Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e342e302f32342d3234203d3e203439393939.roa
File:                     37342e35302e342e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          O1E2APPi5UnQw/c5Hcpr9L0CMIyq10VEGYgXnq0Dvbg=
Subject key identifier:   58:AE:AF:3E:40:7E:13:17:3E:03:42:7E:61:FE:01:25:04:1B:E8:8E
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       23F6FC2C93CA8F9C265A6DDB79E6242FBF4EC04A
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e342e302f32342d3234203d3e203439393939.roa
Signing time:             Wed 07 Dec 2022 22:16:14 +0000
ROA not before:           Wed 07 Dec 2022 22:11:14 +0000
ROA not after:            Wed 06 Dec 2023 22:16:14 +0000
asID:                     49999
IP address blocks:        74.50.4.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f6:fc:2c:93:ca:8f:9c:26:5a:6d:db:79:e6:24:2f:bf:4e:c0:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  7 22:11:14 2022 GMT
            Not After : Dec  6 22:16:14 2023 GMT
        Subject: CN=58AEAF3E407E13173E03427E61FE0125041BE88E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0f:ef:af:ea:f0:66:a9:ba:a5:fd:8e:32:0c:
                    6c:56:be:7c:7c:6b:c7:02:90:2e:00:1f:05:2d:2a:
                    7c:8c:8c:85:df:df:56:2a:79:64:00:88:6f:b0:3e:
                    d0:e0:9b:54:c7:cc:63:fa:b4:5e:cf:b9:de:ff:74:
                    ad:7c:e0:ad:71:3f:1e:b8:f4:12:27:2f:d6:1b:55:
                    e7:67:3b:1c:1a:86:29:3b:97:a9:e1:31:22:96:77:
                    4f:21:b3:fb:4b:58:00:2a:dc:01:7b:fc:c2:56:d7:
                    d0:69:a7:f2:9f:b3:e1:52:f3:66:60:ab:56:79:2e:
                    a0:19:6f:5a:e8:ec:26:5b:32:78:6a:e0:87:43:fc:
                    fa:59:1f:d6:4c:e8:77:40:e3:c4:5f:73:53:11:d3:
                    4d:26:95:05:71:d1:12:88:ef:33:eb:72:09:dc:78:
                    1e:a3:a4:b6:39:68:dc:d6:76:19:47:2d:d8:3c:9d:
                    13:93:07:ac:95:0c:32:f8:0c:39:ba:32:7b:b6:dc:
                    8c:b2:24:35:61:76:1e:73:cc:51:b4:f1:ef:ee:dd:
                    28:1f:97:ed:43:8a:d3:a7:b4:43:ff:0d:8f:33:28:
                    33:51:2f:9e:fc:91:50:fa:20:dd:b2:a3:9b:b3:60:
                    63:41:28:45:c6:c0:e2:3e:35:8c:2e:65:55:a3:28:
                    29:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AE:AF:3E:40:7E:13:17:3E:03:42:7E:61:FE:01:25:04:1B:E8:8E
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e342e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:79:d1:ab:fa:19:7e:77:b8:be:34:ce:c3:3d:66:0b:97:b0:
         33:53:14:14:0a:3b:dc:45:a2:3c:e5:c2:fb:8e:97:7c:e7:ae:
         d6:ba:4b:35:4a:c6:2a:a5:ff:74:ca:4c:d7:22:c4:b5:80:23:
         af:41:e2:a1:21:6d:89:a1:fb:fa:ad:d5:b4:1c:d0:5e:9f:04:
         5a:74:ee:bb:6d:d0:ff:29:cd:19:54:f5:2a:34:8f:d1:6c:85:
         4d:60:ca:ed:27:5d:f5:fc:b2:0b:8d:cb:28:35:5b:34:35:f0:
         db:54:75:5d:d0:b1:d4:5f:f4:31:80:65:9f:3c:34:7f:62:c7:
         9f:7b:fc:33:dc:72:49:d1:fe:29:85:1c:61:08:53:d2:19:ef:
         37:1e:97:88:d4:4e:dd:49:a8:74:40:c6:30:4e:dd:71:1e:09:
         1a:8a:2a:f1:b1:a2:b8:e4:42:9a:86:2a:6f:94:7e:77:93:b1:
         ff:a0:92:91:cf:f6:dd:4d:eb:63:3f:0c:37:8f:f2:41:74:ce:
         0b:f2:cc:7c:7b:2c:93:87:ef:b0:35:1a:bf:9f:9d:68:18:40:
         6e:0b:c5:8e:a3:57:80:eb:04:7d:84:34:6b:10:01:79:60:17:
         6b:97:95:cd:33:d9:8c:d5:1c:c9:f2:f1:5b:fa:c3:ba:f5:75:
         6c:a6:e6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----