Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e32312e302f32342d3234203d3e203336323336.roa
File:                     3130342e3232352e32312e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          8mrBn8/rDMn6M+JGqWrCDB+rEyzLCTgXzS/cOCUB82Q=
Subject key identifier:   58:75:03:C6:3D:79:26:F8:44:8D:7D:AA:1C:2C:39:96:32:38:A1:E9
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       5D394D4BB66DA62C51E1C2B4EBC0687F3995DD7E
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e32312e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 31 Oct 2022 17:50:13 +0000
ROA not before:           Mon 31 Oct 2022 17:45:13 +0000
ROA not after:            Mon 30 Oct 2023 17:50:13 +0000
asID:                     36236
IP address blocks:        104.225.21.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:39:4d:4b:b6:6d:a6:2c:51:e1:c2:b4:eb:c0:68:7f:39:95:dd:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:45:13 2022 GMT
            Not After : Oct 30 17:50:13 2023 GMT
        Subject: CN=587503C63D7926F8448D7DAA1C2C39963238A1E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:68:fc:0f:80:b5:b3:0d:bf:cd:92:58:f9:aa:
                    36:bc:98:26:65:a0:7a:49:fc:68:95:fa:2e:4d:d3:
                    08:8c:7f:e8:f8:f5:37:c1:d6:39:fb:18:7f:a5:de:
                    83:d5:5d:59:80:81:e3:83:01:0c:b7:31:5c:5a:ae:
                    1c:0f:7e:6c:af:f9:3b:3a:4f:c9:6f:0d:3a:1f:7e:
                    66:b7:70:a9:f0:22:9f:ed:f8:f4:c7:a1:6a:9d:a0:
                    a5:d8:82:d7:50:07:6f:a0:e4:7c:a7:63:ff:b2:90:
                    ec:dc:a7:68:29:43:f0:26:aa:90:2a:82:7b:05:4f:
                    81:72:61:70:fe:8a:0e:9b:90:e7:48:d5:2f:84:d4:
                    52:25:75:d3:2f:4f:cd:70:d2:24:bf:a6:e6:e4:80:
                    80:47:62:05:f1:a8:6f:73:74:2b:1f:f3:68:b9:52:
                    05:69:32:44:74:8b:8c:3f:88:e4:4c:dd:6e:4a:2c:
                    d7:f2:84:fb:ce:1d:ab:d1:8c:2a:32:6a:b1:1e:0a:
                    77:6e:f5:24:e8:b4:94:2a:83:a6:db:6e:80:75:79:
                    de:fd:2d:7c:78:9f:d2:2c:34:6c:12:9e:14:35:8c:
                    51:30:44:c9:2e:dc:53:0f:d0:35:ef:c3:03:d3:1c:
                    72:7c:1c:59:48:fc:7c:6a:99:87:6c:07:bc:98:8b:
                    2b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:75:03:C6:3D:79:26:F8:44:8D:7D:AA:1C:2C:39:96:32:38:A1:E9
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e32312e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:51:36:ff:b0:c2:99:d1:1d:31:3d:a9:67:9c:67:a7:5d:ba:
         77:19:f5:b1:17:cb:51:cc:e6:4b:19:b1:32:20:4f:af:77:6e:
         f4:20:9e:7d:e7:93:2f:f6:12:4c:ce:fa:ab:d6:55:31:8a:e0:
         ea:d1:b6:fa:42:5c:ed:ad:09:fb:40:a1:63:c9:94:fe:b7:44:
         ab:bd:15:36:f1:83:36:b5:a4:65:81:e8:46:eb:5f:78:45:2d:
         ad:68:28:88:56:cb:a6:c5:1e:82:dc:24:c4:1b:b9:c8:6a:4a:
         4e:f2:c5:94:41:8c:27:fd:df:be:df:61:05:7b:f4:02:21:32:
         ab:35:16:d0:9b:6e:1a:d9:ff:b3:c5:69:50:07:9a:f5:c4:87:
         d2:e4:7e:62:c0:1e:00:ec:ba:00:d8:41:f1:1b:93:f0:7b:a4:
         3d:ce:36:cd:9d:46:01:69:81:2f:f4:99:07:ef:c1:36:8a:02:
         31:de:40:5b:4b:d2:b3:73:74:68:07:b9:0a:0d:c0:62:54:bd:
         bc:e5:e3:98:80:dc:d8:15:c9:56:02:19:3a:a1:4d:d3:88:95:
         a4:2f:6d:55:fc:b7:0d:0c:2f:97:ed:62:ef:4f:ef:9b:56:3d:
         ff:24:ff:24:66:f6:cf:9b:3b:de:df:a7:b1:d1:80:ef:19:86:
         20:1b:25:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----