Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131302e302f32342d3234203d3e20323132323338.roa
File:                     3231362e3234372e3131302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          frdNtAU9g5T7QWbltqTjxl2lzDBoRxvZN3Eghg8kLo8=
Subject key identifier:   64:16:96:48:2A:DF:5B:C7:14:D0:DF:9F:54:66:46:0E:B1:1F:50:CF
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       2E05FA7EF5694E953DCA198AA1CC9B51CD9E3A77
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131302e302f32342d3234203d3e20323132323338.roa
Signing time:             Mon 28 Nov 2022 11:10:30 +0000
ROA not before:           Mon 28 Nov 2022 11:05:30 +0000
ROA not after:            Mon 27 Nov 2023 11:10:30 +0000
asID:                     212238
IP address blocks:        216.247.110.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:05:fa:7e:f5:69:4e:95:3d:ca:19:8a:a1:cc:9b:51:cd:9e:3a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Nov 28 11:05:30 2022 GMT
            Not After : Nov 27 11:10:30 2023 GMT
        Subject: CN=641696482ADF5BC714D0DF9F5466460EB11F50CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:2f:be:37:1c:0d:a4:e3:99:eb:ed:3c:30:
                    dd:d4:ab:94:46:87:88:57:6c:27:cd:10:77:cf:64:
                    e0:97:1a:d8:42:87:7a:34:49:fb:26:21:7e:d1:c1:
                    8a:77:55:6e:03:ba:65:b7:fc:75:98:58:e5:a9:1e:
                    ae:2b:f4:25:54:8f:d1:4c:8a:3e:cd:5d:aa:d1:1a:
                    15:7f:5a:cb:69:67:1d:d4:21:80:50:00:c4:4c:e3:
                    92:99:bc:e5:be:5c:94:e5:22:67:0c:93:cc:dd:31:
                    47:4a:75:7b:e2:4f:e7:ec:36:1c:e4:41:8a:eb:d4:
                    ab:7d:78:7f:27:cb:cd:36:21:f5:57:7a:16:1f:63:
                    f3:cf:c1:c3:d1:66:77:3e:05:7c:de:f9:0d:06:70:
                    d9:40:c8:be:06:84:79:52:22:07:da:09:28:06:cf:
                    0a:08:c2:5f:42:c0:c7:04:80:42:f1:4a:f3:96:e3:
                    fc:57:61:af:13:10:42:de:32:22:52:65:d7:a4:fd:
                    36:4d:ce:a4:e2:e5:98:f4:eb:8b:83:a3:96:a2:05:
                    77:73:b1:db:72:25:bc:7b:de:8a:03:5c:34:34:fa:
                    c6:94:ba:d2:00:c8:c1:e3:08:7a:38:23:2e:3f:0a:
                    af:6a:ad:0c:90:80:3c:7a:b0:b8:2d:17:1c:8e:cb:
                    67:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:16:96:48:2A:DF:5B:C7:14:D0:DF:9F:54:66:46:0E:B1:1F:50:CF
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131302e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:a3:bb:9e:d0:ea:ee:d7:e9:8a:ac:c0:c1:c6:2b:8e:26:6d:
         ea:cc:1b:9a:3d:6d:b6:01:b4:b4:63:bd:ce:e2:54:8f:65:54:
         73:c7:9a:e9:d2:fc:28:b8:94:1e:20:b9:8c:9c:a2:4a:47:31:
         61:25:8d:e7:5b:d9:e3:43:84:92:d9:97:98:80:d2:f7:08:df:
         2b:c8:9b:e3:39:7f:dd:23:07:01:36:d0:01:1b:d5:7e:8b:e7:
         00:8a:e6:97:79:8e:a2:74:74:81:2f:9d:47:0c:64:1f:ee:d9:
         4e:f3:63:9a:30:b1:b4:5d:0b:48:f4:3a:49:5e:9c:ea:58:a6:
         7a:d8:77:ee:11:e7:41:11:94:fb:23:33:1a:a1:8e:69:14:22:
         78:d5:8c:c2:8d:e1:39:57:c3:05:11:23:31:f6:93:15:98:53:
         7a:85:1d:6e:6d:3a:2d:13:bc:60:bb:7e:b0:eb:e1:44:9f:62:
         86:db:c4:7d:2a:0f:55:99:bf:b5:4b:8b:0f:e9:6d:35:b0:b4:
         d4:07:b3:d8:de:ac:b7:bb:d0:54:d2:c0:e3:ff:72:0c:3b:72:
         9f:a0:79:2e:e1:02:ed:4d:61:41:75:3f:97:ca:df:ce:43:f8:
         b0:32:65:f2:c6:84:5a:b7:64:d6:d9:66:99:e6:f8:8e:82:a3:
         0f:6b:27:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----