Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e33322e302f32342d3234203d3e203633393131.roa
File:                     3130342e3232352e33322e302f32342d3234203d3e203633393131.roa (raw, json)
Hash identifier:          lkmPBrWuJlUdBIxBB9Hc1mb3p1B1Pz3fJl3kB6wfk2Q=
Subject key identifier:   9C:B7:17:22:3B:02:CA:10:8A:43:FD:F2:F3:A5:33:73:09:B2:7E:88
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       1955AD918C48D1A8235CEDAA2A135905FDA8AA5A
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e33322e302f32342d3234203d3e203633393131.roa
Signing time:             Mon 31 Oct 2022 17:51:31 +0000
ROA not before:           Mon 31 Oct 2022 17:46:31 +0000
ROA not after:            Mon 30 Oct 2023 17:51:31 +0000
asID:                     63911
IP address blocks:        104.225.32.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:55:ad:91:8c:48:d1:a8:23:5c:ed:aa:2a:13:59:05:fd:a8:aa:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:46:31 2022 GMT
            Not After : Oct 30 17:51:31 2023 GMT
        Subject: CN=9CB717223B02CA108A43FDF2F3A5337309B27E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:8a:c0:5f:3d:fc:74:c2:d2:58:1b:cc:f8:
                    2d:34:d6:83:89:e7:bd:47:1b:26:dd:ef:f0:9a:45:
                    04:4e:f2:18:94:f0:5d:87:96:3c:d3:ad:a4:c1:ba:
                    0e:02:b7:ca:d1:81:e0:9f:8a:78:48:6a:4b:8d:ba:
                    7f:b4:71:65:6d:7f:00:1f:43:10:68:98:35:c5:df:
                    7e:fc:27:43:d6:12:5e:2f:f2:38:51:31:df:fc:7e:
                    3d:0d:42:62:c6:f7:eb:74:ad:51:73:df:9a:7b:d3:
                    54:de:71:44:3e:d8:2d:59:92:10:54:3c:72:ea:50:
                    a0:b4:02:21:21:e9:5c:57:90:2a:bc:f3:bd:0a:a0:
                    a4:11:29:a5:49:05:36:d7:26:10:8a:da:14:4d:ab:
                    ff:f4:58:aa:2b:a7:b2:ad:e5:f9:1d:13:63:8a:ef:
                    55:b4:91:0b:60:40:53:33:29:b5:b4:57:81:9e:58:
                    f0:b6:8e:c8:4d:35:0f:97:95:22:4c:c4:42:42:3a:
                    9e:d6:70:f5:4e:96:18:16:10:f3:8f:1b:b7:ae:40:
                    d1:ed:73:a1:4a:d2:ed:0f:27:4e:e5:0a:6c:38:8a:
                    a4:9f:f4:06:c9:25:4c:7a:84:4e:f8:55:40:61:7d:
                    93:2b:97:b7:46:9b:51:41:b5:d0:de:11:88:57:d3:
                    ad:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B7:17:22:3B:02:CA:10:8A:43:FD:F2:F3:A5:33:73:09:B2:7E:88
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e33322e302f32342d3234203d3e203633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:31:59:3f:ed:da:bf:80:2f:74:64:98:f4:83:df:35:4b:21:
         4c:48:aa:71:a5:cc:0e:a0:b0:c8:88:3d:23:28:47:ff:a9:3d:
         a4:90:c6:95:24:f7:04:66:4b:29:53:b8:d8:c9:bd:44:46:96:
         74:41:5a:af:79:a2:20:84:05:92:d8:ce:13:4a:d9:5f:ec:0e:
         b1:6c:71:16:02:12:8b:c4:03:e6:23:46:48:fa:68:ec:22:8b:
         c8:22:df:d9:a3:a1:d5:b4:14:63:32:52:20:1e:61:36:c9:4e:
         0d:ca:22:54:ab:de:c9:f7:c7:66:81:71:8c:4e:f5:d7:e2:40:
         0c:f6:0f:c4:5b:69:8c:c1:b5:5b:87:d3:30:be:b7:a3:04:0b:
         b7:31:e0:7f:ce:d7:cc:4a:48:bb:09:6c:fc:bb:ff:1a:46:b2:
         c0:5e:5c:16:ab:e2:87:64:5f:e0:76:9a:df:fe:10:28:cf:bb:
         52:45:87:f0:c4:0e:83:42:12:b4:fa:02:bf:a5:2c:cd:88:14:
         c2:e1:59:28:0a:31:7b:4c:41:6a:9a:dc:64:53:ee:e8:2a:07:
         f5:9d:2b:2e:fa:b5:44:be:da:8a:5c:b9:75:9b:45:ba:e0:11:
         cc:bd:d3:a0:41:28:6c:3a:fb:2a:10:82:b0:b9:df:51:79:e6:
         5d:24:c3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----