Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/38392e33352e39322e302f32342d3234203d3e2037303138.roa
File:                     38392e33352e39322e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          CQVG3tbpumVBZq99NlMCN/Vebu9WcvZWevYk0yOXuqI=
Subject key identifier:   49:8E:43:F2:41:BB:2B:A1:38:6F:2E:5C:C8:7B:1F:41:4E:4A:C7:90
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       037AA28870B2D8A76F7AA5E06804268905A4E8AF
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/38392e33352e39322e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 28 Nov 2022 11:22:01 +0000
ROA not before:           Mon 28 Nov 2022 11:17:01 +0000
ROA not after:            Mon 27 Nov 2023 11:22:01 +0000
asID:                     7018
IP address blocks:        89.35.92.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7a:a2:88:70:b2:d8:a7:6f:7a:a5:e0:68:04:26:89:05:a4:e8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:17:01 2022 GMT
            Not After : Nov 27 11:22:01 2023 GMT
        Subject: CN=498E43F241BB2BA1386F2E5CC87B1F414E4AC790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:4d:7e:6d:28:d5:df:6d:25:dc:ca:5c:b7:
                    1a:1a:1d:cb:5f:7f:4a:91:29:16:fd:57:2a:51:b7:
                    44:43:26:b8:4d:27:a2:50:f4:c3:c1:f3:bb:08:d7:
                    3a:aa:d0:85:a7:8b:2b:70:31:c7:ff:53:f0:21:3a:
                    d8:14:1a:75:da:f9:eb:5d:b3:d4:94:ee:b6:05:5d:
                    1a:95:03:d6:4b:b2:05:f8:22:81:f2:47:88:29:bf:
                    e8:4b:6e:6a:ef:e7:63:83:d2:50:30:de:60:f8:50:
                    ea:6e:8b:ff:1f:82:c9:32:79:ec:e9:5e:5f:d1:a2:
                    42:50:22:62:06:48:13:a9:0f:eb:6d:f8:42:47:ab:
                    45:ba:40:0d:19:5a:d7:3c:90:de:0e:42:17:98:4e:
                    d1:08:33:ae:ce:77:51:61:6e:2d:b6:a8:20:e1:4d:
                    1c:17:c5:36:89:52:82:02:ef:af:ce:47:01:19:7a:
                    eb:5e:6d:e5:cf:0d:79:18:1c:66:a9:34:dd:b5:94:
                    70:7f:59:e0:f9:3e:1a:0c:95:2d:c0:e5:01:2a:b5:
                    c3:99:61:c5:65:64:f8:d0:c9:63:6e:0f:7e:b6:dd:
                    85:0c:7e:bd:d0:aa:01:dd:b8:58:15:4b:98:71:f1:
                    64:12:98:c8:5d:c1:7b:5a:6c:2e:1a:bb:98:7a:3e:
                    e1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8E:43:F2:41:BB:2B:A1:38:6F:2E:5C:C8:7B:1F:41:4E:4A:C7:90
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/38392e33352e39322e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.35.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:bf:da:1a:af:89:49:ca:fb:b3:cb:95:79:9c:67:af:6b:9e:
         c7:74:84:ff:32:e1:a9:a7:14:c1:be:cf:4b:61:82:c1:d9:a0:
         e6:26:41:43:aa:65:10:aa:5b:2d:bd:a2:e1:17:cf:5b:76:31:
         f0:d4:d3:a9:30:17:58:be:f0:a9:72:c4:43:5a:22:5f:ab:14:
         29:b0:72:69:f1:d6:27:9d:2e:5d:31:25:f7:17:ff:b0:6f:4a:
         2a:7c:c3:ae:2d:00:35:08:3b:3c:21:a4:04:34:fe:55:3c:e3:
         12:6c:97:98:0c:ed:84:4b:95:c9:9a:f4:6c:9b:b7:b9:6d:10:
         66:fb:fa:88:13:9d:a6:fb:70:86:65:65:20:20:6d:54:6d:fa:
         b5:7d:60:9c:71:4c:c9:54:b1:3b:48:4d:2c:d7:ce:f1:82:f0:
         3d:57:17:59:8a:b6:c9:77:f2:48:9f:d5:fe:ab:c9:21:e4:54:
         58:42:cb:9d:7e:65:a0:b8:f3:7e:95:4a:b3:2c:66:42:51:b4:
         65:23:f5:a4:4a:a3:bb:90:89:20:b6:bb:6d:52:dc:af:c4:00:
         2e:6a:98:e5:34:c5:57:81:c3:c2:3c:90:d0:7d:ce:1f:a3:27:
         21:fd:d9:40:93:8e:61:8e:81:52:bf:e4:31:49:7e:13:8c:ca:
         91:2e:5e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----