Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e33362e302f32342d3234203d3e203633393131.roa
File:                     3130342e3232352e33362e302f32342d3234203d3e203633393131.roa (raw, json)
Hash identifier:          //m4uB8rMbbofZ97RoH7fUPLFae9skeCzahpQPz5Z0g=
Subject key identifier:   5C:C1:ED:27:23:4B:90:89:EE:AD:FB:75:77:86:A4:F1:66:FF:2E:78
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       25596DCCF52DF5727C700008FD7DBF055244CF42
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e33362e302f32342d3234203d3e203633393131.roa
Signing time:             Mon 31 Oct 2022 17:51:30 +0000
ROA not before:           Mon 31 Oct 2022 17:46:30 +0000
ROA not after:            Mon 30 Oct 2023 17:51:30 +0000
asID:                     63911
IP address blocks:        104.225.36.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:59:6d:cc:f5:2d:f5:72:7c:70:00:08:fd:7d:bf:05:52:44:cf:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:46:30 2022 GMT
            Not After : Oct 30 17:51:30 2023 GMT
        Subject: CN=5CC1ED27234B9089EEADFB757786A4F166FF2E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:47:02:9b:a1:ac:a0:13:ac:64:f9:34:5c:cb:
                    b0:c5:82:a0:42:41:24:18:7d:2f:de:a4:f3:3e:7d:
                    7f:3a:70:75:bb:29:48:1a:21:c5:5a:7c:83:c5:12:
                    6a:d2:a8:5b:92:ad:9a:f2:99:63:66:f2:09:40:e0:
                    cf:04:c2:a2:3b:d2:0d:b1:9c:6a:c6:8e:d5:73:9a:
                    7c:9c:d5:92:cb:b6:80:a4:76:0a:62:bb:04:a7:60:
                    96:56:0e:6a:ce:2e:ae:79:61:01:88:e8:a4:b4:65:
                    dc:48:32:18:9f:bb:87:75:c1:6b:2e:09:e5:90:08:
                    35:04:99:fc:0e:9a:f4:a8:24:55:c6:df:ae:67:02:
                    f1:27:f2:54:23:69:b3:04:05:61:28:d2:3c:ff:e7:
                    9f:94:c3:b8:73:36:33:52:59:1c:53:b7:22:ef:f6:
                    2f:e4:bf:ae:d7:21:fe:76:8e:cf:9c:5a:3b:0e:8d:
                    55:a4:fa:22:91:79:bb:ba:ed:35:d9:a5:ca:e7:ea:
                    d3:0d:ed:8d:f0:b4:31:3d:d1:8e:d3:1f:c3:49:10:
                    03:ad:03:12:a4:b1:f2:8f:e4:de:a5:a3:07:83:55:
                    36:f6:6a:1d:ca:98:25:9d:f9:2a:11:2b:33:b0:de:
                    db:d1:71:bc:e7:e7:76:bb:00:e9:f3:6a:9a:d9:8f:
                    26:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C1:ED:27:23:4B:90:89:EE:AD:FB:75:77:86:A4:F1:66:FF:2E:78
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e33362e302f32342d3234203d3e203633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:9d:1b:4f:7b:83:11:36:dd:90:dc:a7:21:d4:d9:4e:2d:87:
         b4:d3:76:4a:7d:25:ee:c1:03:ea:3e:ac:6d:36:df:d4:b6:d7:
         bb:0b:9b:01:c3:dc:1c:33:70:dc:1c:03:d6:f8:98:11:de:56:
         ef:97:de:11:c8:ff:56:2e:73:94:b9:a8:9d:c1:c7:1f:dc:e3:
         64:4b:df:55:fa:de:bc:af:32:d8:1d:25:ca:a3:a1:17:36:0c:
         e3:52:2d:be:b9:09:71:12:ce:7b:cd:bb:df:1c:19:a6:16:c0:
         d2:3e:0b:5b:e2:53:b2:75:02:b2:cc:2d:b5:14:6e:b8:43:07:
         d8:34:74:83:30:30:f5:14:26:ac:7e:af:61:5d:8c:40:29:46:
         fe:3b:cd:f4:f4:54:a9:22:72:9d:dd:0f:37:a7:bf:a6:a4:f8:
         34:17:cb:bd:41:c5:38:b4:9c:53:88:86:cf:d3:b8:29:82:d3:
         a2:40:60:6e:5c:a9:c3:6d:19:6f:74:99:96:4b:26:af:54:9d:
         d5:bb:8e:6a:fc:4e:f1:1e:26:bc:37:3a:f1:82:5a:80:ee:62:
         05:c6:8b:51:4f:1d:cc:90:8a:84:60:e0:85:6f:94:84:05:5e:
         e4:7b:19:3e:5b:c1:97:99:fd:f8:64:71:74:1a:84:ab:25:d8:
         7f:2b:e6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----