Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234372e302f32342d3234203d3e2031323339.roa
File:                     36362e3131382e3234372e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          eiUPebsMgwabzplzQSA2FHu8fNq7CWci6iO3lMKaAF0=
Subject key identifier:   9C:67:83:75:A5:68:43:AB:C6:2B:B0:FF:BC:F5:11:1F:15:7B:00:BF
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       6CC1CA8F8A671B483E167CA49C38E86E48A8456D
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234372e302f32342d3234203d3e2031323339.roa
Signing time:             Fri 17 Jun 2022 19:57:19 +0000
ROA not before:           Fri 17 Jun 2022 19:52:19 +0000
ROA not after:            Fri 16 Jun 2023 19:57:19 +0000
asID:                     1239
IP address blocks:        66.118.247.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c1:ca:8f:8a:67:1b:48:3e:16:7c:a4:9c:38:e8:6e:48:a8:45:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Jun 17 19:52:19 2022 GMT
            Not After : Jun 16 19:57:19 2023 GMT
        Subject: CN=9C678375A56843ABC62BB0FFBCF5111F157B00BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fd:dd:6c:e1:79:c8:c1:a7:00:a5:67:3a:93:
                    5e:3d:d2:df:d0:22:eb:92:80:0d:94:83:59:98:a4:
                    19:98:2a:cf:ea:f8:54:71:4f:bf:9a:4a:1b:e9:0d:
                    65:e6:83:ac:39:34:f6:84:92:0e:89:7d:ea:c4:03:
                    ad:46:a8:22:ea:75:27:98:cb:b7:d5:b6:14:8e:83:
                    66:ef:9f:d5:64:0a:cd:3d:a2:e5:4a:df:e9:d1:db:
                    19:d5:a0:84:8e:2d:cb:8c:be:a6:2f:1b:37:03:05:
                    c9:6b:97:94:df:d1:2c:30:cf:36:11:38:92:5c:ae:
                    fc:cb:33:b9:29:0d:3b:5a:9c:0e:30:e6:4a:d9:cd:
                    60:fe:06:a0:9d:3c:35:52:2c:4b:db:fa:03:a3:16:
                    14:7b:22:13:fa:7e:ee:da:b6:9a:cd:df:f3:0e:e1:
                    5c:02:77:69:b1:5e:cc:b7:e1:bd:9f:85:26:71:25:
                    a8:fd:7c:c9:2a:8a:4e:66:0a:c8:1c:7c:dc:02:62:
                    39:48:00:eb:9e:37:f4:61:54:ff:3c:27:bd:ac:bf:
                    8e:a6:ba:37:4f:0d:aa:be:e3:11:1e:91:5f:76:50:
                    46:80:c3:a3:49:71:e1:5c:26:63:be:73:6d:ca:c8:
                    6f:ff:56:08:c6:1b:cd:1f:b2:cf:f7:00:2c:d1:3c:
                    59:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:67:83:75:A5:68:43:AB:C6:2B:B0:FF:BC:F5:11:1F:15:7B:00:BF
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234372e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:31:2f:0e:95:c1:ec:fa:af:1f:d5:5e:ad:c9:2e:82:a3:89:
         b7:d7:02:39:10:82:b3:3d:28:05:31:19:c3:2b:9a:5d:55:62:
         22:c7:c1:58:f5:60:74:6b:26:e3:a4:95:03:a5:d8:70:a3:f5:
         32:98:7b:c8:65:08:93:b1:31:1a:86:4c:9e:28:69:9e:b4:6e:
         62:6d:9e:18:6c:1c:e4:de:84:f2:02:d9:28:6b:ee:1c:6f:21:
         29:ea:bc:d1:ab:8d:a4:09:93:f0:e0:e3:aa:ff:28:43:78:5b:
         5c:be:6d:8a:55:4e:78:40:bd:de:f1:a5:c7:f0:19:53:3d:83:
         18:2a:10:e7:7d:f1:86:7b:c9:ff:2b:ec:0a:94:2a:ef:f8:c5:
         cd:55:05:04:17:41:d6:8b:e3:ed:f2:3b:a2:a2:c8:02:67:d5:
         08:8e:78:49:fc:58:72:57:14:96:58:af:bc:f1:07:32:ec:ca:
         d2:42:7f:e8:da:fd:5a:f4:5e:5a:f7:28:5b:a8:18:17:e9:58:
         55:ae:36:2f:ef:c3:31:a3:51:fd:b9:e0:f7:ba:e5:03:7f:26:
         d9:9f:08:de:8a:b4:8c:88:62:56:9e:6b:cd:dd:7a:9b:93:84:
         23:41:77:98:72:db:2b:1a:b6:4e:58:2c:4c:88:60:02:d8:4a:
         8b:08:dd:f8
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUbMHKj4pnG0g+FnyknDjobkioRW0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDk4NWVhNTBkZjU0ZTc5NWE0YmUxNGFkNTE4OGE4ZTUy
ODczNzg3MDM5YmI2YjI3YjIwHhcNMjIwNjE3MTk1MjE5WhcNMjMwNjE2MTk1NzE5
WjAzMTEwLwYDVQQDEyg5QzY3ODM3NUE1Njg0M0FCQzYyQkIwRkZCQ0Y1MTExRjE1
N0IwMEJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov3dbOF5yMGn
AKVnOpNePdLf0CLrkoANlINZmKQZmCrP6vhUcU+/mkob6Q1l5oOsOTT2hJIOiX3q
xAOtRqgi6nUnmMu31bYUjoNm75/VZArNPaLlSt/p0dsZ1aCEji3LjL6mLxs3AwXJ
a5eU39EsMM82ETiSXK78yzO5KQ07WpwOMOZK2c1g/gagnTw1UixL2/oDoxYUeyIT
+n7u2raazd/zDuFcAndpsV7Mt+G9n4UmcSWo/XzJKopOZgrIHHzcAmI5SADrnjf0
YVT/PCe9rL+Opro3Tw2qvuMRHpFfdlBGgMOjSXHhXCZjvnNtyshv/1YIxhvNH7LP
9wAs0TxZ2wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFJxng3WlaEOrxiuw/7z1ER8V
ewC/MB8GA1UdIwQYMBaAFBjAkk0jHaMBlRYLJe7mMn60Awb4MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxNzMzYzVjNWY2YjViLzAv
MThDMDkyNEQyMzFEQTMwMTk1MTYwQjI1RUVFNjMyN0VCNDAzMDZGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzcyMjViNDE1LThhZTAtNDUyMy1iMzdmLTc0ZWQ3ODA2NzZhYS8wOTg1
ZWE1MGRmNTRlNzk1YTRiZTE0YWQ1MTg4YThlNTI4NzM3ODcwMzliYjZiMjdiMi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MTcz
M2M1YzVmNmI1Yi8wLzM2MzYyZTMxMzEzODJlMzIzNDM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzMjMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABCdvcwDQYJKoZIhvcNAQELBQAD
ggEBAK8xLw6Vwez6rx/VXq3JLoKjibfXAjkQgrM9KAUxGcMrml1VYiLHwVj1YHRr
JuOklQOl2HCj9TKYe8hlCJOxMRqGTJ4oaZ60bmJtnhhsHOTehPIC2Shr7hxvISnq
vNGrjaQJk/Dg46r/KEN4W1y+bYpVTnhAvd7xpcfwGVM9gxgqEOd98YZ7yf8r7AqU
Ku/4xc1VBQQXQdaL4+3yO6KiyAJn1QiOeEn8WHJXFJZYr7zxBzLsytJCf+ja/Vr0
Xlr3KFuoGBfpWFWuNi/vwzGjUf254Pe65QN/JtmfCN6KtIyIYlaea83depuThCNB
d5hy2ysatk5YLEyIYALYSosI3fg=
-----END CERTIFICATE-----