Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e31362e302f32342d3234203d3e203336323336.roa
File:                     3130342e3232352e31362e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          AJBMTpPyRx+0U1iEhJjcfutnb7/H0frbWImx1pRCcTg=
Subject key identifier:   DD:74:97:5B:16:18:10:38:B6:2B:2E:BF:81:7F:52:50:8F:74:C7:8C
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       37DE7CF55C5EBE4D8FF34B1B447EE5AF04BF5BE5
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e31362e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 31 Oct 2022 17:50:14 +0000
ROA not before:           Mon 31 Oct 2022 17:45:14 +0000
ROA not after:            Mon 30 Oct 2023 17:50:14 +0000
asID:                     36236
IP address blocks:        104.225.16.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:de:7c:f5:5c:5e:be:4d:8f:f3:4b:1b:44:7e:e5:af:04:bf:5b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:45:14 2022 GMT
            Not After : Oct 30 17:50:14 2023 GMT
        Subject: CN=DD74975B16181038B62B2EBF817F52508F74C78C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f0:0a:1c:84:04:49:d1:0d:b3:d9:a0:f5:cf:
                    fe:8a:60:ba:16:2b:54:90:65:87:c8:c9:0b:cc:a6:
                    12:6e:f1:6e:25:a2:23:ec:5a:9a:bc:20:ee:83:e9:
                    24:4d:4c:71:b7:e5:49:13:4d:ed:1b:56:7a:42:2b:
                    85:39:f2:c2:e8:b2:8e:a4:e5:73:53:15:a7:39:33:
                    ff:1f:bf:98:41:dc:35:d2:ea:05:da:18:47:8e:77:
                    c4:b1:da:61:1e:36:89:a6:9c:b9:28:ff:bc:b0:dc:
                    1b:7f:ab:1f:1a:f9:b0:de:6b:3a:e8:23:0b:65:dd:
                    0d:b4:e1:7b:fa:e9:cc:db:4e:72:d3:90:ba:47:14:
                    ef:c5:06:84:2e:2f:92:45:d0:cf:22:47:d0:b8:20:
                    03:f4:92:72:cd:73:01:05:07:17:17:20:90:d8:5e:
                    3f:41:40:1b:71:e9:ab:98:80:16:aa:24:c0:ed:67:
                    5e:4a:ef:fa:73:6f:e1:f2:5c:4d:3c:d5:06:95:d2:
                    31:53:47:28:e1:87:33:3d:0d:c9:53:b2:c2:89:49:
                    8b:35:c5:fa:e4:c5:d0:81:f8:22:af:2e:39:1a:6a:
                    7b:af:17:1d:11:c6:38:c4:3c:64:80:b6:60:83:13:
                    5b:6b:b1:25:0d:e6:4d:e3:d6:0f:f7:5f:60:eb:bb:
                    4b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:74:97:5B:16:18:10:38:B6:2B:2E:BF:81:7F:52:50:8F:74:C7:8C
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e31362e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:e5:8b:4c:af:2d:9f:f4:5a:cd:03:b0:11:a1:00:bc:0e:dc:
         d6:44:32:06:08:3e:ce:fa:49:e8:9e:10:1b:05:82:9a:46:3f:
         ec:56:3c:e2:ba:df:f5:df:33:1d:1f:3d:b2:a0:d6:4c:6d:42:
         61:78:23:51:28:86:f1:f1:61:4b:56:ba:74:f9:ec:c1:e9:a9:
         07:4b:f3:6f:fc:da:dc:b9:9e:cd:a0:e4:01:b4:d9:5a:50:a3:
         50:64:c1:c9:ef:59:9a:97:7c:76:ef:90:94:97:b5:66:29:73:
         e1:b7:87:09:cf:d6:e4:7e:4a:7c:40:52:2b:df:99:27:03:70:
         7a:ce:ea:e2:64:41:6e:ee:4b:1d:31:ba:93:70:16:60:25:6c:
         3f:9f:d7:ba:8e:5f:91:73:e9:77:5b:b7:a6:76:93:37:62:75:
         7a:cf:6d:43:d8:b7:bf:37:32:ce:82:18:ce:35:db:f3:ea:e6:
         3d:f8:71:39:07:ef:22:d7:07:9b:2b:66:77:2a:09:73:b5:20:
         65:f0:b1:51:02:a6:40:ec:a8:08:4b:63:b8:bd:c9:c9:b3:2f:
         39:e3:5a:25:f9:60:5e:bd:0a:2f:d4:78:67:a6:c1:85:00:b4:
         dd:83:7d:fd:4d:c9:80:bd:25:6d:67:2e:d3:0d:c7:82:b5:cd:
         ef:3f:37:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----