Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234352e302f32342d3234203d3e203631333137.roa
File:                     36362e3131382e3234352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          jeDAHMsJkrVGacM8bK4i30N9XbSFHK5HjgJqMlE7fWI=
Subject key identifier:   AB:1B:BB:91:3D:BA:54:2C:82:67:24:AF:42:21:24:C8:43:C3:80:8C
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       4BC5FDDC25A88D1B1C444A7BCDE305897688CB73
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234352e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 22 Nov 2022 02:11:38 +0000
ROA not before:           Tue 22 Nov 2022 02:06:38 +0000
ROA not after:            Tue 21 Nov 2023 02:11:38 +0000
asID:                     61317
IP address blocks:        66.118.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c5:fd:dc:25:a8:8d:1b:1c:44:4a:7b:cd:e3:05:89:76:88:cb:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Nov 22 02:06:38 2022 GMT
            Not After : Nov 21 02:11:38 2023 GMT
        Subject: CN=AB1BBB913DBA542C826724AF422124C843C3808C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1e:2f:03:2c:20:12:da:bd:c7:42:f5:b7:06:
                    5f:b7:2d:c6:25:b2:f4:9b:0a:01:bd:c2:63:31:18:
                    b2:ce:ac:b4:91:47:3a:9f:b2:18:38:fb:37:6f:5b:
                    ab:13:20:d5:9e:4a:27:50:88:1e:30:6c:c4:b0:43:
                    df:43:c9:73:bf:77:cf:c9:d7:59:11:fe:e2:b6:de:
                    7f:c5:2e:ee:ee:c2:a3:f6:13:38:ba:66:cc:fd:6d:
                    62:c4:cd:d1:66:87:dc:65:3e:b6:3f:cc:ff:5f:00:
                    ad:43:7a:d3:52:ad:a7:05:5b:4d:a9:eb:d7:a2:0b:
                    f1:6d:e1:c5:1d:f8:ec:d9:c0:2f:f7:fb:8a:95:59:
                    51:0c:73:e2:12:a0:c4:51:d8:b2:ef:7f:61:71:73:
                    2e:7d:11:67:8f:02:28:ab:34:cf:a4:52:27:33:e9:
                    7d:57:0f:cc:dd:71:43:99:27:81:99:da:1b:ab:af:
                    4f:19:8a:f8:1d:be:fa:22:b9:5a:1c:88:1b:92:8e:
                    f4:86:28:61:32:fe:d4:b3:55:c0:37:85:b2:74:64:
                    a7:67:98:3e:9f:1c:cc:17:b4:8a:80:40:ef:c2:59:
                    cc:93:25:15:ff:c6:55:3b:b0:b2:0a:81:7c:cb:22:
                    78:58:7f:37:ec:ac:34:d0:25:06:b9:59:50:f5:1b:
                    60:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1B:BB:91:3D:BA:54:2C:82:67:24:AF:42:21:24:C8:43:C3:80:8C
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234352e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:5f:99:e1:c2:36:19:22:a1:4a:96:10:f2:e5:7e:d9:94:8c:
         1e:30:6c:59:af:88:a7:81:75:fe:44:13:63:16:85:d0:29:ec:
         6f:70:c4:27:cc:29:f4:f6:08:f3:b2:24:fc:4e:27:ba:87:76:
         ef:ff:92:f8:00:66:ea:5d:5b:60:f6:2c:b8:db:b5:03:87:31:
         88:c5:8e:93:59:b7:e2:a9:52:9c:9e:32:03:25:90:f6:b8:ff:
         0c:ba:64:23:18:5c:28:9b:16:04:a0:09:26:b1:3f:0c:8b:dd:
         77:ae:b5:a5:08:b9:89:81:d8:86:f6:68:3d:6d:0d:3d:55:ee:
         01:5e:79:7d:1e:61:7e:03:f9:9a:f3:c4:3a:04:3c:5d:f1:e7:
         74:2a:09:58:c2:02:61:57:c2:84:8b:08:d4:56:e7:6a:48:8c:
         06:77:49:bb:c3:0d:1f:53:21:81:91:8f:6a:b1:1b:fc:9b:a8:
         04:67:44:d3:e3:7d:98:da:23:3d:ba:35:0b:f7:95:6a:01:9b:
         53:65:4c:55:b0:a6:5d:06:d8:13:6c:41:8e:6b:ee:15:71:4d:
         b8:ff:66:27:fe:82:07:23:b1:c0:d7:7d:26:0e:11:90:8a:c0:
         04:2e:e1:b3:f5:36:3d:bb:2b:79:7d:0a:22:4a:00:cb:a0:bb:
         e2:9c:de:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----