Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e203332323434.roa
File:                     34352e3133352e3136312e302f32342d3234203d3e203332323434.roa (raw, json)
Hash identifier:          HMTaX7yWzH/Z+h2uT+mkN4RPW0lPid/jHSapyWaFjEQ=
Subject key identifier:   93:5F:DB:F3:40:E6:55:AB:8B:01:42:F0:E1:A8:20:3E:32:0B:00:66
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       1FC5E50D1915EA4AFE3471C09E1B04CD2DD32D99
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e203332323434.roa
Signing time:             Mon 28 Nov 2022 11:10:30 +0000
ROA not before:           Mon 28 Nov 2022 11:05:30 +0000
ROA not after:            Mon 27 Nov 2023 11:10:30 +0000
asID:                     32244
IP address blocks:        45.135.161.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c5:e5:0d:19:15:ea:4a:fe:34:71:c0:9e:1b:04:cd:2d:d3:2d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Nov 28 11:05:30 2022 GMT
            Not After : Nov 27 11:10:30 2023 GMT
        Subject: CN=935FDBF340E655AB8B0142F0E1A8203E320B0066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4f:09:3f:6e:7c:35:26:d5:c0:f7:f6:4b:3d:
                    70:63:7e:16:5d:b2:e4:60:c4:2b:43:c2:f3:eb:1a:
                    74:c7:25:65:d4:78:29:09:89:e1:08:99:6b:9a:91:
                    1f:6b:b4:14:32:18:61:c3:39:49:07:e1:a6:96:17:
                    0e:52:64:14:5b:d9:ff:77:c3:7e:0e:ec:0c:73:b6:
                    81:93:69:85:34:3a:2b:0e:4d:2c:1b:ea:fb:4e:85:
                    a5:ec:08:cf:08:bb:0b:3a:d9:3a:0f:b2:91:fb:bd:
                    e1:6c:d4:8f:e7:0e:ab:03:5c:77:f9:3a:10:b9:36:
                    23:08:24:a1:15:ca:0c:57:dc:82:76:82:cd:81:d1:
                    e8:bd:62:11:fc:46:1d:83:5a:3d:2f:dc:71:4b:f2:
                    0c:70:e8:3c:4f:2d:00:61:d9:02:3c:03:78:af:25:
                    41:9a:c6:3c:7c:d6:6c:92:3f:4b:34:74:db:d5:85:
                    1c:98:8b:9f:cc:35:b6:b1:e4:62:51:9c:34:34:43:
                    f4:1c:94:e8:5c:ed:0b:1d:95:e0:45:95:ef:19:61:
                    19:e5:f3:3f:db:21:8c:77:ee:48:73:e8:01:96:d2:
                    fd:e4:89:9f:df:53:45:89:a6:f5:0e:8c:e8:48:a3:
                    66:60:cc:42:5e:c0:b4:5a:c0:9b:44:d5:03:0f:70:
                    e0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5F:DB:F3:40:E6:55:AB:8B:01:42:F0:E1:A8:20:3E:32:0B:00:66
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e203332323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:99:7a:79:ef:23:d9:b2:82:9b:af:09:05:b7:1e:77:b2:88:
         10:d6:b6:95:ee:60:02:1b:e3:75:48:92:4a:bd:e3:98:f4:05:
         9a:8d:26:b9:ed:af:42:6e:f7:f4:e5:aa:99:37:81:17:3c:18:
         80:e8:b4:c1:35:fb:87:bc:55:89:0b:d4:45:6c:57:7c:47:24:
         53:22:b4:18:2a:ad:50:84:84:f3:e4:17:f3:0a:38:37:bc:94:
         54:f6:19:17:6e:ac:e0:3f:b6:b2:4f:eb:2e:79:c4:c3:6e:78:
         54:19:75:11:32:94:11:22:97:bc:d9:8b:44:6a:4e:5b:1d:c8:
         24:af:86:30:28:5c:d3:ec:55:ee:c2:a9:cc:a9:f1:98:bc:b9:
         c2:5f:98:02:78:1f:14:0c:d5:c9:b5:20:68:80:f9:50:a8:40:
         30:c9:bb:9a:66:94:63:f5:ab:9a:80:86:2d:ba:1c:1a:85:a4:
         83:22:ef:3b:74:73:d6:00:49:2a:df:a6:54:4f:fb:70:5e:c4:
         60:03:f5:35:05:dc:86:08:1b:ae:d4:63:76:da:28:a2:66:90:
         2e:6d:b9:08:3e:80:d7:ef:a9:04:84:ad:04:60:c3:d1:fe:cc:
         f6:81:3b:db:d5:5f:0b:40:fd:28:2b:72:00:66:44:81:e6:aa:
         57:64:80:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----