Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e3130332e302f32342d3234203d3e203336323336.roa
File:                     3130342e3232352e3130332e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          ZgeSuNxQpPB/LjzR1et5p1dFWCHXepcJZbFD5ZNcF1o=
Subject key identifier:   E4:C2:48:AE:24:95:7B:1B:36:6D:B1:E8:5A:07:45:7D:DF:C0:8B:90
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       564839C01FEDE89A6B47B155F74D194E29BAE096
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e3130332e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 31 Oct 2022 17:50:09 +0000
ROA not before:           Mon 31 Oct 2022 17:45:09 +0000
ROA not after:            Mon 30 Oct 2023 17:50:09 +0000
asID:                     36236
IP address blocks:        104.225.103.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:48:39:c0:1f:ed:e8:9a:6b:47:b1:55:f7:4d:19:4e:29:ba:e0:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:45:09 2022 GMT
            Not After : Oct 30 17:50:09 2023 GMT
        Subject: CN=E4C248AE24957B1B366DB1E85A07457DDFC08B90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:9b:6b:85:99:e2:d7:67:c9:a2:00:f8:24:
                    a0:32:5e:60:38:d1:16:77:3e:7e:c3:82:51:59:96:
                    7c:59:b0:ec:5e:40:9c:79:72:71:c0:cb:da:7c:48:
                    a2:60:9e:43:73:6a:01:62:2a:5d:7e:75:ef:e3:7f:
                    23:2f:66:4b:34:58:95:19:e5:ad:f6:53:8f:00:25:
                    ef:fd:bb:2b:69:c6:44:55:27:5b:4b:f7:34:f7:8d:
                    59:2a:c4:4c:85:0e:82:2b:19:f3:83:25:4a:70:e6:
                    bc:8c:37:89:4a:0b:5e:0b:59:2e:76:6f:3a:0c:dd:
                    1c:57:42:ca:fc:8f:ff:45:92:67:4e:ea:31:7d:b6:
                    ff:f9:0e:1f:5a:29:35:49:52:d8:9a:42:7e:94:43:
                    67:11:57:f3:6c:76:52:96:ee:8b:18:f5:b5:2b:8c:
                    e0:ba:35:da:db:fc:3e:b9:a8:3f:24:bf:10:df:66:
                    06:29:1d:39:d9:b3:79:f2:56:1f:da:bb:0a:ce:97:
                    5c:e6:7c:32:73:a3:07:cf:3f:cb:8f:35:cc:76:95:
                    4c:bf:d1:54:7e:50:87:38:f5:8f:02:97:18:84:28:
                    b3:50:69:36:59:df:d0:42:ba:81:53:94:48:04:3d:
                    a5:55:fe:52:e4:69:a5:58:6f:e6:0d:4a:3c:54:5c:
                    9e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C2:48:AE:24:95:7B:1B:36:6D:B1:E8:5A:07:45:7D:DF:C0:8B:90
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e3130332e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:82:98:5d:41:26:ab:ac:c4:a5:48:63:8c:49:53:9e:80:61:
         6b:50:57:c2:51:a5:97:05:30:c9:85:d6:de:17:7c:a5:df:14:
         c3:f9:51:bd:14:ff:1f:55:5e:e3:e5:77:55:d8:68:32:62:88:
         96:cc:bb:48:f1:20:9b:3d:4a:d3:03:54:95:3a:61:b7:4b:2b:
         5d:54:1b:4d:05:1e:79:ec:62:66:f3:20:c3:c9:1e:7b:ad:e1:
         a7:bf:1b:8f:d6:91:0c:89:84:d4:55:9b:fc:e6:e5:2d:93:55:
         22:a2:2d:d4:e6:ef:db:8e:d4:4e:a8:ab:eb:3d:06:7a:92:f0:
         c3:96:57:e8:11:c7:4e:72:8d:78:35:2c:86:d9:e2:13:31:f9:
         04:86:b3:53:6a:93:8c:bb:14:3c:00:86:58:57:b4:8b:56:5a:
         8d:d8:ac:13:29:bd:c6:10:3e:74:8f:f9:67:63:29:15:1c:39:
         d2:37:f7:f7:f6:f9:9a:5a:33:ae:20:a4:f6:29:eb:29:df:a2:
         ff:10:65:89:31:19:ef:1c:3d:e2:ec:10:3f:75:05:e4:6b:50:
         0d:9f:36:d1:45:c5:7b:17:f7:77:0e:71:86:84:9a:89:12:b6:
         14:82:d2:45:a5:b6:c6:80:7b:da:ee:84:1b:8a:1c:8e:dc:74:
         be:95:2c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----