Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e31372e302f32342d3234203d3e203336323336.roa
File:                     3130342e3232352e31372e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          ApGE+RraVrxPs50VGAi3CAiAIDI213CALFypD+HHz/A=
Subject key identifier:   10:73:E6:34:B0:A9:84:00:D8:BB:59:30:CE:6D:30:F8:9A:C0:A5:F4
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       686F8C2A3F02B111CD9A96A7973A0121D553789E
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e31372e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 31 Oct 2022 17:50:13 +0000
ROA not before:           Mon 31 Oct 2022 17:45:13 +0000
ROA not after:            Mon 30 Oct 2023 17:50:13 +0000
asID:                     36236
IP address blocks:        104.225.17.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6f:8c:2a:3f:02:b1:11:cd:9a:96:a7:97:3a:01:21:d5:53:78:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:45:13 2022 GMT
            Not After : Oct 30 17:50:13 2023 GMT
        Subject: CN=1073E634B0A98400D8BB5930CE6D30F89AC0A5F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ba:04:d1:94:16:8c:7d:c4:64:37:a8:39:dc:
                    80:a1:3f:c0:49:54:48:63:60:f7:a0:b7:15:f1:2f:
                    cd:7f:ad:ce:c3:15:a8:31:63:c6:65:36:62:3f:9b:
                    ae:3f:d8:2e:0e:5e:ff:ed:48:cd:eb:52:37:7b:6a:
                    06:62:29:a9:30:a3:e4:b7:44:6b:7b:28:c6:1c:ce:
                    73:8a:21:6a:4c:df:91:39:74:43:0d:49:19:12:42:
                    6b:8d:20:38:42:9a:cf:78:8c:89:aa:a5:2d:a7:1c:
                    a0:33:49:1b:1f:6e:cb:81:8f:5d:a4:40:af:57:e4:
                    c2:a4:63:c0:62:d5:d6:48:b7:1b:84:f6:8e:82:11:
                    bc:e1:29:28:d3:ee:23:04:3e:41:f0:1d:62:07:a4:
                    31:56:e1:f0:1c:49:b9:cc:5c:ea:fe:8b:4f:d0:86:
                    36:1e:93:5a:11:01:a9:b0:71:1c:3e:ba:b0:9d:ff:
                    5e:4f:22:ea:4d:e7:6a:65:5e:7c:51:f7:94:c1:cc:
                    70:a6:26:1d:21:93:bd:fb:6e:32:93:38:38:de:5e:
                    c8:2c:a9:28:46:e6:f9:b7:d8:36:10:c2:2d:15:d8:
                    d8:be:a6:77:50:99:82:3a:05:35:3d:59:54:8d:94:
                    52:e0:6a:fc:86:ae:4a:f8:b3:0e:b8:48:d4:1a:df:
                    8c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:73:E6:34:B0:A9:84:00:D8:BB:59:30:CE:6D:30:F8:9A:C0:A5:F4
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e31372e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:b4:a1:d2:b0:5e:18:5b:82:b2:c2:79:f4:34:09:46:88:7f:
         6c:8d:de:9c:f8:2a:bf:4a:3d:e5:ba:e6:91:7b:db:8b:a5:1a:
         91:4d:b1:5d:37:c2:1d:b0:ab:4d:7f:b1:8c:52:5b:c5:f5:b3:
         5b:9b:98:9f:d4:00:3e:f4:d7:26:e2:44:0c:2e:bd:90:c9:04:
         de:0b:ad:0c:08:d5:6e:99:3d:1a:cd:c4:40:65:9a:87:68:18:
         e7:df:df:af:4a:f5:85:df:54:52:be:1b:95:e9:2a:94:62:91:
         da:fc:4b:5c:70:89:7d:1b:fc:07:3c:f2:30:c6:0f:58:17:00:
         b4:7b:38:c9:3b:18:32:b4:c6:6a:2c:a0:ea:2d:8a:13:de:07:
         71:01:ca:62:5b:cc:80:e9:9c:80:2f:5a:0d:44:26:c1:ee:24:
         f1:79:01:ba:ff:a9:22:94:e1:9f:f5:a1:00:b6:02:a6:96:aa:
         25:a4:58:11:6b:11:9d:37:b5:5b:7b:50:e1:41:5d:46:b9:aa:
         94:e0:6f:9f:56:e6:5c:6c:1d:2a:41:78:f8:f9:7d:ba:a9:5a:
         d2:bd:a6:c1:b6:23:4e:c2:35:50:1c:ed:6c:74:f1:92:ab:3e:
         c6:fa:2f:01:19:44:5e:59:8c:80:91:57:33:5e:d9:01:41:ee:
         3f:dc:11:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----