Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e342e302f32342d3234203d3e20323039333731.roa
File:                     37342e35302e342e302f32342d3234203d3e20323039333731.roa (raw, json)
Hash identifier:          N670jFZTNOwwl+E4JRO6WpWesD2cbrZfbSrIanuB9Uk=
Subject key identifier:   1F:FF:6C:F5:EE:B5:24:0B:3F:69:E7:4B:76:95:57:BE:21:7C:6C:F1
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7411E8280185FD490F2F6C305809A10F581D75D3
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e342e302f32342d3234203d3e20323039333731.roa
Signing time:             Mon 28 Nov 2022 11:21:58 +0000
ROA not before:           Mon 28 Nov 2022 11:16:58 +0000
ROA not after:            Mon 27 Nov 2023 11:21:58 +0000
asID:                     209371
IP address blocks:        74.50.4.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:11:e8:28:01:85:fd:49:0f:2f:6c:30:58:09:a1:0f:58:1d:75:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:58 2022 GMT
            Not After : Nov 27 11:21:58 2023 GMT
        Subject: CN=1FFF6CF5EEB5240B3F69E74B769557BE217C6CF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7e:c6:e6:f9:6e:d1:72:7d:e7:40:e5:0f:10:
                    8d:74:c3:0e:41:1d:09:a4:dd:ca:1c:b1:b0:67:33:
                    bd:de:58:b4:92:9c:c3:fe:b1:95:7c:70:e0:e2:49:
                    8b:59:55:b0:f9:9a:0d:4c:35:f2:0e:55:30:6d:9b:
                    3b:9c:e4:b8:c8:ef:94:fa:86:b1:df:c2:7c:7e:53:
                    c5:51:e8:6b:42:e7:6d:dc:30:7e:94:28:71:61:b7:
                    57:75:67:70:61:dd:3c:d4:16:8d:a7:7f:80:1b:7a:
                    3d:de:d0:32:de:b2:ed:55:df:83:1f:50:21:a5:ae:
                    05:78:e4:7d:68:9e:a5:8a:6c:7a:9b:79:5e:f7:42:
                    dd:55:1a:39:3d:48:dc:73:80:bc:e1:15:67:61:41:
                    36:2b:61:f9:c8:6c:82:be:a2:7e:88:42:1d:d8:34:
                    53:f8:10:d9:d1:b9:d3:48:18:40:cc:f7:a1:f2:6a:
                    87:0a:89:32:9c:fd:0f:2b:51:20:c8:d9:08:d2:f1:
                    1d:85:a8:aa:9a:9d:fe:0c:af:41:80:18:99:04:ab:
                    db:72:2e:f1:11:76:35:99:f1:b2:21:3d:46:b8:ca:
                    3f:27:95:aa:e8:5b:05:f5:f8:a5:42:86:e8:bb:dc:
                    02:31:18:64:a0:da:97:0b:e7:2f:17:37:46:8d:da:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FF:6C:F5:EE:B5:24:0B:3F:69:E7:4B:76:95:57:BE:21:7C:6C:F1
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e342e302f32342d3234203d3e20323039333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:b4:f2:2e:06:d2:4b:62:d5:30:cf:2c:ee:3b:1e:b7:74:a3:
         b4:88:af:30:17:ee:82:9b:1a:53:68:ee:25:f2:eb:81:de:55:
         f6:a2:ef:3d:4d:5a:a0:bb:f1:d1:14:6a:dc:88:4b:60:2c:36:
         88:09:52:2a:5e:e2:fa:b0:05:15:1d:5b:35:24:3e:72:91:1a:
         36:88:63:c4:28:77:2d:5f:72:b6:bf:e6:ed:52:8f:53:67:dc:
         cb:8a:3d:b3:75:90:b9:2c:12:f7:b5:2d:a4:20:b7:71:ee:5c:
         98:3a:6a:a0:07:c3:a3:9a:b2:b7:d6:bb:ac:c7:bd:c7:32:7e:
         6c:f2:ec:9b:9b:34:2b:10:d7:f1:cc:2e:73:89:0c:33:fe:ab:
         aa:a0:24:a8:f9:29:60:05:f4:a3:bf:74:76:1a:fc:a9:d4:91:
         ca:d3:19:24:ba:02:68:c2:7e:e8:34:b9:d1:25:ef:43:5f:65:
         e2:f3:eb:e8:bf:28:64:49:ac:12:d5:cf:e2:a5:29:ec:d9:51:
         d0:ce:fe:51:18:7d:ef:6b:d0:ed:39:ed:45:7f:58:3a:4a:ab:
         e4:82:42:1f:19:28:cb:88:f3:f5:40:7e:71:e0:24:95:b5:ec:
         43:23:a6:10:38:a2:1b:a9:90:52:5f:20:d8:6d:06:ad:3f:10:
         e0:7e:27:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----