Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130342e302f32342d3234203d3e203631333137.roa
File:                     3231362e3234372e3130342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          R1fsZ06mcLDrLdilFCkFvM5SgdEURF/OVbj5nSy8BU4=
Subject key identifier:   56:C9:1E:5F:86:E0:8F:C9:F7:29:20:F1:AA:5F:3B:AB:EB:1A:CE:1E
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       79CADEE42B9E2C23EBB5E93799D6958D20DB92FF
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130342e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 28 Nov 2022 11:10:30 +0000
ROA not before:           Mon 28 Nov 2022 11:05:30 +0000
ROA not after:            Mon 27 Nov 2023 11:10:30 +0000
asID:                     61317
IP address blocks:        216.247.104.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ca:de:e4:2b:9e:2c:23:eb:b5:e9:37:99:d6:95:8d:20:db:92:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Nov 28 11:05:30 2022 GMT
            Not After : Nov 27 11:10:30 2023 GMT
        Subject: CN=56C91E5F86E08FC9F72920F1AA5F3BABEB1ACE1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:3d:98:2f:43:f3:e6:fa:22:d4:cd:c5:e3:
                    d4:f5:46:a0:39:c2:e8:c7:4b:df:b2:6f:57:2e:d3:
                    8e:8c:7e:a8:4b:69:ae:fa:94:58:33:1a:00:5f:f1:
                    66:5a:7e:40:75:dd:c8:81:05:8f:42:0c:64:10:32:
                    a6:95:f3:89:00:8b:de:0c:7a:4c:8f:71:97:dd:f9:
                    9c:3f:0c:ed:6e:af:1b:e6:56:cd:0d:8a:18:c2:7f:
                    71:c3:ba:a1:17:c7:3a:ef:ac:5c:52:b8:6a:a8:83:
                    3d:2a:27:91:ec:6c:70:30:82:db:45:f8:3f:ab:7c:
                    22:5f:21:70:3d:af:82:bf:08:12:c3:df:25:88:ad:
                    ee:f6:79:50:a8:74:aa:bd:f8:fb:00:92:03:c5:5d:
                    41:66:5c:2b:47:72:f8:25:b3:dd:54:c2:40:53:4a:
                    2a:43:ea:82:93:c7:eb:0b:10:80:81:2d:15:f7:ad:
                    d5:17:e3:53:40:18:67:0e:4a:78:da:e7:22:fd:e9:
                    fb:a8:ba:18:38:88:00:86:66:e2:0d:dc:d7:19:45:
                    8c:9a:9b:6b:2f:79:9d:0d:2c:5d:da:5a:6d:da:8e:
                    3f:e1:00:a7:e8:5e:ec:6a:a8:88:d0:94:10:72:19:
                    46:ce:2e:54:b8:3e:12:dd:23:f8:48:fb:03:ef:88:
                    02:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C9:1E:5F:86:E0:8F:C9:F7:29:20:F1:AA:5F:3B:AB:EB:1A:CE:1E
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:c9:da:8e:cf:73:cb:20:77:50:4d:9b:73:3b:b7:3c:85:24:
         f2:e8:54:45:11:89:8b:64:b0:c7:e6:43:1c:a6:4e:22:45:95:
         6a:da:42:c7:85:0e:a5:2e:35:43:58:fc:b2:8d:64:00:13:11:
         0b:32:2d:7a:1c:76:b4:ca:b8:46:cc:04:14:f1:bb:19:99:08:
         81:60:58:9a:1b:65:cf:22:52:5d:1f:73:f1:bc:8b:5e:e6:8c:
         b5:6f:fc:0d:50:f4:f1:5a:05:3f:e6:91:fb:f7:a9:0b:d3:fe:
         4c:86:08:c4:f5:fa:28:30:79:22:20:22:7b:f7:a2:a9:2d:3e:
         95:d2:3b:b9:f1:5c:38:63:b1:16:e1:87:26:5c:a1:60:39:99:
         57:25:ea:fe:6c:a9:63:3a:e8:06:6b:93:fc:83:0d:0b:62:61:
         3b:a0:49:48:ee:87:82:72:c8:33:23:e7:28:d8:73:57:ff:b3:
         c0:b7:56:13:c1:22:2f:96:9e:ce:f8:9f:00:f2:53:4d:2f:17:
         23:e2:4c:f3:37:1a:66:20:ac:9a:65:17:9b:18:a1:5e:16:9f:
         dc:32:1f:5c:48:c6:71:ab:f0:4e:37:a1:14:c0:af:c1:2d:08:
         8f:c6:33:84:f1:c4:69:a5:df:d0:29:9d:55:0f:32:52:27:d1:
         58:48:a0:6f
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUecre5CueLCPrtek3mdaVjSDbkv8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjIxMTI4MTEwNTMwWhcNMjMxMTI3MTExMDMw
WjAzMTEwLwYDVQQDEyg1NkM5MUU1Rjg2RTA4RkM5RjcyOTIwRjFBQTVGM0JBQkVC
MUFDRTFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwE9mC9D8+b6
ItTNxePU9UagOcLox0vfsm9XLtOOjH6oS2mu+pRYMxoAX/FmWn5Add3IgQWPQgxk
EDKmlfOJAIveDHpMj3GX3fmcPwztbq8b5lbNDYoYwn9xw7qhF8c676xcUrhqqIM9
KieR7GxwMILbRfg/q3wiXyFwPa+CvwgSw98liK3u9nlQqHSqvfj7AJIDxV1BZlwr
R3L4JbPdVMJAU0oqQ+qCk8frCxCAgS0V963VF+NTQBhnDkp42uci/en7qLoYOIgA
hmbiDdzXGUWMmptrL3mdDSxd2lpt2o4/4QCn6F7saqiI0JQQchlGzi5UuD4S3SP4
SPsD74gCmwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFFbJHl+G4I/J9ykg8apfO6vr
Gs4eMB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzMyMzEzNjJlMzIzNDM3MmUzMTMwMzQyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PdoMA0GCSqGSIb3DQEB
CwUAA4IBAQAqydqOz3PLIHdQTZtzO7c8hSTy6FRFEYmLZLDH5kMcpk4iRZVq2kLH
hQ6lLjVDWPyyjWQAExELMi16HHa0yrhGzAQU8bsZmQiBYFiaG2XPIlJdH3PxvIte
5oy1b/wNUPTxWgU/5pH796kL0/5MhgjE9fooMHkiICJ796KpLT6V0ju58Vw4Y7EW
4YcmXKFgOZlXJer+bKljOugGa5P8gw0LYmE7oElI7oeCcsgzI+co2HNX/7PAt1YT
wSIvlp7O+J8A8lNNLxcj4kzzNxpmIKyaZRebGKFeFp/cMh9cSMZxq/BON6EUwK/B
LQiPxjOE8cRppd/QKZ1VDzJSJ9FYSKBv
-----END CERTIFICATE-----