Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234362e302f32342d3234203d3e20323131343430.roa
File:                     36362e3131382e3234362e302f32342d3234203d3e20323131343430.roa (raw, json)
Hash identifier:          sMS4+8K8mh7JCAO/khVtv3ZqSoy9L5+DTNxHUzM5jM4=
Subject key identifier:   07:CB:CA:85:0B:33:3D:96:CF:2D:44:5D:80:F2:5F:08:BD:D6:85:CC
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       699F7AB185842553649899DE0D29702A3D8192BA
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234362e302f32342d3234203d3e20323131343430.roa
Signing time:             Tue 15 Nov 2022 15:44:23 +0000
ROA not before:           Tue 15 Nov 2022 15:39:23 +0000
ROA not after:            Tue 14 Nov 2023 15:44:23 +0000
asID:                     211440
IP address blocks:        66.118.246.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9f:7a:b1:85:84:25:53:64:98:99:de:0d:29:70:2a:3d:81:92:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Nov 15 15:39:23 2022 GMT
            Not After : Nov 14 15:44:23 2023 GMT
        Subject: CN=07CBCA850B333D96CF2D445D80F25F08BDD685CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:c7:53:aa:b8:00:02:af:54:4e:ba:a6:92:
                    ba:7a:34:31:e8:b7:73:60:28:ca:6a:ed:27:db:25:
                    fa:6b:cd:d4:7e:8b:7b:9e:68:42:d0:dd:a8:da:95:
                    e1:27:f5:51:ed:d0:63:45:3a:82:39:2d:61:fe:79:
                    e5:04:af:ea:15:9a:37:44:46:13:89:93:4a:a6:19:
                    06:5a:01:0c:ce:31:4f:b3:c8:a0:7b:9d:fa:79:ad:
                    8d:0d:34:94:66:3a:db:83:8b:10:b6:2b:59:a3:1a:
                    b3:e3:e6:37:c9:74:ad:3b:fd:59:dc:8b:a7:7f:2a:
                    68:f8:fe:5d:81:9c:67:ca:35:df:67:7d:63:2e:7a:
                    e7:7b:c3:2d:78:68:d0:0f:4a:dc:62:ed:8c:dc:f0:
                    bf:64:f6:09:f3:66:ea:17:c4:da:b8:ca:ff:36:9e:
                    72:24:69:1e:b0:2c:6c:29:4c:f8:4f:01:55:5c:b7:
                    80:d9:94:57:31:05:62:05:6a:b6:56:b0:77:fa:25:
                    68:aa:ea:b9:46:f5:6d:a3:79:b3:21:24:72:c7:6c:
                    36:64:8e:a6:7d:c2:97:77:72:4f:4e:9a:3c:1e:a1:
                    3d:93:91:fb:fa:34:9e:02:4c:7c:44:12:95:f9:09:
                    10:0c:d9:5d:7d:d9:df:5f:37:c3:48:51:98:84:0e:
                    eb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CB:CA:85:0B:33:3D:96:CF:2D:44:5D:80:F2:5F:08:BD:D6:85:CC
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234362e302f32342d3234203d3e20323131343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:a0:2b:ff:c5:af:9d:8e:76:6e:22:40:ee:12:a4:53:67:5b:
         55:fc:f6:d7:e7:07:32:9d:6f:4f:64:2c:c9:c4:b0:cc:19:b3:
         b7:7e:b2:a8:95:c8:f8:c2:37:2f:d7:16:a8:3b:bf:1b:f6:0f:
         38:46:0a:34:9b:93:fa:9a:16:91:3c:47:7f:79:cd:cc:4a:76:
         25:e1:95:cb:2f:ea:05:de:5c:56:d4:d2:50:b0:46:2f:ab:23:
         a9:c9:81:62:61:12:75:53:a5:76:9a:68:4a:ab:fe:2b:a8:01:
         8e:12:97:f0:25:7d:cb:49:53:8f:59:b0:d5:38:95:20:08:1d:
         b4:bc:16:5e:72:44:9a:d9:15:90:bb:b7:a9:6b:a3:1c:06:5a:
         b3:0d:03:fd:c6:8c:fb:12:3e:27:d0:a3:3b:d1:96:3d:81:09:
         c0:24:83:06:2a:b3:43:54:87:e2:56:a1:6e:12:80:e2:1b:ff:
         da:71:88:a7:15:7c:57:26:3f:5f:d6:aa:cc:2d:37:45:88:20:
         3a:78:8c:fc:0e:59:9a:28:3d:e6:6d:26:92:05:11:da:ec:31:
         b3:fd:e0:2c:54:bb:da:60:ea:62:61:7b:b2:2f:4d:89:e4:88:
         15:0d:00:68:3a:6f:a5:79:e7:db:48:3c:4e:76:fd:ef:55:91:
         78:39:18:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----