Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234362e302f32342d3234203d3e20323130343339.roa
File:                     36362e3131382e3234362e302f32342d3234203d3e20323130343339.roa (raw, json)
Hash identifier:          NjF1I6tBOsxplMMJGxdn7hPmE3hal4Kv5ZtUYZKLFpY=
Subject key identifier:   4D:8E:6D:71:14:3D:DE:51:98:07:C9:E9:15:D0:4A:3C:17:76:91:E5
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       6E6CF64B115DB5E5D8011E69DD356FDE6C0EA3DE
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234362e302f32342d3234203d3e20323130343339.roa
Signing time:             Sun 16 Oct 2022 10:16:11 +0000
ROA not before:           Sun 16 Oct 2022 10:11:11 +0000
ROA not after:            Sun 15 Oct 2023 10:16:11 +0000
asID:                     210439
IP address blocks:        66.118.246.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6c:f6:4b:11:5d:b5:e5:d8:01:1e:69:dd:35:6f:de:6c:0e:a3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Oct 16 10:11:11 2022 GMT
            Not After : Oct 15 10:16:11 2023 GMT
        Subject: CN=4D8E6D71143DDE519807C9E915D04A3C177691E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2f:17:af:6a:0a:52:99:b9:63:6b:0a:39:06:
                    3a:42:73:b1:0f:bf:26:22:05:4d:44:61:3e:97:23:
                    16:1a:44:26:35:5f:43:85:d2:7c:80:4c:49:95:75:
                    c7:47:89:ab:22:c8:0e:62:83:43:e7:c3:a2:2c:62:
                    56:12:b1:99:dc:7c:b4:07:0a:c9:f9:0c:e9:23:33:
                    73:42:24:5e:49:0d:9e:00:58:79:4a:b9:3b:37:0e:
                    7c:af:61:24:bf:a2:55:04:e6:14:58:3c:92:e0:ac:
                    59:98:84:ab:43:64:67:94:a2:58:bb:7a:d6:1a:77:
                    e8:78:b2:60:5e:a6:ac:7a:74:7e:fb:de:c3:25:0b:
                    5c:cd:e7:88:9a:35:62:17:41:90:4d:91:ae:61:5e:
                    00:80:2a:db:c8:43:b7:a9:a0:c9:e0:d6:bb:22:e8:
                    2c:83:6b:c2:ab:11:88:f0:6b:8a:61:f4:9e:e9:0b:
                    52:ca:51:e1:67:bc:c5:dc:df:05:7c:59:a2:19:de:
                    df:b9:13:3e:d1:3f:4b:ba:e7:91:da:7d:bc:c7:40:
                    59:93:8c:25:ed:cd:4e:2b:62:87:43:45:8c:b9:b2:
                    c6:d5:fa:52:f3:e3:d7:59:0e:54:31:06:d5:dd:6e:
                    7a:10:bc:bf:0f:db:30:5e:d2:14:bd:cf:2b:5a:a0:
                    13:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8E:6D:71:14:3D:DE:51:98:07:C9:E9:15:D0:4A:3C:17:76:91:E5
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234362e302f32342d3234203d3e20323130343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:55:07:1a:88:ae:d5:17:b2:48:e9:96:bf:46:5b:10:04:97:
         e9:b3:1c:64:01:79:e0:b1:65:9b:af:14:77:fc:ca:1f:2c:1d:
         52:59:1d:4a:00:57:51:da:7f:3d:79:e1:55:5f:7a:e2:50:0a:
         7e:ac:4a:1b:54:06:3c:27:be:86:74:0a:97:0a:48:b6:6a:9c:
         f7:cc:e4:7f:cd:cc:3b:66:f9:c6:76:11:d4:16:23:cf:64:65:
         e2:c6:4c:e2:bf:a7:4c:27:81:c8:f9:50:6e:f8:52:1c:3a:ea:
         08:f7:f2:57:59:c1:fe:68:47:12:9e:fb:11:be:7f:f7:8a:1c:
         82:5f:3e:cf:b6:22:5e:17:57:97:b9:7e:0b:ef:df:fd:ac:55:
         57:05:7b:b8:0f:9b:0f:d4:93:37:f8:11:59:51:2c:ed:b6:c4:
         5c:fc:53:88:2e:62:39:a2:60:78:50:8a:50:7a:c1:42:51:a8:
         93:9d:c3:4c:e2:ce:f6:f7:05:99:7a:8d:96:9a:50:22:46:66:
         8c:64:f1:bb:d1:ae:b8:15:4d:08:b4:3f:68:cd:83:17:11:67:
         d0:e6:ed:c3:95:68:23:76:4c:1e:c0:4b:2f:cf:b1:1c:44:47:
         63:09:1d:e6:ed:71:25:3e:57:6e:e2:01:47:da:48:fd:77:b0:
         1e:5a:3d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----