Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234352e302f32342d3234203d3e20323037343539.roa
File:                     36362e3131382e3234352e302f32342d3234203d3e20323037343539.roa (raw, json)
Hash identifier:          iWixgg+nah3peaBMKmaLW5kqTViwtY76gmDR2zvrz14=
Subject key identifier:   C9:47:F4:92:9B:43:6E:DF:6E:08:88:CA:1D:A5:4E:15:7D:84:68:60
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       1049E2AD4970A5B2A5F6C0995749BD99751C8A76
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234352e302f32342d3234203d3e20323037343539.roa
Signing time:             Tue 18 Oct 2022 08:39:07 +0000
ROA not before:           Tue 18 Oct 2022 08:34:07 +0000
ROA not after:            Tue 17 Oct 2023 08:39:07 +0000
asID:                     207459
IP address blocks:        66.118.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:49:e2:ad:49:70:a5:b2:a5:f6:c0:99:57:49:bd:99:75:1c:8a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Oct 18 08:34:07 2022 GMT
            Not After : Oct 17 08:39:07 2023 GMT
        Subject: CN=C947F4929B436EDF6E0888CA1DA54E157D846860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:76:ae:30:d2:57:ec:d9:02:c6:f3:69:d2:80:
                    ff:6e:4e:5a:17:34:72:3a:54:72:87:58:38:26:4b:
                    8d:54:13:4c:09:87:8f:ce:23:55:31:a2:a9:04:e0:
                    58:92:03:de:30:11:5f:19:77:13:9f:45:fb:eb:2f:
                    85:26:7d:0a:32:00:d6:c5:7a:95:2b:5b:65:28:40:
                    37:c0:2c:3d:e6:90:85:86:9f:c7:51:95:ef:aa:71:
                    5e:85:1d:e8:4d:66:d8:48:c4:db:8b:17:29:03:21:
                    e7:f8:8a:7d:6e:f7:68:0c:49:bf:4c:8f:fb:77:f5:
                    bd:78:fc:1d:8c:7b:da:c1:d0:d8:c7:7c:84:b3:33:
                    86:46:6d:04:1b:ba:34:2a:80:fe:f1:fb:51:a8:aa:
                    1b:d1:7b:09:ea:d0:e6:b9:b2:38:bb:63:66:36:fb:
                    28:2d:d3:4c:51:66:42:59:34:0f:0e:e0:a6:4c:bb:
                    d8:62:8e:bb:59:64:d7:a2:ed:c8:4d:3a:b2:5a:38:
                    51:3a:0d:e3:19:7a:f6:f0:99:df:1f:17:76:63:a5:
                    bd:84:0a:e6:ce:e9:4d:72:ec:48:4f:88:02:2f:fe:
                    31:f1:2a:fc:24:b4:ff:94:e3:04:74:db:50:67:12:
                    8b:98:97:20:85:0e:6a:e1:9b:2d:cf:11:8f:55:c5:
                    e0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:47:F4:92:9B:43:6E:DF:6E:08:88:CA:1D:A5:4E:15:7D:84:68:60
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234352e302f32342d3234203d3e20323037343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:35:51:2e:12:8d:99:94:3c:76:fe:6e:9a:21:63:f0:ef:85:
         19:c4:39:1d:34:1a:5c:fd:c9:d3:80:94:15:87:a6:7a:ec:95:
         53:41:73:44:e1:9c:51:31:23:8b:ce:97:c6:99:60:4c:f7:3a:
         7d:46:a2:f0:e8:d4:12:e8:59:97:a1:6c:23:01:36:fa:9f:6a:
         db:46:6a:a9:6f:5a:3f:5e:af:a5:e3:e1:cf:7c:04:6d:42:ec:
         62:82:6e:1e:22:2c:43:b3:9a:e1:ff:b2:2f:7e:53:bb:eb:a2:
         5d:32:97:8d:d7:fe:85:21:ce:e3:b1:b3:85:54:42:58:b6:f2:
         19:8d:23:c8:ce:06:9c:07:75:bc:40:92:3a:64:0f:8d:d5:4a:
         bd:ac:e1:eb:ef:c2:d0:29:8a:86:16:a0:cd:14:15:6d:cc:e2:
         78:bc:8b:2d:1b:8b:c8:b8:8e:1b:94:86:52:c9:c7:69:20:9e:
         2d:2f:0f:fe:80:5b:20:7f:f1:a7:c4:33:89:2e:88:50:8e:40:
         6b:f6:f3:df:94:5c:64:46:50:d6:57:6c:a2:1d:76:b8:05:29:
         da:2d:5d:fc:67:dc:3a:f3:fa:03:a4:f4:14:74:60:6d:0f:15:
         ba:03:ea:a1:3f:5f:b4:f5:c0:5d:28:e0:dc:33:bf:be:34:e1:
         34:64:a1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----