Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e31382e302f32342d3234203d3e203336323336.roa
File:                     3130342e3232352e31382e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          u3C12x80wCdhdCCeuRT/3WaQ4zU4CPiz/DubmDhc+lU=
Subject key identifier:   86:D3:CD:5C:DC:E9:64:A9:A7:9D:39:83:57:83:A0:67:D0:F4:C6:4D
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       19339801D244BEBE03EF67E1519F158934C78F9F
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e31382e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 31 Oct 2022 17:50:11 +0000
ROA not before:           Mon 31 Oct 2022 17:45:11 +0000
ROA not after:            Mon 30 Oct 2023 17:50:11 +0000
asID:                     36236
IP address blocks:        104.225.18.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:33:98:01:d2:44:be:be:03:ef:67:e1:51:9f:15:89:34:c7:8f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:45:11 2022 GMT
            Not After : Oct 30 17:50:11 2023 GMT
        Subject: CN=86D3CD5CDCE964A9A79D39835783A067D0F4C64D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:79:a6:e5:34:3d:65:80:9f:2b:fe:a2:d8:c6:
                    de:4f:70:0b:13:88:67:e4:bf:07:b1:b4:d6:2b:ef:
                    78:13:7a:a9:2f:a8:16:9b:a7:96:b4:8e:ec:32:6a:
                    28:6c:ec:09:80:51:c0:3a:ce:41:70:16:ed:a3:9d:
                    3c:07:ee:c3:22:c4:cc:26:f7:5f:05:ce:14:e1:62:
                    f2:a6:a8:ba:ca:f3:be:1f:67:44:da:e6:61:73:03:
                    e7:cc:b7:13:fd:72:1c:e1:12:ad:ba:4a:5a:e1:5c:
                    47:11:b5:51:59:05:af:64:5c:4c:7a:7b:ef:0c:72:
                    22:04:99:27:a5:68:e7:ca:f4:f1:3b:60:3e:e0:2e:
                    08:08:a4:64:ec:fe:78:40:99:f2:71:e9:e2:51:80:
                    81:82:6c:b0:79:33:72:b3:95:bf:0d:22:a5:10:60:
                    d2:a2:ae:44:8d:2b:97:9b:cc:5e:9f:17:5d:46:b6:
                    04:09:a4:ac:91:42:30:d3:5d:3b:13:75:d4:c2:e6:
                    58:68:3c:12:0a:e7:4e:45:b9:8e:99:93:87:91:81:
                    3a:a6:61:fd:40:10:6f:09:53:df:a2:e5:0c:1c:08:
                    92:96:5b:c8:d2:42:e6:e3:8e:3c:13:a9:dd:ad:dc:
                    7c:25:cb:21:c1:80:ae:df:39:6b:7f:da:ca:73:ff:
                    f5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D3:CD:5C:DC:E9:64:A9:A7:9D:39:83:57:83:A0:67:D0:F4:C6:4D
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e31382e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:79:77:58:e6:9c:20:d3:16:14:36:64:74:11:d4:81:fc:41:
         ac:47:77:58:cd:6a:e5:cd:e1:8d:43:84:9c:5e:77:8a:01:1d:
         c3:5a:ef:72:7a:68:73:94:11:bd:3b:9d:19:2e:c8:e3:39:92:
         df:52:ce:9a:c1:d1:2f:3c:14:16:f7:5b:27:a1:bc:57:de:2d:
         f7:d9:d8:60:94:53:6a:55:56:53:79:a0:51:43:dc:21:71:8b:
         66:54:5a:7a:a6:dc:c5:84:39:4d:12:fc:a5:0e:d3:69:43:ee:
         7e:59:94:3a:52:57:8a:75:d5:13:1d:21:cd:98:5a:03:f9:13:
         ad:e1:de:4f:f1:ab:3d:14:4a:54:ef:2f:a6:fb:e0:66:74:9e:
         8f:ec:8f:42:80:e8:8d:d4:9f:c6:71:34:1b:cd:e0:20:3e:9a:
         63:aa:e4:fd:80:12:50:64:b9:1a:01:6b:4c:3c:fe:ee:53:f5:
         6b:13:06:38:71:ff:a5:c9:95:62:0c:3a:69:04:65:5e:25:a6:
         dc:72:99:dc:29:2a:53:8b:fe:b8:1a:e3:25:c3:d1:e8:45:7a:
         28:2b:24:58:28:b2:3a:31:04:21:ef:ad:10:69:6b:ab:f5:e5:
         3a:b8:ea:90:da:a5:ef:23:ef:b6:13:6d:45:44:bd:ce:96:76:
         81:67:ad:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----