Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130342e302f32342d3234203d3e203535313534.roa
File:                     3231362e3234372e3130342e302f32342d3234203d3e203535313534.roa (raw, json)
Hash identifier:          DJzJyMMKVgy6t59tbyZ6DZaKuG/m7KGBd4TCeNu1k9I=
Subject key identifier:   F8:2C:0B:EE:A1:EC:B4:47:DB:A4:BD:63:6E:DE:DF:6D:33:7A:DD:51
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       0A1C58A8F8AC16781670C7C6400B83719FE2023D
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130342e302f32342d3234203d3e203535313534.roa
Signing time:             Thu 22 Dec 2022 17:07:14 +0000
ROA not before:           Thu 22 Dec 2022 17:02:14 +0000
ROA not after:            Thu 21 Dec 2023 17:07:14 +0000
asID:                     55154
IP address blocks:        216.247.104.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1c:58:a8:f8:ac:16:78:16:70:c7:c6:40:0b:83:71:9f:e2:02:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Dec 22 17:02:14 2022 GMT
            Not After : Dec 21 17:07:14 2023 GMT
        Subject: CN=F82C0BEEA1ECB447DBA4BD636EDEDF6D337ADD51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:03:4b:8c:90:d4:93:09:9d:2f:8d:01:59:
                    6b:59:a1:38:73:84:f7:f2:fc:ec:5d:0f:0d:ea:68:
                    76:7f:4e:62:42:08:d9:bd:16:b2:09:d7:7d:1f:b4:
                    77:7b:9c:b4:6c:ba:96:40:ab:46:99:8f:3e:5a:0a:
                    26:57:3b:66:3f:40:0e:35:0c:9c:69:12:76:96:d8:
                    8c:c9:f7:14:d3:df:76:2b:e8:cb:91:52:23:64:56:
                    e5:26:d2:4d:4d:71:f6:dd:27:af:b0:03:f9:7a:9a:
                    00:bd:5f:92:cc:49:56:69:e6:34:dc:a8:73:96:03:
                    9f:29:82:59:ef:30:f3:b8:29:e2:a4:15:a5:2c:cd:
                    8a:4f:93:0d:ea:42:81:fa:c2:a7:ec:e3:34:91:b7:
                    a8:68:11:a4:67:bf:91:98:4a:7f:11:a1:7f:f5:2f:
                    70:50:44:f9:5c:66:5d:0a:bd:38:a6:20:f0:13:39:
                    76:ad:21:c3:51:68:50:60:fd:45:ca:bd:61:01:45:
                    88:9f:a4:f0:5c:5c:9c:f7:f8:7c:b8:8c:e1:a7:82:
                    83:42:67:98:5d:50:84:65:92:dd:05:56:b5:1a:9f:
                    47:51:18:98:f1:37:45:7c:37:8d:9c:81:88:5e:9a:
                    2d:50:1d:ec:5c:cb:ed:d9:05:13:28:0d:2e:98:f9:
                    ac:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2C:0B:EE:A1:EC:B4:47:DB:A4:BD:63:6E:DE:DF:6D:33:7A:DD:51
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130342e302f32342d3234203d3e203535313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:54:4f:38:8f:5b:28:c6:2c:af:fb:33:c5:cb:14:2f:8c:60:
         d2:3f:33:83:e2:99:5c:8a:71:5d:e2:0b:c6:93:84:d7:e5:40:
         14:a1:7a:d9:6c:97:41:ea:d8:a8:e0:ac:cc:ae:d9:c0:ea:16:
         55:08:4a:dc:8b:fb:85:10:5f:92:95:c1:8f:8b:0a:cc:b2:1f:
         ec:00:a7:91:72:9c:91:41:0f:bc:28:f8:24:75:52:84:b4:63:
         88:5b:86:24:60:b1:01:2e:0c:2d:7f:37:ff:85:c8:57:9a:f7:
         fc:15:d6:29:ea:f1:6e:56:1d:cd:65:d2:d2:cb:34:0e:0c:f0:
         a5:8b:19:ae:5b:27:a6:81:6e:74:9a:1d:af:71:1f:b1:51:c1:
         ac:38:53:92:40:41:fc:7d:72:34:2e:2c:9a:6f:1b:82:cf:a0:
         8d:c0:98:93:52:9f:18:3b:93:e7:91:08:cf:21:67:17:6e:d8:
         ba:2d:f7:cb:99:2f:9c:1c:63:4a:a1:66:37:bf:57:43:7f:d3:
         60:eb:0f:de:bc:74:fc:86:0a:cd:13:9c:be:f0:95:01:1d:4b:
         4b:19:86:85:3c:68:43:d4:82:c9:a9:2e:23:e6:c0:64:b0:9e:
         42:77:7d:49:3e:1a:39:f1:c2:7b:f6:52:d6:82:7d:37:5a:b8:
         7a:72:eb:8f
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUChxYqPisFngWcMfGQAuDcZ/iAj0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjIxMjIyMTcwMjE0WhcNMjMxMjIxMTcwNzE0
WjAzMTEwLwYDVQQDEyhGODJDMEJFRUExRUNCNDQ3REJBNEJENjM2RURFREY2RDMz
N0FERDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDgDS4yQ1JMJ
nS+NAVlrWaE4c4T38vzsXQ8N6mh2f05iQgjZvRayCdd9H7R3e5y0bLqWQKtGmY8+
WgomVztmP0AONQycaRJ2ltiMyfcU0992K+jLkVIjZFblJtJNTXH23SevsAP5epoA
vV+SzElWaeY03KhzlgOfKYJZ7zDzuCnipBWlLM2KT5MN6kKB+sKn7OM0kbeoaBGk
Z7+RmEp/EaF/9S9wUET5XGZdCr04piDwEzl2rSHDUWhQYP1Fyr1hAUWIn6TwXFyc
9/h8uIzhp4KDQmeYXVCEZZLdBVa1Gp9HURiY8TdFfDeNnIGIXpotUB3sXMvt2QUT
KA0umPmsawIDAQABo4ICtDCCArAwHQYDVR0OBBYEFPgsC+6h7LRH26S9Y27e320z
et1RMB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzMyMzEzNjJlMzIzNDM3MmUzMTMwMzQyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNTM1MzEzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PdoMA0GCSqGSIb3DQEB
CwUAA4IBAQCZVE84j1soxiyv+zPFyxQvjGDSPzOD4plcinFd4gvGk4TX5UAUoXrZ
bJdB6tio4KzMrtnA6hZVCErci/uFEF+SlcGPiwrMsh/sAKeRcpyRQQ+8KPgkdVKE
tGOIW4YkYLEBLgwtfzf/hchXmvf8FdYp6vFuVh3NZdLSyzQODPClixmuWyemgW50
mh2vcR+xUcGsOFOSQEH8fXI0LiyabxuCz6CNwJiTUp8YO5PnkQjPIWcXbti6LffL
mS+cHGNKoWY3v1dDf9Ng6w/evHT8hgrNE5y+8JUBHUtLGYaFPGhD1ILJqS4j5sBk
sJ5Cd31JPho58cJ79lLWgn03Wrh6cuuP
-----END CERTIFICATE-----