Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234362e302f32342d3234203d3e2031323339.roa
File:                     36362e3131382e3234362e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          S+PPc6BptedYRFJxbwQTzuZC/rn7Kay/Stu3Ax8zycQ=
Subject key identifier:   B1:4B:F7:30:60:EC:9C:B7:F9:BE:11:2B:09:8B:1A:CD:A5:4F:12:57
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       3CC2272EE646C6E81E83D77A7BAA720700DDC211
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234362e302f32342d3234203d3e2031323339.roa
Signing time:             Fri 17 Jun 2022 19:57:10 +0000
ROA not before:           Fri 17 Jun 2022 19:52:10 +0000
ROA not after:            Fri 16 Jun 2023 19:57:10 +0000
asID:                     1239
IP address blocks:        66.118.246.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c2:27:2e:e6:46:c6:e8:1e:83:d7:7a:7b:aa:72:07:00:dd:c2:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Jun 17 19:52:10 2022 GMT
            Not After : Jun 16 19:57:10 2023 GMT
        Subject: CN=B14BF73060EC9CB7F9BE112B098B1ACDA54F1257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e0:bc:44:e7:aa:42:b2:ee:f8:57:fb:7c:e4:
                    cc:49:ef:21:26:9d:28:5f:af:5e:5c:80:72:58:ef:
                    d0:1c:58:79:28:ee:b2:d9:cc:dd:e2:00:ee:3e:1c:
                    dd:6c:c0:14:2d:05:b4:b4:39:65:56:16:dc:48:ad:
                    90:f4:51:7f:78:01:76:55:42:d3:a6:b1:36:da:0a:
                    b8:a1:80:ce:33:82:d4:bb:24:53:af:92:91:2c:22:
                    87:0a:de:40:13:64:ba:4c:0a:0f:ec:d8:70:7f:a7:
                    87:ae:d4:c8:4f:63:35:0e:c2:fb:41:2d:0c:e4:f4:
                    50:ae:40:70:4d:a8:fa:bc:6b:b8:47:da:82:e4:04:
                    e3:5d:33:ed:9e:fb:d9:ab:bc:3f:53:4c:16:46:ef:
                    b5:62:05:2e:6f:3c:25:98:ed:c0:62:87:d9:62:f2:
                    26:48:9b:ba:2f:cd:eb:15:a1:1a:b4:7d:e9:98:12:
                    5e:bf:ef:99:28:3a:36:23:5b:cb:e7:ed:4d:0d:12:
                    c1:04:6f:26:85:50:9f:d1:43:c9:ed:13:87:d1:21:
                    92:26:5c:54:bb:8b:23:c4:67:51:0d:a7:31:67:93:
                    39:c0:89:56:dc:ab:fa:bf:3c:5b:98:03:7e:1f:1b:
                    cd:a7:59:63:d8:d3:54:48:f2:93:45:3f:df:cf:bb:
                    e0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4B:F7:30:60:EC:9C:B7:F9:BE:11:2B:09:8B:1A:CD:A5:4F:12:57
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234362e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:03:3f:e9:85:59:23:b7:b6:5e:2f:07:a8:71:74:6c:63:2a:
         9f:a8:0d:49:7a:b6:de:43:89:27:e9:34:f3:11:88:2b:a4:3f:
         92:8a:30:3f:7e:c0:b0:f3:12:b4:f4:16:66:ff:cf:0a:15:bf:
         81:ce:3e:f9:32:2f:4c:62:07:ea:38:5d:21:4e:8b:db:41:4e:
         7d:92:53:fd:14:28:5f:77:ca:86:11:ed:aa:0f:9b:e4:64:2a:
         41:29:f3:51:9d:54:4a:bb:e4:0f:30:e0:f3:77:08:6a:0e:e1:
         2f:91:9d:62:8f:07:b2:c7:30:f6:53:19:9a:b6:e3:28:59:db:
         4c:1c:0b:6c:6c:ca:03:2e:57:42:b4:05:70:33:90:49:9b:04:
         b3:09:d9:02:a6:b8:f0:f6:05:7e:84:75:4e:1a:09:7c:2f:d3:
         cc:21:15:f7:59:e8:6a:c5:7f:14:30:4e:40:88:f1:56:b9:10:
         34:62:70:c9:02:1e:e9:18:41:d5:37:8e:c2:49:8a:c1:b3:06:
         fa:d4:bc:3a:f8:7b:53:65:3c:21:f9:ee:e2:fa:a3:46:27:87:
         00:f8:7d:a3:79:d9:ed:76:93:60:74:a0:01:cd:b7:9a:bd:2c:
         d8:47:36:d5:10:62:b4:70:83:6f:c9:c6:82:a2:b7:40:72:2c:
         ae:87:f3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----