Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e32302e302f32342d3234203d3e203336323336.roa
File:                     3130342e3232352e32302e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          75L4lfp5W0IcFQFWERE9JI1FrKw9RnGkfsosAY01HDk=
Subject key identifier:   97:62:09:30:31:B9:03:B5:CB:7B:99:A8:E0:DC:2B:A9:19:F9:00:C2
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       3E4761B3F9685298E7EB2151FA4A3ECF4D7E0DA9
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e32302e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 31 Oct 2022 17:50:12 +0000
ROA not before:           Mon 31 Oct 2022 17:45:12 +0000
ROA not after:            Mon 30 Oct 2023 17:50:12 +0000
asID:                     36236
IP address blocks:        104.225.20.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:47:61:b3:f9:68:52:98:e7:eb:21:51:fa:4a:3e:cf:4d:7e:0d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:45:12 2022 GMT
            Not After : Oct 30 17:50:12 2023 GMT
        Subject: CN=9762093031B903B5CB7B99A8E0DC2BA919F900C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1b:8f:54:2a:cf:c0:a8:c2:b7:fb:4f:60:27:
                    6c:30:21:84:a9:24:55:ef:07:93:e3:89:e3:54:84:
                    60:37:86:7e:a6:0e:b8:41:da:e9:51:f8:b7:ff:38:
                    57:d7:3c:62:f4:2c:96:38:87:b4:1e:2b:16:cf:f5:
                    b2:05:29:7c:b3:41:57:48:46:b1:bc:b7:4b:32:26:
                    e8:e4:67:43:5b:43:02:00:02:1a:1a:77:1f:64:27:
                    7d:99:ac:2c:ef:33:12:eb:3a:78:20:e5:68:3d:e2:
                    c4:d1:95:36:d1:8b:c5:b2:ee:8f:9f:b6:85:4f:8f:
                    95:f8:3b:37:c5:c0:97:43:2c:8a:9f:46:12:d6:b4:
                    bf:41:7d:dd:69:2c:fa:2e:d2:a6:1c:68:33:fb:6f:
                    b3:fa:b2:5b:13:4b:79:c8:fc:96:a6:e9:45:1b:06:
                    28:90:4e:e5:47:93:d4:cb:a1:da:66:66:02:1c:56:
                    d6:77:82:7b:fb:29:ca:2b:24:8f:9b:17:7b:a8:32:
                    5b:51:17:c6:22:3e:03:61:d9:91:a8:42:68:bd:7e:
                    a1:21:35:a2:64:40:b5:3b:42:14:58:8d:d2:76:10:
                    d9:9e:58:43:1c:c1:82:b1:01:f2:50:c0:5a:a9:7a:
                    9f:e6:8a:3a:07:d0:37:8c:59:ad:79:12:49:93:e6:
                    ab:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:62:09:30:31:B9:03:B5:CB:7B:99:A8:E0:DC:2B:A9:19:F9:00:C2
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e32302e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:ed:7b:65:51:1f:d2:d2:01:8d:82:7b:c9:2b:fd:ed:54:85:
         c1:06:91:c5:a8:25:a0:cc:12:d7:c5:96:34:b1:c2:da:d0:16:
         05:d2:9f:25:b6:8d:fe:30:c6:7f:24:b9:e7:18:c4:e6:1d:9a:
         c3:eb:e2:a9:a7:d3:51:b7:73:23:6a:3d:20:a5:c0:d0:ad:d2:
         76:b7:61:39:00:2d:87:94:39:40:af:35:c0:2d:4d:dd:84:2f:
         6a:e4:e9:ad:0d:2c:d4:02:40:bc:0a:0a:74:dc:47:4a:6c:7a:
         68:21:5b:18:ef:36:99:dd:93:59:18:27:e7:85:60:25:54:cd:
         fb:9d:ea:b1:1d:fb:4b:c5:d1:33:4a:72:d6:8a:07:6e:b0:6e:
         d1:10:de:b6:77:a6:5b:da:a2:a2:24:d8:a5:fe:bf:82:bd:64:
         26:6b:ba:d4:3e:cd:aa:ef:fb:fd:3b:b1:f2:da:c1:db:29:5a:
         19:3f:6f:33:26:ba:55:6d:30:a3:21:43:52:81:b4:8a:a3:dd:
         1b:ef:3a:bc:13:49:32:f9:98:27:9f:d5:04:bf:fe:d1:fa:ba:
         19:cf:04:a4:4f:90:44:17:2e:ea:d6:80:4d:70:ba:d6:3d:ee:
         45:36:68:7a:55:2a:31:ec:2d:9d:41:dd:ff:5b:22:e0:56:84:
         d8:dc:e1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----