Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e3130322e302f32342d3234203d3e203336323336.roa
File:                     3130342e3232352e3130322e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          QDNvpWDNJeccotng7d139hyxA0NP77oDyLNIXsbe2IY=
Subject key identifier:   C3:52:A8:16:1A:2C:69:61:D4:A6:C8:87:9A:34:37:C9:4A:19:D0:E6
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       50E18941B73007C9A49F8DA444F225661FB2D82C
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e3130322e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 31 Oct 2022 17:50:13 +0000
ROA not before:           Mon 31 Oct 2022 17:45:13 +0000
ROA not after:            Mon 30 Oct 2023 17:50:13 +0000
asID:                     36236
IP address blocks:        104.225.102.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e1:89:41:b7:30:07:c9:a4:9f:8d:a4:44:f2:25:66:1f:b2:d8:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:45:13 2022 GMT
            Not After : Oct 30 17:50:13 2023 GMT
        Subject: CN=C352A8161A2C6961D4A6C8879A3437C94A19D0E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:86:72:4d:e0:26:f2:dd:ed:18:02:b5:52:af:
                    60:77:29:21:51:ae:7d:97:08:3d:18:18:c3:75:f3:
                    8f:a1:d8:2f:e6:85:f7:dc:14:8b:83:d5:96:67:19:
                    5f:d3:6c:c8:c6:75:c4:a0:fe:c0:9b:12:57:69:83:
                    04:d5:df:b3:bb:a6:ca:6b:c2:db:c9:21:cc:53:92:
                    a8:b0:28:d0:7e:b0:d8:7f:7b:69:1c:73:a5:56:d0:
                    23:1d:1c:61:f2:cb:ba:91:86:62:f0:3b:70:af:02:
                    78:95:0d:41:42:a1:cf:2a:38:8f:46:64:24:28:70:
                    7a:30:56:1f:c0:40:44:98:ad:ee:5e:92:41:d8:cd:
                    2a:76:08:d8:af:5d:0d:3b:bd:0b:85:81:bb:a8:30:
                    5d:2d:31:a1:34:a5:a1:2f:68:5b:51:c1:59:07:fc:
                    c3:0b:9a:61:24:3c:92:70:fe:29:28:91:2c:78:ae:
                    e8:07:73:5d:82:bc:eb:21:cf:7f:87:77:ba:11:fa:
                    27:48:fd:f5:e7:b7:42:ae:5e:ac:e6:aa:94:6d:57:
                    1d:c0:4f:a8:d8:97:88:4c:28:89:66:ce:79:48:31:
                    d0:99:7a:5b:b6:43:b2:0e:c8:ab:08:f8:73:5c:27:
                    d0:cf:41:1f:0a:cb:11:30:8a:3a:41:35:65:85:15:
                    c2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:52:A8:16:1A:2C:69:61:D4:A6:C8:87:9A:34:37:C9:4A:19:D0:E6
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e3130322e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:3f:1d:09:8f:e8:e7:e1:6a:fa:a7:b5:be:71:15:e7:7f:fb:
         36:8e:c3:dc:5a:08:24:86:c7:98:6a:34:ea:e7:39:b9:74:e8:
         a1:fa:4d:b7:ab:82:7a:0d:c4:46:7b:59:6e:74:cf:30:c2:7a:
         5d:58:6c:9c:f5:0e:75:86:5e:f3:dc:ed:3e:84:78:34:1e:bb:
         48:06:a9:27:78:17:9d:0e:33:4a:26:53:a3:59:b6:7d:6f:fc:
         64:76:63:a5:35:e4:68:69:c3:e8:b0:4c:75:7f:63:6e:9d:e4:
         b7:44:2e:37:c2:21:6b:36:1a:d4:85:49:56:75:16:69:31:84:
         3e:80:50:2d:d3:e4:78:2e:38:f2:a2:50:73:7f:bb:0d:92:6b:
         c6:1a:11:fe:1a:1c:e2:35:30:fa:eb:b9:0b:bd:4d:cb:69:c5:
         16:be:3f:88:95:27:73:2c:f5:f1:be:20:dc:9e:72:ab:aa:68:
         02:15:36:6b:75:4b:73:a5:1d:9c:cf:32:f7:3a:20:f9:72:5b:
         f6:57:36:95:09:5d:87:fe:21:fd:80:8a:06:cf:79:8b:ba:e3:
         3f:d1:33:1a:b8:d3:4f:79:b7:86:a1:c6:fa:2a:f2:2f:33:1f:
         52:48:84:db:df:76:96:de:fe:26:98:c5:d5:65:45:5a:f0:20:
         eb:ce:e1:92
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUUOGJQbcwB8mkn42kRPIlZh+y2CwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm
ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjIxMDMxMTc0NTEzWhcNMjMxMDMwMTc1MDEz
WjAzMTEwLwYDVQQDEyhDMzUyQTgxNjFBMkM2OTYxRDRBNkM4ODc5QTM0MzdDOTRB
MTlEMEU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4ZyTeAm8t3t
GAK1Uq9gdykhUa59lwg9GBjDdfOPodgv5oX33BSLg9WWZxlf02zIxnXEoP7AmxJX
aYME1d+zu6bKa8LbySHMU5KosCjQfrDYf3tpHHOlVtAjHRxh8su6kYZi8DtwrwJ4
lQ1BQqHPKjiPRmQkKHB6MFYfwEBEmK3uXpJB2M0qdgjYr10NO70LhYG7qDBdLTGh
NKWhL2hbUcFZB/zDC5phJDyScP4pKJEseK7oB3NdgrzrIc9/h3e6EfonSP3157dC
rl6s5qqUbVcdwE+o2JeITCiJZs55SDHQmXpbtkOyDsirCPhzXCfQz0EfCssRMIo6
QTVlhRXC6QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFMNSqBYaLGlh1KbIh5o0N8lK
GdDmMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv
MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0
ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2
ODY2MTA4NGI4Ni8wLzMxMzAzNDJlMzIzMjM1MmUzMTMwMzIyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMzM2MzIzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOFmMA0GCSqGSIb3DQEB
CwUAA4IBAQAqPx0Jj+jn4Wr6p7W+cRXnf/s2jsPcWggkhseYajTq5zm5dOih+k23
q4J6DcRGe1ludM8wwnpdWGyc9Q51hl7z3O0+hHg0HrtIBqkneBedDjNKJlOjWbZ9
b/xkdmOlNeRoacPosEx1f2NuneS3RC43wiFrNhrUhUlWdRZpMYQ+gFAt0+R4Ljjy
olBzf7sNkmvGGhH+GhziNTD667kLvU3LacUWvj+IlSdzLPXxviDcnnKrqmgCFTZr
dUtzpR2czzL3OiD5clv2VzaVCV2H/iH9gIoGz3mLuuM/0TMauNNPebeGocb6KvIv
Mx9SSITb33aW3v4mmMXVZUVa8CDrzuGS
-----END CERTIFICATE-----