Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e3130372e302f32342d3234203d3e203336323336.roa
File:                     3130342e3232352e3130372e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          xtMJ3GMGLcMr8yMKVcqJA9UnrAgCzHJwznR5K+7w0Tg=
Subject key identifier:   D4:56:AB:47:C5:C3:54:99:88:FF:CA:FB:D1:1E:A2:51:69:B8:DF:86
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       111FB465B69DF5BEB4B08341B86B7D03C90AC41F
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e3130372e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 31 Oct 2022 17:50:13 +0000
ROA not before:           Mon 31 Oct 2022 17:45:13 +0000
ROA not after:            Mon 30 Oct 2023 17:50:13 +0000
asID:                     36236
IP address blocks:        104.225.107.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:1f:b4:65:b6:9d:f5:be:b4:b0:83:41:b8:6b:7d:03:c9:0a:c4:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:45:13 2022 GMT
            Not After : Oct 30 17:50:13 2023 GMT
        Subject: CN=D456AB47C5C3549988FFCAFBD11EA25169B8DF86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:87:a9:0a:e2:5b:0a:ba:b7:1e:68:46:3a:9b:
                    2b:f6:ee:a5:01:0c:db:6b:f3:cd:17:94:18:cc:4a:
                    af:44:72:21:b8:58:df:ee:fd:cc:5c:ec:a4:4e:5d:
                    13:8c:90:05:a3:63:c5:5e:68:5e:28:f6:ba:94:e0:
                    b9:f3:f7:3c:63:f1:4c:9c:ce:9a:33:ca:9a:aa:43:
                    82:ee:8c:06:5b:7b:42:98:d3:eb:39:d4:db:6a:97:
                    67:61:7e:07:46:50:dd:30:e0:c5:7b:62:c8:ae:52:
                    bb:42:78:79:de:9a:09:a5:39:46:5c:04:63:f5:6a:
                    2c:e8:3c:27:32:91:66:29:06:0b:3c:17:9c:c3:b4:
                    69:41:5e:d2:17:43:c9:b1:1e:ad:ea:48:08:0a:30:
                    45:51:34:9d:50:9e:ec:58:b0:0f:42:72:4a:aa:3c:
                    3c:12:cd:be:14:50:24:a6:fc:e4:8f:cd:a9:b0:b1:
                    36:ae:b7:14:90:42:88:31:d7:35:8b:50:95:d6:fe:
                    c3:75:c8:b3:62:e0:a8:70:33:70:df:17:bd:86:55:
                    0a:23:f6:88:de:b1:02:97:22:57:01:37:86:d2:a8:
                    72:06:99:c4:b6:8c:4a:ef:47:62:8a:e7:d2:cc:4f:
                    65:87:0a:c1:31:72:40:8f:4f:66:1b:af:19:de:02:
                    91:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:56:AB:47:C5:C3:54:99:88:FF:CA:FB:D1:1E:A2:51:69:B8:DF:86
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e3130372e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:7f:ab:59:70:67:a5:5a:f8:28:3b:68:a4:56:0f:51:78:43:
         2a:46:9b:2d:db:1e:9c:8b:9d:4a:d8:16:7d:45:12:da:ef:76:
         a5:6c:04:9b:ff:41:d8:b5:29:41:98:86:c2:d7:94:52:18:98:
         78:c3:38:b4:2c:66:1a:6d:c7:09:02:2e:bb:49:05:7f:da:bc:
         06:37:02:fd:2f:ed:27:79:8f:08:e1:16:ec:e1:92:ce:23:a4:
         b8:e3:5d:a7:e9:75:ac:4e:32:0e:5f:75:e4:c7:4a:e0:5a:22:
         a8:d4:7e:a3:cd:85:dc:3c:ff:47:bd:9c:28:48:57:d8:f2:5b:
         d8:ba:44:c2:9c:1b:9f:45:dc:6c:d8:b2:51:7d:53:5c:28:1e:
         bf:69:ca:7b:46:ae:20:f1:70:86:a9:6d:f6:3f:3a:4b:90:e1:
         2d:1f:c4:5a:7d:1b:80:07:69:df:4a:d7:88:4d:f5:68:bd:bb:
         3a:61:55:fd:1d:bf:25:22:98:1a:b2:37:76:01:28:c9:43:58:
         37:e2:a2:a4:85:f1:bb:3b:e7:e7:9a:b8:ac:c5:5e:8d:e5:7c:
         7b:ef:ea:65:07:b0:b2:82:32:06:36:fb:03:25:52:e3:6c:71:
         14:2e:23:01:b7:4b:a0:47:1f:5b:88:5b:56:65:98:61:71:85:
         f1:86:01:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----