Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e322e302f32342d3234203d3e203336323336.roa
File:                     3130342e3232352e322e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          OfPpmCuuBQrO/k5J3Yp8RVez4lnOi5EY8cYCc6J9Fe8=
Subject key identifier:   61:42:CD:06:F8:0B:E0:08:C9:5B:78:C6:15:5F:E1:2C:14:E0:12:CA
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       78C85ACEEE8FC4191EA39513B6F5D0A9C07B65F7
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e322e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 31 Oct 2022 17:50:13 +0000
ROA not before:           Mon 31 Oct 2022 17:45:13 +0000
ROA not after:            Mon 30 Oct 2023 17:50:13 +0000
asID:                     36236
IP address blocks:        104.225.2.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c8:5a:ce:ee:8f:c4:19:1e:a3:95:13:b6:f5:d0:a9:c0:7b:65:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:45:13 2022 GMT
            Not After : Oct 30 17:50:13 2023 GMT
        Subject: CN=6142CD06F80BE008C95B78C6155FE12C14E012CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:80:44:46:85:9e:ef:4b:b7:6b:be:ee:62:ae:
                    20:95:0e:ad:2d:d7:31:28:a5:a5:8e:dd:cc:ac:dd:
                    35:0a:73:72:c5:ee:2d:bc:38:5a:5e:1c:23:95:1e:
                    ba:06:7d:f9:52:19:79:5f:4e:71:3a:2a:7e:1f:49:
                    9d:8e:d3:ea:7c:9b:7e:bb:17:7d:ea:3f:e6:7d:53:
                    b1:07:e5:2c:66:04:06:90:cd:a7:7b:e7:77:88:3f:
                    11:c5:21:5d:00:bf:54:ae:69:a3:5b:37:fb:43:20:
                    96:88:bd:37:19:b5:e3:b8:7c:7e:49:91:11:e0:dc:
                    53:76:08:ba:6e:5d:91:e3:d9:4d:06:0a:72:45:cb:
                    12:f4:24:c0:a0:02:ae:67:be:a7:4c:6c:a3:7c:b6:
                    3d:90:5e:5f:5b:ec:e1:52:65:25:a9:8c:fc:ed:4b:
                    21:58:5a:fd:46:ac:c4:59:b0:c5:5a:7e:7b:cc:39:
                    cc:84:f4:1e:c2:09:97:f6:de:a5:8f:06:60:b4:12:
                    48:0b:f4:3a:d7:c2:20:2d:c9:eb:f6:2e:c2:93:ba:
                    05:10:2b:bc:6e:85:a7:9e:4e:b6:1b:08:5f:57:5f:
                    f7:5a:49:b0:f5:b6:d6:c0:d9:59:46:d4:99:2a:e4:
                    95:eb:2a:7f:a9:78:83:c6:cf:5c:12:d0:54:29:66:
                    f1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:42:CD:06:F8:0B:E0:08:C9:5B:78:C6:15:5F:E1:2C:14:E0:12:CA
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e322e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:58:75:1b:d1:bf:93:a6:e1:9e:cc:3d:bd:82:e5:b0:fd:32:
         2f:f7:04:60:f6:d0:73:10:83:70:8e:14:ca:d5:35:51:43:c6:
         3c:fc:63:5c:8d:2a:9f:b8:59:cb:e8:58:a2:69:9d:d4:96:cd:
         1a:1a:4d:33:68:c2:90:8f:47:29:8e:0a:9a:4f:e2:a9:fc:e7:
         b1:47:b7:2b:be:94:0e:fc:0b:ae:39:40:a5:73:c2:a5:aa:83:
         f8:95:37:bc:be:56:13:65:7e:79:d9:cd:31:9f:e9:9f:df:7d:
         ed:ea:24:a4:6e:fb:eb:57:b5:96:c9:fb:a9:89:ae:a3:19:65:
         95:2d:f3:cc:47:2f:f6:6b:c2:97:5b:42:1d:9b:12:bd:ed:19:
         a3:80:27:53:d8:43:b6:72:10:ff:ee:51:ef:ea:0b:48:a6:36:
         2d:77:90:a9:51:4a:ad:4b:89:d1:fa:9e:32:b0:2f:50:ac:82:
         02:b8:76:cb:a2:8b:dc:ba:14:73:6c:95:c9:2c:30:a6:ee:d6:
         68:1d:28:60:72:fc:ef:2f:c3:18:c5:5d:b0:ee:32:49:2c:e8:
         97:8c:b3:67:26:a3:78:5a:b7:3c:7a:b4:6f:75:fe:46:92:8b:
         0d:93:7c:01:31:69:6d:c8:fd:f5:6b:11:15:f5:e8:94:15:ad:
         2c:f4:73:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----