Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130342e302f32342d3234203d3e20323131353835.roa
File:                     3231362e3234372e3130342e302f32342d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          kosXJjWHe909E8sWJVum4gyJ+JZVeRWvvrRqwg0IZXI=
Subject key identifier:   CE:21:5C:52:09:43:23:F1:F8:B2:5B:B9:6E:41:6E:76:66:9E:42:8B
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       2EB8ACD417673920C8B5A4A8B952640CF80B6DD9
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130342e302f32342d3234203d3e20323131353835.roa
Signing time:             Mon 28 Nov 2022 11:10:30 +0000
ROA not before:           Mon 28 Nov 2022 11:05:30 +0000
ROA not after:            Mon 27 Nov 2023 11:10:30 +0000
asID:                     211585
IP address blocks:        216.247.104.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b8:ac:d4:17:67:39:20:c8:b5:a4:a8:b9:52:64:0c:f8:0b:6d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Nov 28 11:05:30 2022 GMT
            Not After : Nov 27 11:10:30 2023 GMT
        Subject: CN=CE215C52094323F1F8B25BB96E416E76669E428B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c7:7c:e3:ba:0d:48:7a:65:a0:1c:41:ef:91:
                    63:bf:b9:04:2e:b7:94:3b:31:5c:9c:e7:98:8d:70:
                    fb:bb:1e:6d:a0:14:91:e0:2b:34:ce:39:a7:ba:4f:
                    b6:85:2d:c2:94:55:00:94:50:8c:b3:f2:44:a7:8f:
                    13:ee:a6:69:30:c7:31:76:e2:b0:c7:9b:f7:df:62:
                    24:20:59:d3:f8:fc:24:06:d9:83:9f:7d:ab:17:5f:
                    90:e5:05:95:3a:b1:b4:b8:48:9a:9b:77:e4:58:dc:
                    73:dd:23:e6:53:f3:f2:8c:2d:ef:0a:e1:5f:1c:c7:
                    1e:0f:41:08:db:88:12:6c:3c:3e:e6:5f:6e:d5:2a:
                    2c:ca:d7:67:76:6f:3e:b9:4c:83:70:82:5f:e4:82:
                    ad:13:5f:71:e7:9e:8e:51:a3:f8:08:d3:32:de:c4:
                    ba:a8:1d:60:1c:ce:ba:f1:00:86:19:fc:e3:93:30:
                    ae:7c:b3:34:b3:62:37:55:76:c7:e8:b7:52:ac:4e:
                    e6:4b:21:3d:50:f6:95:f7:2b:8b:dc:ee:be:c3:4f:
                    6e:ed:fb:0c:82:e8:1e:5d:43:53:e8:59:b7:99:ff:
                    f4:f7:df:28:1f:b1:8f:62:fc:cb:b4:98:ec:b2:67:
                    bd:10:2a:31:26:ee:3e:2f:4a:29:a6:e4:16:78:90:
                    65:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:21:5C:52:09:43:23:F1:F8:B2:5B:B9:6E:41:6E:76:66:9E:42:8B
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130342e302f32342d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:9a:83:f6:84:14:27:a0:04:ae:a4:b7:2d:44:36:e5:f1:25:
         a3:5e:c6:1b:27:31:0e:5f:10:50:e8:e8:87:79:cd:be:77:aa:
         3a:d2:2b:1b:bd:df:24:9a:fa:93:a3:0c:34:c7:e8:02:c7:89:
         87:aa:d8:cd:2e:75:e8:f3:64:ce:80:a6:38:ac:8d:48:bd:eb:
         71:be:ef:d7:e0:ac:e8:6d:fb:4f:06:e0:cc:f3:d2:28:cc:f0:
         64:66:2e:55:7c:b4:05:2d:ac:12:83:8c:f6:3f:75:6a:7c:c0:
         ed:99:31:15:fa:43:13:f3:f8:9c:00:5b:87:c2:23:21:47:f5:
         49:53:55:ab:0c:28:6b:7b:06:d8:bf:73:e2:dc:db:0d:38:f2:
         6a:ce:47:32:d2:ca:ba:38:b0:b0:6a:04:72:e5:4d:31:fe:e0:
         1a:91:15:ef:01:01:f4:d1:a9:99:5c:c4:bf:8e:c8:12:d5:e8:
         16:a1:52:0e:87:98:cb:9f:2d:11:da:61:fe:95:9b:d5:03:5c:
         51:f8:c3:51:c7:49:ff:c6:f8:96:1a:9c:86:1a:43:51:bf:f0:
         48:81:b1:32:66:57:c6:f6:96:18:76:21:b8:cb:7e:7a:49:7a:
         b9:69:df:22:fe:a5:dd:1c:5f:ad:4d:83:14:d4:b2:c1:8f:25:
         01:9d:94:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----