Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234372e302f32342d3234203d3e20323032333335.roa
File:                     36362e3131382e3234372e302f32342d3234203d3e20323032333335.roa (raw, json)
Hash identifier:          vRm0RBi0fuid1xaaPq8MBlc4CclULOErcqX1myIOc9Q=
Subject key identifier:   3D:DD:36:9F:9B:7A:9A:BF:55:CC:F8:88:B8:EB:C7:73:16:4D:B7:B2
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       2077F679DD537725F6B17973E06F6F3BD47C48C9
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234372e302f32342d3234203d3e20323032333335.roa
Signing time:             Mon 17 Oct 2022 05:27:41 +0000
ROA not before:           Mon 17 Oct 2022 05:22:41 +0000
ROA not after:            Mon 16 Oct 2023 05:27:41 +0000
asID:                     202335
IP address blocks:        66.118.247.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:77:f6:79:dd:53:77:25:f6:b1:79:73:e0:6f:6f:3b:d4:7c:48:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Oct 17 05:22:41 2022 GMT
            Not After : Oct 16 05:27:41 2023 GMT
        Subject: CN=3DDD369F9B7A9ABF55CCF888B8EBC773164DB7B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e0:ef:ff:5f:a9:07:5b:4f:fb:dc:80:72:34:
                    90:c2:31:dd:d8:7b:6a:9b:b2:10:d4:d2:9b:81:6d:
                    73:2c:b9:f7:5f:c5:d0:b2:54:ac:80:b0:8d:af:3c:
                    e4:d5:18:43:cc:61:5c:4a:a9:d9:37:0c:28:92:d1:
                    20:59:db:02:fe:53:04:1c:64:5f:8e:37:17:bb:08:
                    1e:a2:a3:bd:75:07:89:2c:1a:62:cd:bd:da:d5:65:
                    81:01:c1:98:c2:2b:01:16:1f:24:f1:39:1d:d7:13:
                    cf:c4:f6:fc:dc:3b:6a:63:8b:21:43:8f:70:fc:04:
                    ff:2a:36:7c:d6:7c:42:ea:a7:2d:99:0b:94:62:6c:
                    02:69:d2:09:91:ca:08:98:81:1f:7c:8e:12:16:75:
                    9a:11:13:0f:8f:d9:19:d6:64:63:47:d2:e7:22:39:
                    fb:55:52:4d:d0:84:ef:f3:b2:b7:af:c8:18:87:64:
                    03:6e:e3:53:db:72:be:db:d2:ad:3e:9a:e1:94:9f:
                    e9:3b:35:f5:a0:75:5a:e1:3f:82:a4:b7:e4:12:4d:
                    a0:41:2b:a8:76:74:af:45:e3:15:2a:4f:a2:70:56:
                    eb:fb:7a:db:43:72:fc:97:b1:d5:52:8d:02:c3:5a:
                    b3:19:5a:32:c9:a1:57:f8:28:b7:eb:3a:75:09:4f:
                    d2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DD:36:9F:9B:7A:9A:BF:55:CC:F8:88:B8:EB:C7:73:16:4D:B7:B2
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234372e302f32342d3234203d3e20323032333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:7e:a0:bd:8f:86:ee:47:f6:2b:8e:9a:90:80:fb:3c:e0:8d:
         62:21:5e:d1:5e:16:42:ef:27:87:0b:2c:68:1e:6a:4c:10:a8:
         f0:31:62:49:2d:5d:f3:f7:64:27:c8:c8:71:99:4e:35:e7:fb:
         06:44:7c:24:8c:6a:34:37:1a:38:bc:89:6c:72:0c:9b:69:bb:
         24:c6:1b:c5:96:e0:86:19:d7:38:be:45:cd:23:7b:95:3c:09:
         22:d1:56:c4:5b:ea:72:90:c3:91:9c:b9:46:35:c9:4d:a3:c8:
         77:34:38:c3:1e:b2:db:4a:13:37:8d:8a:c9:7a:4f:72:2c:ad:
         f5:4e:58:bb:62:52:6d:e5:90:ac:d1:f9:0f:f7:fb:fc:9c:f0:
         e7:c9:12:97:0c:13:5c:85:19:11:b1:58:c6:73:71:a5:09:3b:
         2a:a2:5d:16:ff:0b:af:e7:81:80:96:94:df:5f:8c:ac:2e:cc:
         31:77:fb:5a:33:36:cd:47:1f:6a:44:99:32:52:60:25:09:04:
         23:74:19:68:69:c8:38:c6:cc:b1:1a:37:55:36:aa:75:6b:84:
         4e:2f:fd:e5:09:65:54:21:7a:b3:8b:c9:8d:e0:5f:17:1d:cd:
         4f:58:ea:da:f9:41:37:3f:20:39:69:52:73:d8:f5:dd:b4:51:
         87:7d:8e:08
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUIHf2ed1TdyX2sXlz4G9vO9R8SMkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDk4NWVhNTBkZjU0ZTc5NWE0YmUxNGFkNTE4OGE4ZTUy
ODczNzg3MDM5YmI2YjI3YjIwHhcNMjIxMDE3MDUyMjQxWhcNMjMxMDE2MDUyNzQx
WjAzMTEwLwYDVQQDEygzREREMzY5RjlCN0E5QUJGNTVDQ0Y4ODhCOEVCQzc3MzE2
NERCN0IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uDv/1+pB1tP
+9yAcjSQwjHd2Htqm7IQ1NKbgW1zLLn3X8XQslSsgLCNrzzk1RhDzGFcSqnZNwwo
ktEgWdsC/lMEHGRfjjcXuwgeoqO9dQeJLBpizb3a1WWBAcGYwisBFh8k8Tkd1xPP
xPb83DtqY4shQ49w/AT/KjZ81nxC6qctmQuUYmwCadIJkcoImIEffI4SFnWaERMP
j9kZ1mRjR9LnIjn7VVJN0ITv87K3r8gYh2QDbuNT23K+29KtPprhlJ/pOzX1oHVa
4T+CpLfkEk2gQSuodnSvReMVKk+icFbr+3rbQ3L8l7HVUo0Cw1qzGVoyyaFX+Ci3
6zp1CU/SeQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFD3dNp+bepq/Vcz4iLjrx3MW
TbeyMB8GA1UdIwQYMBaAFBjAkk0jHaMBlRYLJe7mMn60Awb4MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxNzMzYzVjNWY2YjViLzAv
MThDMDkyNEQyMzFEQTMwMTk1MTYwQjI1RUVFNjMyN0VCNDAzMDZGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzcyMjViNDE1LThhZTAtNDUyMy1iMzdmLTc0ZWQ3ODA2NzZhYS8wOTg1
ZWE1MGRmNTRlNzk1YTRiZTE0YWQ1MTg4YThlNTI4NzM3ODcwMzliYjZiMjdiMi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MTcz
M2M1YzVmNmI1Yi8wLzM2MzYyZTMxMzEzODJlMzIzNDM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMDMyMzMzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnb3MA0GCSqGSIb3DQEB
CwUAA4IBAQCXfqC9j4buR/YrjpqQgPs84I1iIV7RXhZC7yeHCyxoHmpMEKjwMWJJ
LV3z92QnyMhxmU415/sGRHwkjGo0Nxo4vIlscgybabskxhvFluCGGdc4vkXNI3uV
PAki0VbEW+pykMORnLlGNclNo8h3NDjDHrLbShM3jYrJek9yLK31Tli7YlJt5ZCs
0fkP9/v8nPDnyRKXDBNchRkRsVjGc3GlCTsqol0W/wuv54GAlpTfX4ysLswxd/ta
MzbNRx9qRJkyUmAlCQQjdBloacg4xsyxGjdVNqp1a4ROL/3lCWVUIXqzi8mN4F8X
Hc1PWOra+UE3PyA5aVJz2PXdtFGHfY4I
-----END CERTIFICATE-----