Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e20323132363639.roa
File:                     34352e3133352e3136302e302f32342d3234203d3e20323132363639.roa (raw, json)
Hash identifier:          6AO6F9WH7ih3M2skErzSI6aLRtoUTXfVckE2SfkMkwE=
Subject key identifier:   08:1C:91:7E:04:62:21:D8:49:15:58:27:46:D1:42:F0:F9:AB:D9:9A
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       63E5EF70D665D704AD93B3230901A1662413C5D0
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e20323132363639.roa
Signing time:             Mon 28 Nov 2022 11:10:31 +0000
ROA not before:           Mon 28 Nov 2022 11:05:31 +0000
ROA not after:            Mon 27 Nov 2023 11:10:31 +0000
asID:                     212669
IP address blocks:        45.135.160.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e5:ef:70:d6:65:d7:04:ad:93:b3:23:09:01:a1:66:24:13:c5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Nov 28 11:05:31 2022 GMT
            Not After : Nov 27 11:10:31 2023 GMT
        Subject: CN=081C917E046221D84915582746D142F0F9ABD99A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:65:41:e2:1f:bd:90:cc:c7:86:de:fb:48:
                    67:44:e0:d3:23:dd:bc:ff:19:de:a3:9a:be:53:d2:
                    6e:47:e2:c7:ba:f5:41:89:4d:fe:11:b8:44:94:e1:
                    09:89:03:2a:1d:f1:cd:95:40:f0:d5:3e:a9:e1:87:
                    6b:7c:7b:2d:5c:63:45:dc:5a:39:fa:15:f8:4a:d1:
                    2a:e4:4c:43:9e:45:a4:0a:b0:e5:b9:fa:20:b2:bf:
                    39:70:84:74:78:37:d6:1b:7b:c3:5b:47:d6:d9:3c:
                    ef:5c:71:6a:2a:ac:87:f4:7e:8e:d2:f2:a4:ab:60:
                    63:86:0f:fe:d7:7e:0b:84:60:b1:fb:1f:5c:09:d8:
                    75:34:db:3e:1d:d3:cc:d6:cd:25:15:71:e0:8b:fc:
                    01:f0:7d:d1:56:75:81:3b:0e:b6:40:c6:9d:c9:52:
                    ea:c7:09:0e:0f:11:5b:5c:d8:eb:bb:3c:64:e6:b2:
                    1b:9b:df:31:19:d1:25:7d:8f:74:50:b4:5f:84:15:
                    3a:b3:97:1b:57:59:03:81:48:62:2d:95:25:2d:df:
                    a1:96:84:2e:eb:51:b0:81:f6:be:56:2c:e4:d0:27:
                    20:58:88:76:95:1c:a4:16:26:37:ba:a0:74:cd:1b:
                    bd:82:89:07:9a:6d:9f:ea:9e:39:30:38:ef:38:6d:
                    40:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1C:91:7E:04:62:21:D8:49:15:58:27:46:D1:42:F0:F9:AB:D9:9A
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e20323132363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:1c:b4:d1:70:f1:4d:1e:74:ea:85:3e:57:e5:0b:ea:dc:e6:
         0d:7b:e7:b8:64:9f:14:d5:08:b5:46:2c:1a:ac:8f:e1:96:78:
         0e:e6:eb:8c:af:48:9b:78:3f:f1:ab:f2:75:fd:9a:11:b4:79:
         24:c4:0e:e9:7a:bc:9a:c7:55:e2:59:19:f2:a0:08:8f:ce:dc:
         cb:b8:ee:c9:65:47:48:3a:b8:55:96:88:19:d3:a5:5f:c7:0b:
         36:52:25:37:1b:5c:d4:21:14:ac:9c:61:aa:c0:62:f9:c6:0a:
         71:f2:f2:4a:ca:7f:a1:92:be:7d:78:aa:68:93:13:2f:a9:76:
         cf:22:cc:3f:1b:b1:29:0d:ff:d0:ce:3c:77:30:e4:3a:cd:0d:
         d4:bf:f5:b3:f8:a3:b9:8e:08:9a:50:32:1b:71:1d:4d:99:d7:
         fa:f2:c5:71:b3:74:32:aa:32:d9:5a:fd:7e:43:1c:28:95:79:
         c7:44:31:5d:0e:d9:4e:c9:f1:e4:25:45:df:94:73:b5:48:b8:
         c3:6f:8d:9f:76:0b:33:4f:ee:ec:d6:e9:4f:92:dc:4c:56:e6:
         f9:91:db:e7:37:b6:7c:3f:b4:5b:4f:5f:95:f5:e9:7d:c6:15:
         07:71:76:88:c8:f6:6e:6e:8d:cd:7e:ad:86:1c:8f:49:37:29:
         a8:73:8c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----