Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e203633303233.roa
File:                     3137322e38322e39302e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          EIJWf7qDCOmT1hb+hN/sjWmYfsceZdVosP0n2KJ1eT8=
Subject key identifier:   4C:48:3B:D7:A4:12:0F:97:3A:4A:69:29:03:1E:75:8D:E8:BC:42:9E
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       0E772FBA16C84B001DEB56E1965339721A159923
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e203633303233.roa
Signing time:             Mon 28 Nov 2022 17:25:31 +0000
ROA not before:           Mon 28 Nov 2022 17:20:31 +0000
ROA not after:            Mon 27 Nov 2023 17:25:31 +0000
asID:                     63023
IP address blocks:        172.82.90.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:77:2f:ba:16:c8:4b:00:1d:eb:56:e1:96:53:39:72:1a:15:99:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Nov 28 17:20:31 2022 GMT
            Not After : Nov 27 17:25:31 2023 GMT
        Subject: CN=4C483BD7A4120F973A4A6929031E758DE8BC429E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1c:f0:bd:06:ff:13:d2:68:9b:d2:2a:bd:c6:
                    6d:95:eb:60:ee:4b:44:e6:aa:bf:7a:2c:db:ef:ec:
                    33:f6:a3:81:73:c8:6c:8d:f6:de:85:4a:6f:35:de:
                    f2:4b:90:a2:6c:11:da:11:7c:cd:24:9b:d7:31:10:
                    41:6d:50:57:07:07:6b:c3:24:a0:21:82:18:49:e3:
                    fc:ed:e1:e8:68:16:ba:ad:40:ff:65:1a:47:26:75:
                    31:f5:06:6c:f3:6c:cc:72:3a:13:ca:3a:02:7c:0e:
                    42:18:fe:6f:7d:d6:79:c4:5a:06:80:ce:94:3b:b8:
                    6d:6a:b9:9d:92:f6:ad:80:12:6c:aa:75:e8:af:e6:
                    38:f9:aa:b2:48:2d:86:1b:5b:b8:c1:9f:9b:28:38:
                    a3:b4:df:a6:fd:a9:f1:39:ff:6e:c9:33:3e:eb:e4:
                    b4:6b:7d:a2:9d:95:04:f9:32:9e:ff:3f:86:58:13:
                    d7:10:16:07:fe:d6:38:77:ac:de:89:bc:81:b4:27:
                    1d:01:8e:f2:20:fb:6e:80:7a:86:f1:c7:bc:e9:96:
                    8d:20:76:cc:e1:82:0e:b3:a0:6d:e0:d5:a0:ae:27:
                    5d:af:c6:4a:3c:8d:c0:30:1d:9a:ac:66:f2:30:2b:
                    d3:b5:85:96:b5:86:5e:f0:75:a5:93:97:41:10:ba:
                    71:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:48:3B:D7:A4:12:0F:97:3A:4A:69:29:03:1E:75:8D:E8:BC:42:9E
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:11:96:c7:a3:05:ae:49:30:d6:aa:38:1f:d2:5b:91:1b:b9:
         17:fe:a8:6a:f7:46:88:40:41:1b:db:e1:72:39:54:12:d4:68:
         dc:0f:66:b5:e5:e0:7f:be:fe:ed:93:f6:f5:82:b9:98:5c:5c:
         70:78:66:59:5c:bd:65:f0:c0:7e:07:9d:e8:40:ef:bd:25:1c:
         b3:f2:04:d6:92:bd:4a:b7:d8:0a:87:ea:d6:16:44:ac:4c:c7:
         06:b7:a6:ff:99:f1:77:2f:07:0e:7e:22:14:10:b0:b4:63:2e:
         ec:54:c0:78:de:0d:54:39:5a:f0:37:9b:97:42:be:9d:22:a9:
         28:7e:6d:10:70:aa:1e:6b:dc:98:bd:5e:1b:f8:70:d4:80:2d:
         cf:61:36:fe:7b:36:bf:66:0d:83:63:ae:12:ad:da:70:1e:3b:
         0e:d9:7b:9b:ca:1a:d2:7a:e0:1d:fb:3f:fa:bd:41:55:01:47:
         e0:5b:a4:21:9c:e7:01:3a:1d:b9:87:a5:be:28:bd:45:52:3c:
         26:14:c9:68:5b:47:aa:33:5a:9e:2c:30:1e:d1:ca:7a:05:84:
         a2:c5:d8:5d:4d:12:30:62:75:ed:b9:4d:bf:88:ad:09:47:42:
         d6:75:cc:75:34:24:87:d9:fa:7b:8b:95:fc:55:3e:00:37:86:
         57:4c:be:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----