Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e3130362e302f32332d3233203d3e203336323336.roa
File:                     3130342e3232352e3130362e302f32332d3233203d3e203336323336.roa (raw, json)
Hash identifier:          ix/CF8XSq2/GLwBNkwBmzSMLAmVhj/L7Ih++IHHyPf4=
Subject key identifier:   23:FF:36:D5:91:64:08:46:F0:E2:0F:97:72:A1:7F:D5:80:E6:DE:E7
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       562B549181AE79E4D27964576F7C4290B16E9FDF
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e3130362e302f32332d3233203d3e203336323336.roa
Signing time:             Mon 31 Oct 2022 17:50:12 +0000
ROA not before:           Mon 31 Oct 2022 17:45:12 +0000
ROA not after:            Mon 30 Oct 2023 17:50:12 +0000
asID:                     36236
IP address blocks:        104.225.106.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:2b:54:91:81:ae:79:e4:d2:79:64:57:6f:7c:42:90:b1:6e:9f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:45:12 2022 GMT
            Not After : Oct 30 17:50:12 2023 GMT
        Subject: CN=23FF36D591640846F0E20F9772A17FD580E6DEE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f0:59:f1:42:05:0b:d3:62:91:07:a7:65:be:
                    64:94:b8:14:45:a0:36:c2:33:3f:9f:b7:43:66:36:
                    1a:03:4d:16:52:90:b6:f3:fe:ac:bd:c7:a4:f0:d1:
                    59:4c:61:10:f8:f1:53:e6:c5:a9:f4:c9:96:2e:60:
                    e2:57:24:c7:fd:b5:c5:32:ed:2e:91:9f:d5:e2:88:
                    b9:96:11:91:44:d6:8d:1a:4c:a6:0a:19:32:01:65:
                    77:3f:33:d5:38:fb:98:3c:d3:d6:01:15:b2:05:46:
                    c2:65:58:bb:b4:48:36:55:40:39:7d:9e:a3:53:f4:
                    ae:f6:96:e7:48:b8:55:36:f9:a3:8e:cc:66:2b:59:
                    31:88:1a:1e:6a:02:c2:87:ad:cb:46:1e:23:15:1e:
                    d3:b3:6c:e1:70:c2:4f:bd:ad:d3:08:fb:09:ce:52:
                    ee:d7:dd:70:2c:c3:77:38:1b:90:11:4c:be:45:70:
                    64:9d:0a:7d:46:3b:1b:10:d5:bc:69:9d:83:69:0f:
                    b5:ad:bd:ce:cc:39:bb:f7:76:0b:69:76:4f:af:fc:
                    a3:56:f2:df:26:c9:fd:3e:8d:e1:9b:67:d3:88:25:
                    fc:54:e6:b6:b9:f7:8f:63:4b:9d:e4:4b:9c:0e:31:
                    f8:72:51:39:15:7d:1f:3c:33:9d:89:99:f0:47:b8:
                    22:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FF:36:D5:91:64:08:46:F0:E2:0F:97:72:A1:7F:D5:80:E6:DE:E7
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e3130362e302f32332d3233203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:ee:c7:e4:93:4c:50:da:fb:c7:ad:7d:d0:04:3f:06:ca:26:
         3b:e7:29:cf:3a:3a:1d:09:5b:47:e9:99:09:8b:3f:45:4e:99:
         08:fa:3c:95:31:26:79:e3:f1:41:7b:79:e5:fc:65:38:d1:6c:
         ef:ec:7d:4b:39:c0:91:2f:f7:8f:f6:58:5b:85:8d:08:05:c1:
         43:60:f8:b3:cd:46:7c:39:46:66:a7:c2:e3:c7:ba:d0:94:b0:
         ab:be:cb:dc:50:03:de:60:b9:b2:62:d1:0a:39:fc:9b:38:68:
         d0:da:78:38:a3:2b:b4:69:1d:d0:73:c6:59:4a:4d:b8:b6:d0:
         51:31:05:3c:1c:99:2a:97:7e:ba:38:b6:93:7a:6f:e2:a7:4b:
         52:99:81:b9:43:33:a3:98:29:38:78:3f:a2:e7:39:f1:d1:12:
         83:08:2a:60:8f:d1:6a:91:fa:11:7c:f0:55:bf:a3:99:ef:31:
         35:29:58:05:c5:55:da:52:38:29:7a:d9:e3:ff:cb:c2:1e:b6:
         92:69:63:b0:76:2b:c7:1d:24:1d:40:07:f5:23:b7:f0:0a:70:
         15:da:15:83:13:3c:ef:ca:f1:12:ba:eb:bb:86:84:37:dc:07:
         95:c2:e1:25:03:c2:cf:5c:db:28:f8:2f:da:db:48:46:93:ca:
         33:12:4d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----