Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e33352e302f32342d3234203d3e203633393131.roa
File:                     3130342e3232352e33352e302f32342d3234203d3e203633393131.roa (raw, json)
Hash identifier:          dJLdQHc69ROt41CGJGeDWAFjJlgMI4+4XhqogGahZ9I=
Subject key identifier:   59:38:EA:DA:AD:DD:EA:E3:A3:21:BF:EA:71:5A:9D:24:F6:A9:0A:17
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       6CE377CFBE4A799244F418FF116341F27A257F33
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e33352e302f32342d3234203d3e203633393131.roa
Signing time:             Mon 31 Oct 2022 17:51:30 +0000
ROA not before:           Mon 31 Oct 2022 17:46:30 +0000
ROA not after:            Mon 30 Oct 2023 17:51:30 +0000
asID:                     63911
IP address blocks:        104.225.35.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e3:77:cf:be:4a:79:92:44:f4:18:ff:11:63:41:f2:7a:25:7f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:46:30 2022 GMT
            Not After : Oct 30 17:51:30 2023 GMT
        Subject: CN=5938EADAADDDEAE3A321BFEA715A9D24F6A90A17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9e:df:54:ee:0f:77:01:b5:dd:38:b6:e2:4d:
                    5a:23:cc:49:db:0d:02:9d:c4:c4:aa:d5:62:0a:59:
                    48:98:f7:c6:1a:cf:97:9c:26:63:a4:3d:79:68:b5:
                    11:a5:5f:9e:8f:ef:86:6f:12:fb:ba:bd:0f:5b:0e:
                    3f:dc:6c:eb:50:db:69:0d:db:05:f0:f6:3e:58:9a:
                    40:80:be:46:ba:16:f9:21:84:b4:1d:ac:7a:c0:d5:
                    84:a8:45:91:58:24:cf:c2:74:0b:cb:5c:82:18:2a:
                    e8:f3:ef:29:10:97:e5:e1:60:b1:ed:23:4d:f7:46:
                    4e:6c:58:41:e6:56:6e:95:c6:1e:3f:c9:e8:0a:85:
                    0a:05:41:48:70:00:a6:fe:cb:c3:6d:f6:42:66:be:
                    3d:c8:ad:af:c2:38:61:f0:7f:2a:ca:16:1c:01:80:
                    d3:f0:dc:17:68:c3:13:42:7d:2f:35:8a:2d:36:ca:
                    f5:13:29:8e:96:87:d5:fa:5c:da:65:18:d2:42:9e:
                    91:90:7c:cf:5f:80:44:22:8c:c9:8f:07:f2:f5:af:
                    63:75:81:fa:be:5c:21:e0:b3:93:24:84:e0:14:52:
                    23:ac:db:99:a9:08:01:33:1a:1e:e4:84:94:39:d8:
                    9a:8e:ab:31:b4:95:a0:a4:0e:4f:40:2a:c2:3d:75:
                    4f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:38:EA:DA:AD:DD:EA:E3:A3:21:BF:EA:71:5A:9D:24:F6:A9:0A:17
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e33352e302f32342d3234203d3e203633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:90:94:d6:0c:85:09:fb:55:19:72:dc:eb:99:d3:1f:d3:6c:
         0c:f7:34:c5:74:e5:48:e1:e6:9d:c6:dd:a0:b3:2f:ef:76:83:
         df:3c:16:de:6c:30:39:e5:cf:1e:39:65:11:c8:24:0e:03:a2:
         da:bf:3e:10:78:82:d3:5d:c2:d7:5f:20:d9:9e:77:91:e2:e6:
         70:62:1e:60:2f:b6:38:3b:ca:c5:0e:0d:c4:94:79:67:d6:7a:
         1f:6c:9f:f6:ea:14:73:d8:53:f3:43:43:b9:0c:80:d2:b2:54:
         c4:d8:41:26:36:6a:29:d2:5a:8f:16:7c:14:dc:71:68:6d:42:
         b3:43:37:32:8f:53:22:61:91:e3:01:c6:9e:fa:34:f9:a3:50:
         b3:e8:3c:5b:27:90:47:ae:b9:b4:a6:19:f3:06:61:dd:e7:b9:
         04:a3:7b:cd:46:3c:35:bc:0c:15:e8:a2:cf:1a:6d:df:ef:95:
         82:0e:92:10:1e:fc:fa:d8:e0:d4:7e:7a:e4:ac:ea:13:ba:07:
         76:40:55:5f:dc:57:22:f4:31:27:64:6f:22:74:6e:9d:3a:f1:
         ef:7f:25:53:e4:eb:a0:12:25:a0:07:f7:4e:e1:18:0f:f9:47:
         54:6b:3b:c2:ff:1a:56:7c:3d:74:c8:cd:13:d9:76:ea:92:a3:
         60:01:a6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----