Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e33332e302f32342d3234203d3e20333938373438.roa
File:                     3130342e3232352e33332e302f32342d3234203d3e20333938373438.roa (raw, json)
Hash identifier:          ROEXT/SJlRWRTHrYv8W5fH5UTlF/4eoa1bJwq9sfAgI=
Subject key identifier:   85:E8:D7:A4:60:47:D5:FF:33:CD:60:9A:02:E6:6C:45:73:D1:54:A9
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       13B157C0A0B6D3D9755E9F92AFACB37A87128E91
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e33332e302f32342d3234203d3e20333938373438.roa
Signing time:             Mon 31 Oct 2022 17:50:52 +0000
ROA not before:           Mon 31 Oct 2022 17:45:52 +0000
ROA not after:            Mon 30 Oct 2023 17:50:52 +0000
asID:                     398748
IP address blocks:        104.225.33.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b1:57:c0:a0:b6:d3:d9:75:5e:9f:92:af:ac:b3:7a:87:12:8e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:45:52 2022 GMT
            Not After : Oct 30 17:50:52 2023 GMT
        Subject: CN=85E8D7A46047D5FF33CD609A02E66C4573D154A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:8e:08:07:3a:d4:ac:0f:c0:3c:59:53:d9:07:
                    b1:58:24:c4:d0:9e:1e:4a:45:c3:13:8f:c3:b8:a8:
                    9a:66:0c:86:73:5a:07:1c:00:c8:5a:37:55:59:66:
                    d1:53:95:81:2c:c5:d7:3b:ba:ee:8a:4d:7d:84:1a:
                    82:c8:5c:d8:ba:d3:cf:06:57:a5:b4:65:82:c5:12:
                    13:9e:c4:42:2f:f3:3a:a6:35:ab:9c:3f:a3:85:37:
                    cf:64:4c:42:4b:7e:8e:78:4b:e5:be:59:c5:89:a8:
                    ce:ad:c3:e3:9f:e9:fc:92:6c:83:fa:3b:db:f2:56:
                    c4:7b:66:03:21:5b:3a:28:63:c1:18:be:c6:8a:6a:
                    e7:a0:35:c5:b7:c0:a5:9c:3e:97:07:9d:45:f1:42:
                    7c:c9:88:34:93:ba:30:83:9b:11:0a:e1:d8:f0:cb:
                    28:b9:5d:ea:2a:03:5a:0b:5b:87:44:94:78:d1:f5:
                    de:93:fd:fd:c0:fd:97:1e:c2:0a:10:cb:14:71:84:
                    49:d0:49:45:89:8c:ba:bf:22:a2:15:b4:5b:b2:a7:
                    8f:1d:cc:ba:d6:9f:0f:83:e9:80:91:49:e0:7c:b1:
                    4a:bc:16:8a:60:d0:8f:98:72:37:d4:31:7d:87:96:
                    02:45:f8:a9:b0:00:9d:68:de:f7:d7:08:7d:6e:da:
                    51:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E8:D7:A4:60:47:D5:FF:33:CD:60:9A:02:E6:6C:45:73:D1:54:A9
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e33332e302f32342d3234203d3e20333938373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:b8:56:50:d1:0d:d0:62:bc:d1:38:cc:ff:83:5d:83:55:20:
         58:2a:36:10:b8:29:95:af:28:82:0f:af:a3:66:69:02:19:5e:
         ec:33:6f:88:23:8a:91:88:aa:88:fe:46:67:48:41:e9:06:3b:
         cc:87:3b:18:65:25:80:91:6c:4a:2a:88:89:e1:5f:cd:e8:8a:
         2b:2e:1a:b3:cf:61:bc:0e:ba:59:53:f4:0d:ec:57:0a:9f:a1:
         f0:d6:06:83:c5:22:8a:48:f5:7a:83:3e:6c:5e:ff:f9:e7:26:
         4e:50:ab:ef:b2:38:d1:a6:9a:4b:64:4f:35:01:c4:1e:40:46:
         84:cd:41:96:d5:6d:c8:13:0f:a0:65:1f:0b:ca:5d:e2:37:7f:
         4b:65:a2:1e:43:dd:13:7e:a5:98:26:dd:fc:18:4a:a5:5b:54:
         fe:8a:de:27:c9:25:a9:49:f2:c1:3c:0c:22:0a:8e:ce:8c:de:
         ef:cb:62:e2:96:14:d4:b2:91:9c:e1:81:93:56:66:a3:ac:cf:
         37:c0:17:1c:57:c7:b7:e4:f5:d8:13:93:b9:e1:77:cf:e7:54:
         d0:01:4a:3b:5c:60:c4:d3:c8:56:6d:97:22:f6:a9:60:fb:15:
         a3:29:52:a2:35:59:41:38:a1:c3:e0:98:84:18:26:81:b1:08:
         a5:fb:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----