Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e203631333137.roa
File:                     3137322e38322e39312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          jeLKB+N0YSiw+OT34zKI/Fz4m8jcxzgujcQ1/XA4szk=
Subject key identifier:   84:64:07:F0:D4:02:3D:29:EB:E8:81:5A:08:A2:C9:32:80:F0:E5:2B
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       0691EE5A299E45DC39570C6F7776A38360723D2F
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 21 Oct 2022 09:33:12 +0000
ROA not before:           Fri 21 Oct 2022 09:28:12 +0000
ROA not after:            Fri 20 Oct 2023 09:33:12 +0000
asID:                     61317
IP address blocks:        172.82.91.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:91:ee:5a:29:9e:45:dc:39:57:0c:6f:77:76:a3:83:60:72:3d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Oct 21 09:28:12 2022 GMT
            Not After : Oct 20 09:33:12 2023 GMT
        Subject: CN=846407F0D4023D29EBE8815A08A2C93280F0E52B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:55:98:54:f4:17:ee:99:82:18:da:fb:4f:99:
                    73:c9:0b:22:98:ee:53:a2:14:02:9f:31:e1:bb:10:
                    da:83:e7:2c:93:09:9d:fb:93:56:b9:68:fe:03:af:
                    f1:14:27:3f:71:09:a1:a5:3f:8b:58:a9:d2:09:52:
                    3e:7d:37:d1:cd:82:ee:3c:67:b0:77:82:ba:e3:83:
                    16:c2:b2:36:58:7f:3c:1d:bc:3a:ec:6f:ed:40:02:
                    66:a1:1a:3d:3a:0c:73:f7:ab:90:ad:28:1a:3a:11:
                    7d:16:e9:f1:b2:f4:92:93:8c:50:94:1e:9d:56:d5:
                    d8:13:89:47:a8:46:d6:24:f4:bf:32:af:cc:9a:d7:
                    91:93:d5:9c:9d:5f:e7:13:9f:08:6a:e6:f2:eb:b0:
                    fe:26:b3:92:be:20:a8:a4:37:68:e5:52:a8:92:75:
                    4b:63:eb:9e:45:40:bb:cb:b6:23:d7:ca:a3:75:e4:
                    8a:63:e1:db:26:d5:2a:6e:be:0b:31:c5:14:73:01:
                    c0:cf:55:0c:1f:57:5f:de:87:80:26:b7:de:de:4a:
                    02:de:16:99:5b:06:e1:b3:11:3c:af:94:6b:91:50:
                    84:ab:99:93:d4:12:11:e1:12:f1:ac:71:17:60:5c:
                    f7:d0:30:df:2d:dc:90:63:af:df:89:2f:bc:4f:7c:
                    9b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:64:07:F0:D4:02:3D:29:EB:E8:81:5A:08:A2:C9:32:80:F0:E5:2B
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:74:ad:46:54:d4:fc:a7:69:f8:44:54:dd:cf:9f:4a:25:27:
         4c:b0:07:ec:ec:50:d7:ee:00:97:7a:c7:4f:01:eb:07:d2:70:
         d4:da:d0:68:5b:1c:24:f5:1b:bb:df:f4:68:65:26:da:c8:2e:
         36:c3:e6:fd:fc:f1:6f:89:e1:99:19:37:ca:19:36:94:04:24:
         df:97:01:e2:c3:6e:7b:93:8d:4a:92:e1:0c:0b:ba:6e:42:bf:
         12:88:38:33:a9:9c:dc:ba:8d:c7:97:e3:ab:52:26:10:5c:36:
         42:4f:fe:13:1a:1a:33:81:27:37:1f:06:ec:2f:49:da:2f:6d:
         ef:e0:3c:c8:b4:58:a6:82:93:d1:d3:80:38:2a:24:07:2a:3b:
         d3:55:ff:af:c5:80:a9:a8:b5:64:e0:f6:6e:3e:ae:9a:85:31:
         0f:4a:6e:e3:61:93:19:5d:47:94:14:a7:20:89:86:2b:35:e0:
         eb:65:6c:a1:27:35:f9:ba:be:ac:90:b5:94:6e:17:33:d7:ca:
         8a:f1:09:cb:70:9d:d4:a0:5c:a2:9a:2a:2b:c9:e4:a5:7e:36:
         7f:f3:1c:0b:f6:fa:ab:e0:4a:0f:e6:0d:22:ed:ed:00:30:c6:
         c2:94:c3:9a:3b:f2:4d:d4:88:a7:16:7d:f5:db:3c:23:90:e2:
         bc:fe:7e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----