Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e33312e302f32342d3234203d3e20323131303631.roa
File:                     37342e35302e33312e302f32342d3234203d3e20323131303631.roa (raw, json)
Hash identifier:          6HBlYqPp0v1tpP0O0ypS3ZQQQq3cYxQS2Ljv6QRPV+4=
Subject key identifier:   F4:19:56:DB:4D:2E:8A:40:75:FF:24:58:39:D5:1F:A4:2A:2D:83:54
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       69D7B08F121FBF699C3A851E40714B86A96B80BB
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e33312e302f32342d3234203d3e20323131303631.roa
Signing time:             Mon 28 Nov 2022 11:21:59 +0000
ROA not before:           Mon 28 Nov 2022 11:16:59 +0000
ROA not after:            Mon 27 Nov 2023 11:21:59 +0000
asID:                     211061
IP address blocks:        74.50.31.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d7:b0:8f:12:1f:bf:69:9c:3a:85:1e:40:71:4b:86:a9:6b:80:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:59 2022 GMT
            Not After : Nov 27 11:21:59 2023 GMT
        Subject: CN=F41956DB4D2E8A4075FF245839D51FA42A2D8354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:22:3d:ae:4f:ab:d8:a3:f3:fb:b8:4e:ed:98:
                    48:59:28:05:fa:30:db:4d:bc:f9:be:f2:ba:02:d6:
                    db:b6:2b:c8:a8:f7:c4:7c:98:5f:40:78:00:49:66:
                    48:fd:31:bb:fc:93:71:2c:4d:1a:93:7b:59:2b:23:
                    68:6e:b4:1e:9c:9f:df:a9:94:a0:78:9c:51:be:f0:
                    d7:71:6c:da:49:fd:2b:8d:d5:dd:38:63:82:22:9b:
                    4a:75:f5:98:18:ca:38:49:e5:d1:2c:c1:fa:bc:26:
                    79:9d:3a:a3:63:66:86:4d:ad:10:74:8d:d6:88:72:
                    48:3b:75:6b:5d:68:25:d4:db:85:c1:81:b0:a8:85:
                    9e:e6:d5:93:9a:6e:5f:4d:fa:af:df:8f:ab:8c:4a:
                    66:68:0c:e9:40:bc:7f:f0:3f:28:43:9d:63:8e:5c:
                    90:fb:da:3f:86:b5:5c:b7:b7:d5:54:64:8c:e0:8b:
                    6d:32:f8:6a:3b:f1:c6:02:18:3b:68:a0:2b:5e:4b:
                    eb:d5:4b:df:83:6f:0c:8f:83:95:82:4a:0a:14:c7:
                    63:15:10:9b:bc:d3:b8:38:ad:c4:e8:60:11:69:7d:
                    2f:0d:09:59:4a:82:f9:cf:12:16:42:63:67:b7:91:
                    7b:25:cb:28:9f:03:42:31:91:65:b8:9e:d0:8f:5a:
                    9a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:19:56:DB:4D:2E:8A:40:75:FF:24:58:39:D5:1F:A4:2A:2D:83:54
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e33312e302f32342d3234203d3e20323131303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:9d:f8:5b:a1:66:69:af:97:02:66:a1:79:a8:99:6c:b8:69:
         a2:65:9c:84:9a:98:09:ef:13:b6:d8:66:0b:67:79:a5:c1:d6:
         a7:d6:1e:9c:c4:be:8c:8a:ea:7b:b7:50:48:fe:3d:22:bb:ee:
         38:81:29:75:a1:73:3b:53:3e:59:7c:6d:23:10:55:a1:d7:3a:
         f4:40:f0:36:24:67:71:32:bb:11:3a:4b:d2:15:62:ac:78:18:
         04:56:4d:f4:1d:76:fd:a2:8b:07:c7:67:b7:86:ae:77:3b:67:
         ba:59:ac:64:e8:e3:aa:d8:c4:72:14:e3:e8:51:e1:bb:cf:19:
         6c:5f:a5:ce:34:84:39:5b:0b:cc:eb:31:42:3e:22:4b:e5:07:
         ff:73:35:a9:4d:d0:37:00:78:31:bf:82:29:11:52:63:ff:b6:
         9c:bb:ff:7c:7e:cc:c2:b7:63:e4:a0:d6:91:df:0c:4b:da:20:
         40:4d:53:29:40:53:3a:43:2c:e0:49:82:db:d2:70:06:d5:4a:
         bf:70:b8:41:71:c7:8c:a2:1f:bb:07:57:8b:42:2c:b0:24:5c:
         4f:83:8d:67:ac:f5:67:9d:d5:6f:ff:ea:e9:bd:0c:3c:44:41:
         72:d2:1c:41:05:0f:8f:e1:2b:23:e0:24:83:7c:7a:dd:e0:3d:
         68:be:e2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----