         02:41:a5:f1:09:2e:8e:bb:f1:e9:6b:34:7e:91:9f:b9:47:98:
         90:f8:a0:ed:44:51:70:cb:9f:41:ec:a3:6d:1c:2e:df:19:d8:
         5c:a6:dd:21:79:cc:6c:f2:22:a7:b6:2e:64:a4:66:9c:09:f6:
         04:f3:78:59:71:ac:7e:36:7b:1b:be:bc:80:1a:54:e9:a0:9a:
         63:18:cf:0a:e4:39:5f:d7:ca:02:d4:28:27:2c:c8:f5:55:9f:
         1d:9f:40:6c:b8:20:c6:ea:78:68:56:d8:d0:a1:49:6c:eb:0d:
         88:e0:7a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----