Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136332e302f32342d3234203d3e20333937323730.roa
File:                     34352e3133352e3136332e302f32342d3234203d3e20333937323730.roa (raw, json)
Hash identifier:          QbyAoppaBuk5S+tOs0OK3BoAVvh1laJIRAhRBs+rWt8=
Subject key identifier:   70:A7:FF:73:1D:16:0B:3B:C5:DE:DF:05:F4:9C:02:8A:FF:68:F5:33
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       252E6F3D2A09D5492859C60DEB10C2716A5D9207
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136332e302f32342d3234203d3e20333937323730.roa
Signing time:             Tue 28 Feb 2023 02:49:47 +0000
ROA not before:           Tue 28 Feb 2023 02:44:47 +0000
ROA not after:            Tue 27 Feb 2024 02:49:47 +0000
asID:                     397270
IP address blocks:        45.135.163.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2e:6f:3d:2a:09:d5:49:28:59:c6:0d:eb:10:c2:71:6a:5d:92:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Feb 28 02:44:47 2023 GMT
            Not After : Feb 27 02:49:47 2024 GMT
        Subject: CN=70A7FF731D160B3BC5DEDF05F49C028AFF68F533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:72:c5:f0:da:63:93:5d:c0:d7:17:4d:ff:a2:
                    37:bf:18:2e:bc:6f:71:3a:5f:5a:84:b0:be:d5:97:
                    59:e7:e6:c2:60:41:d0:04:5a:8f:2a:4c:6e:03:0c:
                    b7:c9:62:11:df:48:47:ec:2a:c5:dd:3d:76:dd:97:
                    a5:15:22:97:73:48:bf:85:ca:d2:cd:e3:d6:15:46:
                    8f:9a:4f:6e:20:97:f6:40:3b:31:47:f2:2b:39:05:
                    66:b9:db:d6:e2:0a:00:94:0b:4e:ce:c6:df:43:33:
                    80:d2:f2:2b:e7:78:73:34:da:81:a3:02:ed:bd:f5:
                    df:24:27:c5:4c:50:aa:58:37:57:ee:9e:9d:fd:ae:
                    72:18:c9:2d:d8:39:10:ca:26:57:1f:d1:f7:72:54:
                    be:1b:47:62:31:b9:44:0e:09:ea:f1:a6:b6:8f:fd:
                    fd:4e:97:61:cd:d2:21:71:6e:e7:fa:fe:92:af:89:
                    ad:c0:2e:12:ee:55:fe:fc:79:2e:fe:6d:57:95:28:
                    f7:61:79:16:d9:05:33:cf:55:3b:64:83:b5:32:8c:
                    44:e8:df:06:cd:5c:70:36:79:5c:9b:d7:a9:9b:25:
                    88:70:95:18:ec:33:e1:2c:4a:d8:74:12:45:63:b9:
                    18:a2:50:12:cf:33:f7:cc:bd:bf:03:d5:0b:3c:88:
                    bc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A7:FF:73:1D:16:0B:3B:C5:DE:DF:05:F4:9C:02:8A:FF:68:F5:33
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136332e302f32342d3234203d3e20333937323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:ed:2a:e9:1d:61:aa:e0:5c:b9:57:59:6c:80:7c:d2:a9:0a:
         5b:46:69:25:47:a0:04:69:6c:80:bb:b3:1d:ce:c6:9f:0e:95:
         95:a8:20:88:be:75:b4:a9:52:c5:4f:23:c3:e6:06:62:ab:d5:
         1a:20:36:31:66:f0:27:7b:fb:3d:9f:d6:61:ab:80:97:8d:a9:
         29:27:26:4b:f1:00:58:b2:d0:f4:82:4e:ba:b0:c1:4a:46:df:
         66:bc:3d:e3:55:63:75:92:38:0f:30:47:ee:91:79:fd:e6:8c:
         10:cd:b9:72:12:f3:a7:5b:ed:70:7c:58:06:be:69:90:68:cb:
         31:c7:a3:d1:cd:bb:b9:08:fa:db:4d:81:d3:82:c9:23:96:cf:
         a9:b3:3b:fe:59:ed:f8:6e:7d:48:9d:e0:b1:94:bc:a1:1e:ef:
         fa:66:2c:38:7e:45:14:6e:44:0e:ce:be:44:92:25:3d:69:1a:
         4f:50:3d:6d:03:01:ad:8b:41:54:aa:ad:5b:e7:d6:cb:9f:d1:
         b1:79:26:e5:35:b2:91:a9:6b:a7:77:2f:54:f7:d9:a2:78:a7:
         93:f5:fc:8d:d6:84:a1:9a:8d:94:f1:6c:bc:95:9f:a2:1f:f9:
         03:2b:a9:98:c7:3c:6a:b4:75:f7:91:18:a4:69:8b:8d:7e:85:
         db:aa:ab:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----