Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e362e302f32342d3234203d3e203631333137.roa
File:                     37342e35302e362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          +0TblkhNOsVta0UxfB3NaTxpN+gZNvoZ3Sbb5gem1Qw=
Subject key identifier:   39:C8:F9:EC:EE:9D:A3:EB:2A:C3:EF:91:B9:5C:76:4E:F1:C1:5A:67
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1F91429328AB4DE266F34A36F2F0486F296C8F8F
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e362e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 28 Nov 2022 11:22:00 +0000
ROA not before:           Mon 28 Nov 2022 11:17:00 +0000
ROA not after:            Mon 27 Nov 2023 11:22:00 +0000
asID:                     61317
IP address blocks:        74.50.6.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:91:42:93:28:ab:4d:e2:66:f3:4a:36:f2:f0:48:6f:29:6c:8f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:17:00 2022 GMT
            Not After : Nov 27 11:22:00 2023 GMT
        Subject: CN=39C8F9ECEE9DA3EB2AC3EF91B95C764EF1C15A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3e:92:16:85:cc:b4:3a:db:c0:9d:f5:44:06:
                    d2:de:77:93:15:5e:c7:aa:94:d9:60:98:d3:34:17:
                    bc:86:9a:95:5e:4a:09:d8:fd:cb:8c:b4:84:12:bd:
                    44:97:39:51:9d:17:1b:30:cd:68:78:67:c6:73:96:
                    b5:6e:6f:09:34:f1:53:96:7f:0d:10:29:e6:60:9e:
                    95:14:c1:09:90:05:74:dd:df:16:cd:b6:18:d2:d1:
                    15:08:12:33:b8:d9:16:f1:bf:d7:37:bb:d5:8e:f1:
                    1b:7b:f9:1c:40:05:84:b9:ba:4f:98:82:4e:0d:a7:
                    8d:6b:c0:7b:1a:56:a4:5a:cd:f3:8f:6b:0b:cd:8f:
                    86:97:f8:16:ca:96:0f:55:63:fd:e4:1f:93:d0:53:
                    45:f0:cb:d3:db:72:e8:c2:c5:79:2d:7f:11:3d:d8:
                    43:64:ea:58:ea:9b:bc:7c:5d:bd:2f:ba:fb:ab:9b:
                    50:32:60:bd:de:69:ed:fe:e8:1f:e2:ec:a5:7e:c6:
                    1c:bf:fc:44:d7:eb:62:42:96:a6:ec:cc:f5:ed:d1:
                    45:32:30:7b:76:45:9e:de:57:a7:c7:ce:8f:e6:be:
                    c1:5b:c2:be:45:d8:19:9e:f2:b6:70:83:c3:e9:c0:
                    14:e8:47:e3:f2:8d:6e:d4:da:6e:cd:21:89:b2:92:
                    a4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C8:F9:EC:EE:9D:A3:EB:2A:C3:EF:91:B9:5C:76:4E:F1:C1:5A:67
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:9c:64:68:95:45:91:8f:17:7e:c8:88:f8:33:d8:94:99:2c:
         49:68:2f:4e:f8:9c:d0:49:27:35:79:9b:16:ff:47:c2:38:c2:
         2a:9b:37:a6:f9:71:ba:80:41:5c:1e:41:1b:22:9f:77:00:22:
         ba:ed:57:d9:44:9d:ac:b3:3b:d6:2f:e9:cb:c0:a1:d4:99:ad:
         38:30:be:55:cc:b0:0b:b5:ba:e2:a2:97:34:81:1f:f3:1d:07:
         d5:30:b3:d1:a8:8e:b2:ac:dd:56:e0:ab:1e:53:20:ba:11:79:
         b7:7a:9b:d7:e0:4e:90:4f:81:f8:24:14:0f:fb:38:fc:8f:c7:
         ac:41:7c:92:14:0b:12:23:a0:37:79:5d:84:c2:38:10:9c:06:
         29:36:40:6b:c6:8b:6f:1b:76:23:47:37:5c:2f:64:8b:1b:60:
         e6:b1:e9:63:76:9b:a3:85:31:4a:b1:ea:40:7c:58:85:e7:a6:
         b4:78:d2:fd:3f:f6:11:37:2e:91:96:a7:d5:13:55:48:ab:da:
         d8:b0:15:88:67:e8:74:a5:e2:2d:e8:89:a1:a3:02:90:67:be:
         00:d8:72:3b:cb:1c:28:b9:fd:c3:51:66:7a:26:dc:c5:0f:9a:
         d8:46:11:13:11:0a:54:e9:3b:f9:f5:b1:50:25:e5:09:f0:dd:
         a5:02:47:26
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUH5FCkyirTeJm80o28vBIbylsj48wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjIxMTI4MTExNzAwWhcNMjMxMTI3MTEyMjAw
WjAzMTEwLwYDVQQDEygzOUM4RjlFQ0VFOURBM0VCMkFDM0VGOTFCOTVDNzY0RUYx
QzE1QTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz6SFoXMtDrb
wJ31RAbS3neTFV7HqpTZYJjTNBe8hpqVXkoJ2P3LjLSEEr1ElzlRnRcbMM1oeGfG
c5a1bm8JNPFTln8NECnmYJ6VFMEJkAV03d8WzbYY0tEVCBIzuNkW8b/XN7vVjvEb
e/kcQAWEubpPmIJODaeNa8B7GlakWs3zj2sLzY+Gl/gWypYPVWP95B+T0FNF8MvT
23LowsV5LX8RPdhDZOpY6pu8fF29L7r7q5tQMmC93mnt/ugf4uylfsYcv/xE1+ti
Qpam7Mz17dFFMjB7dkWe3lenx86P5r7BW8K+RdgZnvK2cIPD6cAU6Efj8o1u1Npu
zSGJspKk5QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFDnI+ezunaPrKsPvkblcdk7x
wVpnMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEz
ZWVhNDkwZDMzLzEvMzczNDJlMzUzMDJlMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNl
MjAzNjMxMzMzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjIGMA0GCSqGSIb3DQEBCwUAA4IBAQBz
nGRolUWRjxd+yIj4M9iUmSxJaC9O+JzQSSc1eZsW/0fCOMIqmzem+XG6gEFcHkEb
Ip93ACK67VfZRJ2sszvWL+nLwKHUma04ML5VzLALtbriopc0gR/zHQfVMLPRqI6y
rN1W4KseUyC6EXm3epvX4E6QT4H4JBQP+zj8j8esQXySFAsSI6A3eV2EwjgQnAYp
NkBrxotvG3YjRzdcL2SLG2DmseljdpujhTFKsepAfFiF56a0eNL9P/YRNy6RlqfV
E1VIq9rYsBWIZ+h0peIt6ImhowKQZ74A2HI7yxwouf3DUWZ6JtzFD5rYRhETEQpU
6Tv59bFQJeUJ8N2lAkcm
-----END CERTIFICATE-----