Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39392e302f32342d3234203d3e203632323430.roa
File:                     3231362e3234372e39392e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier:          29KaINuyhxoxhtbUnbG+wRAJD7wjVWRcq77eoXCquFU=
Subject key identifier:   63:C0:4D:D8:02:74:16:69:14:CD:72:33:2F:D0:45:B4:26:A2:83:37
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       2B647CEE5F5F13E7B6426670AFF758850CC8332E
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39392e302f32342d3234203d3e203632323430.roa
Signing time:             Fri 30 Dec 2022 21:56:17 +0000
ROA not before:           Fri 30 Dec 2022 21:51:17 +0000
ROA not after:            Fri 29 Dec 2023 21:56:17 +0000
asID:                     62240
IP address blocks:        216.247.99.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:64:7c:ee:5f:5f:13:e7:b6:42:66:70:af:f7:58:85:0c:c8:33:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Dec 30 21:51:17 2022 GMT
            Not After : Dec 29 21:56:17 2023 GMT
        Subject: CN=63C04DD80274166914CD72332FD045B426A28337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ed:0e:39:cf:ba:ff:99:ba:9e:d4:f1:d8:dc:
                    64:b4:7e:3d:14:47:6d:c0:97:d7:2b:1b:1e:0e:bf:
                    63:45:2c:3c:45:11:e2:c0:59:a1:b3:73:f3:11:f3:
                    4c:df:a5:05:ce:f7:02:08:a1:e2:5e:61:c3:52:1d:
                    5d:79:9a:70:65:6e:18:8b:dc:9d:67:73:a1:86:cb:
                    8d:4f:d9:5f:df:4b:05:24:ba:d7:10:d5:8d:1f:ba:
                    c2:04:ef:9f:04:b1:1b:6c:36:5b:a2:ea:0a:0e:3b:
                    86:2e:cd:1c:37:14:a1:d6:7d:96:77:46:9f:95:21:
                    72:0b:d0:ef:51:e6:d3:6f:66:52:47:e3:4a:9c:9d:
                    cc:6d:a0:43:8e:6a:82:f4:fb:18:a8:a9:21:ff:95:
                    d0:fc:82:4e:da:37:d5:47:d4:79:b9:72:da:c5:a4:
                    c4:89:45:26:9e:48:a4:50:69:70:6a:ff:a7:08:1f:
                    6d:13:76:ed:41:4c:50:c2:ef:a7:19:ef:b7:12:6b:
                    3a:0c:96:cb:a3:a2:b2:b3:1e:97:9d:82:3e:dc:7e:
                    49:58:8e:9f:1d:29:c2:2e:e3:aa:2e:aa:a8:2b:94:
                    88:99:52:cf:f6:5b:50:3f:11:9a:2d:b5:53:c8:b2:
                    c7:ae:8e:07:f5:57:c1:66:75:ba:16:44:b0:a8:bd:
                    e1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C0:4D:D8:02:74:16:69:14:CD:72:33:2F:D0:45:B4:26:A2:83:37
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39392e302f32342d3234203d3e203632323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:54:d5:d9:d8:6a:68:65:a6:1b:04:10:a1:c0:76:27:38:ec:
         16:b2:fc:6d:9e:e7:4a:c6:9b:ad:15:5a:46:43:72:9f:b4:98:
         bb:4c:5b:2d:62:18:7f:c5:5a:56:73:2d:13:27:09:51:d2:2f:
         64:ef:0c:43:54:b5:b8:82:80:1b:02:d7:da:f2:61:39:8a:13:
         c6:cf:a6:66:9f:fb:d1:ac:4f:df:2e:31:63:9f:12:c8:e6:3d:
         bc:48:5a:1f:ff:da:b0:33:2b:8f:c2:ea:2c:94:8e:87:0e:31:
         ba:13:d6:0a:ec:0a:c4:98:fd:e8:b7:e8:08:25:ef:a0:c3:35:
         75:1a:c0:cd:13:ea:b3:6a:35:45:67:e8:f6:ed:d2:33:78:bf:
         fc:c1:c6:12:f1:e8:73:86:88:4d:64:8c:7d:23:a2:0b:c9:cf:
         64:96:0e:86:37:ca:33:49:0f:32:e6:0f:f8:12:9b:f2:ef:f4:
         96:66:66:38:9b:57:8e:2d:b6:4d:46:27:36:31:a1:81:e9:1e:
         3a:57:89:b3:89:7b:16:9d:e4:f1:38:c6:41:08:d5:7d:88:bc:
         9f:e4:a0:94:ef:3c:97:6b:8b:3b:61:45:fd:a0:90:50:d9:e5:
         40:fd:e9:11:8f:88:bd:5c:ed:32:04:c0:68:66:dd:c4:b8:28:
         47:bc:9d:de
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUK2R87l9fE+e2QmZwr/dYhQzIMy4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjIxMjMwMjE1MTE3WhcNMjMxMjI5MjE1NjE3
WjAzMTEwLwYDVQQDEyg2M0MwNEREODAyNzQxNjY5MTRDRDcyMzMyRkQwNDVCNDI2
QTI4MzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou0OOc+6/5m6
ntTx2NxktH49FEdtwJfXKxseDr9jRSw8RRHiwFmhs3PzEfNM36UFzvcCCKHiXmHD
Uh1deZpwZW4Yi9ydZ3OhhsuNT9lf30sFJLrXENWNH7rCBO+fBLEbbDZbouoKDjuG
Ls0cNxSh1n2Wd0aflSFyC9DvUebTb2ZSR+NKnJ3MbaBDjmqC9PsYqKkh/5XQ/IJO
2jfVR9R5uXLaxaTEiUUmnkikUGlwav+nCB9tE3btQUxQwu+nGe+3Ems6DJbLo6Ky
sx6XnYI+3H5JWI6fHSnCLuOqLqqoK5SImVLP9ltQPxGaLbVTyLLHro4H9VfBZnW6
FkSwqL3hiwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFGPATdgCdBZpFM1yMy/QRbQm
ooM3MB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzMyMzEzNjJlMzIzNDM3MmUzOTM5MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMjMyMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANj3YzANBgkqhkiG9w0BAQsF
AAOCAQEAO1TV2dhqaGWmGwQQocB2JzjsFrL8bZ7nSsabrRVaRkNyn7SYu0xbLWIY
f8VaVnMtEycJUdIvZO8MQ1S1uIKAGwLX2vJhOYoTxs+mZp/70axP3y4xY58SyOY9
vEhaH//asDMrj8LqLJSOhw4xuhPWCuwKxJj96LfoCCXvoMM1dRrAzRPqs2o1RWfo
9u3SM3i//MHGEvHoc4aITWSMfSOiC8nPZJYOhjfKM0kPMuYP+BKb8u/0lmZmOJtX
ji22TUYnNjGhgekeOleJs4l7Fp3k8TjGQQjVfYi8n+SglO88l2uLO2FF/aCQUNnl
QP3pEY+IvVztMgTAaGbdxLgoR7yd3g==
-----END CERTIFICATE-----