Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234352e302f32342d3234203d3e2031323339.roa
File:                     36362e3131382e3234352e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          Fz9vIMjoxeTpT2w6Oe+Q3lINSrM63M17vYWzsTQoYEM=
Subject key identifier:   E6:AF:33:BE:69:32:E4:EB:68:36:21:0E:0A:6D:25:30:E1:38:BC:4D
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       0D4001A1583C62611E0ED7906A3BB2F72554D98E
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234352e302f32342d3234203d3e2031323339.roa
Signing time:             Fri 17 Jun 2022 19:57:01 +0000
ROA not before:           Fri 17 Jun 2022 19:52:01 +0000
ROA not after:            Fri 16 Jun 2023 19:57:01 +0000
asID:                     1239
IP address blocks:        66.118.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:40:01:a1:58:3c:62:61:1e:0e:d7:90:6a:3b:b2:f7:25:54:d9:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Jun 17 19:52:01 2022 GMT
            Not After : Jun 16 19:57:01 2023 GMT
        Subject: CN=E6AF33BE6932E4EB6836210E0A6D2530E138BC4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0a:b1:23:60:56:36:6b:93:0b:bd:62:a2:59:
                    7a:cd:b8:43:a0:3e:cc:19:29:df:b0:b9:8c:bd:22:
                    3c:7a:0a:f3:97:79:e2:b6:33:6b:a6:d6:ec:b7:5b:
                    45:b8:be:0c:ca:b0:bc:fb:4c:53:ef:59:a0:13:bd:
                    5b:92:c7:4f:03:65:f3:e2:b6:93:c7:69:b5:99:16:
                    59:a8:f9:68:3e:d6:5b:60:31:c8:34:81:a5:48:dd:
                    90:ba:76:84:71:83:cd:8b:71:00:89:5d:2f:d0:57:
                    53:32:c4:8e:a7:a1:5c:24:55:6e:a4:87:d7:28:09:
                    15:68:08:76:b8:54:23:f0:97:7f:b9:7a:80:65:91:
                    00:80:b9:8b:fa:d7:81:17:f4:46:3d:bd:c6:93:4e:
                    e6:05:3f:2a:75:60:bb:7d:f8:b5:5d:93:db:c2:89:
                    77:d7:d8:bb:17:08:05:e5:92:e0:41:ce:77:9c:c2:
                    eb:74:2d:8c:fe:9a:0b:fb:3d:22:8d:2d:f4:74:c5:
                    58:d3:ba:cd:01:e1:f4:bf:d1:47:f6:21:2b:02:74:
                    a6:ab:97:b1:56:ee:03:5b:23:9b:6b:f7:aa:79:ee:
                    0a:78:a0:b5:79:bd:41:73:18:71:9b:7c:91:b6:15:
                    bf:f4:4c:fc:fb:f9:d3:0a:c6:b6:32:f0:e5:2f:e0:
                    b6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AF:33:BE:69:32:E4:EB:68:36:21:0E:0A:6D:25:30:E1:38:BC:4D
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234352e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:63:44:f2:12:9f:a2:2e:0c:91:f3:32:79:7e:38:4f:c2:79:
         43:24:50:75:02:74:1f:27:c6:2c:e5:b8:e5:3f:c0:d6:60:3b:
         c1:e7:e4:41:83:42:74:63:82:15:df:df:c0:fc:78:a2:49:69:
         7b:d5:c5:77:82:42:c3:60:ea:10:f7:62:f1:7d:32:ba:70:c4:
         52:40:4c:29:d0:e9:ae:d1:7b:3e:cc:2a:f5:aa:29:64:ca:f2:
         6a:03:07:bd:a9:84:96:c2:f4:dd:50:f3:0c:76:36:80:b5:91:
         74:8b:d7:0c:31:fa:09:8c:8e:35:6f:62:c9:28:0c:01:04:c3:
         0f:4b:32:28:aa:4a:93:bc:2b:20:7b:39:54:19:aa:22:0b:c9:
         60:29:9e:50:5d:77:77:22:8f:fd:8a:f3:de:74:dd:6c:f8:b4:
         5f:f5:e0:d3:22:39:99:cf:3a:48:0a:d6:40:e8:f0:65:65:6a:
         e2:21:48:5c:f6:47:fb:15:ff:ec:54:16:3c:a0:83:f1:5f:eb:
         b2:14:1d:9c:67:7d:e5:6a:2d:2b:b5:9d:f5:7c:29:37:3f:f2:
         13:84:d9:2c:97:44:0a:80:82:6a:82:2d:70:6d:a9:44:0b:1a:
         62:d1:c0:49:d8:6a:3e:83:09:c1:64:ee:da:f7:47:3d:b8:78:
         cd:09:1d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----