Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e31322e302f32322d3232203d3e203336323336.roa
File:                     3130342e3232352e31322e302f32322d3232203d3e203336323336.roa (raw, json)
Hash identifier:          IgGCfGm+4rJGc1rsCK5SWDekIeYsU14L2BN3KRW55xo=
Subject key identifier:   2E:90:73:27:7F:FF:D5:42:A9:1D:32:6C:4A:8A:58:CD:00:19:6F:FB
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       027FA31E1C81DB6E653E14ADA217AAE08971913B
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e31322e302f32322d3232203d3e203336323336.roa
Signing time:             Mon 31 Oct 2022 17:50:10 +0000
ROA not before:           Mon 31 Oct 2022 17:45:10 +0000
ROA not after:            Mon 30 Oct 2023 17:50:10 +0000
asID:                     36236
IP address blocks:        104.225.12.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7f:a3:1e:1c:81:db:6e:65:3e:14:ad:a2:17:aa:e0:89:71:91:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:45:10 2022 GMT
            Not After : Oct 30 17:50:10 2023 GMT
        Subject: CN=2E9073277FFFD542A91D326C4A8A58CD00196FFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:93:2e:5e:10:0e:e4:fb:d3:d1:36:a2:24:f8:
                    72:7b:7b:2e:1c:06:a6:5c:20:eb:58:70:6b:68:58:
                    8e:1e:d3:39:58:64:3c:cb:89:67:a9:6a:da:f4:10:
                    bc:9f:f1:ab:e4:38:86:67:19:f1:b7:a0:0f:15:71:
                    6c:4f:68:f4:11:ba:e4:06:6f:3f:2d:8c:08:ee:32:
                    13:5c:50:f5:f6:f3:1b:da:50:0c:9b:bd:35:1e:05:
                    24:8b:86:e1:9b:89:28:ff:11:d9:26:8b:34:94:72:
                    51:5e:0c:60:5d:30:6c:8e:c2:f1:65:ea:80:00:43:
                    95:59:01:f7:b9:8f:c3:2b:1b:8b:ef:5d:df:5d:35:
                    bc:d4:a8:85:26:71:8b:a2:52:1e:ce:12:55:d4:56:
                    a2:5c:78:8c:46:52:e3:54:72:bf:10:ec:65:b3:fc:
                    00:d3:fb:93:a7:8d:53:65:22:2d:7c:e2:67:b1:c4:
                    e6:27:9b:05:e5:4e:da:11:22:f0:8a:a0:ae:9e:8e:
                    65:b8:46:ec:84:73:bb:c6:78:3c:87:46:9e:9f:fa:
                    9a:73:34:c0:d7:ed:17:4f:0b:f2:21:7d:20:03:c0:
                    ca:d6:45:91:51:dd:39:aa:e9:6d:2a:63:eb:a5:f6:
                    91:d9:4f:cd:8a:ca:90:dc:93:22:c8:3c:8e:73:4e:
                    45:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:90:73:27:7F:FF:D5:42:A9:1D:32:6C:4A:8A:58:CD:00:19:6F:FB
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e31322e302f32322d3232203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:40:43:77:67:7f:2e:c9:bd:09:23:f6:77:38:73:b3:3c:31:
         19:96:b6:32:14:15:32:b9:c4:2a:12:69:b8:f4:60:6a:c9:1c:
         3e:30:95:dc:51:91:89:f9:35:7a:fb:ca:87:13:52:ae:53:32:
         8f:a6:6d:00:b5:5c:16:e8:e3:95:e7:df:03:e5:a4:ae:ba:1c:
         2d:68:d3:e7:82:06:93:a0:af:e1:32:ec:d1:d8:4f:86:55:61:
         6b:eb:1a:2c:b0:98:14:e8:4b:fe:77:fd:0f:62:31:9e:75:68:
         6d:80:31:3f:da:00:1b:6d:4c:a0:2b:27:9c:b2:69:ee:6c:24:
         1a:14:11:5c:a3:dd:5b:7d:5b:32:e7:7f:68:76:a2:e6:81:b2:
         7d:a4:a3:bf:3c:39:8f:2a:7b:da:b3:4b:22:e4:2c:e0:c1:24:
         d7:e1:81:6f:ca:d4:99:cd:56:df:82:f5:73:68:4d:48:d3:7d:
         b1:cd:18:48:75:e1:00:5a:2e:86:28:29:d3:0e:b3:9a:a9:e5:
         32:54:ba:ba:b4:6a:90:60:49:ea:ec:e5:a3:5f:6c:77:74:9c:
         37:e8:15:f6:b7:75:35:55:a1:86:6d:04:13:f7:0d:90:61:fd:
         83:ca:8e:87:6d:62:75:61:53:aa:a8:92:9f:bb:ce:ec:bd:b6:
         5d:b8:58:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----