Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e33382e302f32342d3234203d3e203633393131.roa
File:                     3130342e3232352e33382e302f32342d3234203d3e203633393131.roa (raw, json)
Hash identifier:          OxycUG8hKdHVRd1QVN/NzVOCYXgb+Uz4bers9xShrNU=
Subject key identifier:   F4:94:C8:24:0C:A8:BD:6E:4B:6D:AD:69:58:B0:CC:83:F9:B7:2B:B6
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       4AA6E34FC7A15E887063C2AD9C012D2415B13FF1
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e33382e302f32342d3234203d3e203633393131.roa
Signing time:             Mon 31 Oct 2022 17:51:31 +0000
ROA not before:           Mon 31 Oct 2022 17:46:31 +0000
ROA not after:            Mon 30 Oct 2023 17:51:31 +0000
asID:                     63911
IP address blocks:        104.225.38.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a6:e3:4f:c7:a1:5e:88:70:63:c2:ad:9c:01:2d:24:15:b1:3f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:46:31 2022 GMT
            Not After : Oct 30 17:51:31 2023 GMT
        Subject: CN=F494C8240CA8BD6E4B6DAD6958B0CC83F9B72BB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:eb:ae:5b:ac:04:bb:11:85:90:d4:49:a2:
                    aa:ef:93:5b:7f:36:18:28:3e:cb:0d:40:c6:13:97:
                    96:39:28:36:3b:18:14:ed:c8:fb:6f:23:38:c0:e9:
                    cf:35:bf:5a:45:2e:3e:f7:4b:1c:ca:37:aa:bb:c1:
                    bb:91:1b:9d:01:ae:22:72:30:24:c2:07:f9:c0:9f:
                    96:36:04:c4:e9:ac:30:06:59:24:79:1a:13:67:cd:
                    e7:e9:b8:b5:3b:ba:6e:a4:23:94:b2:46:d5:04:3b:
                    54:fa:b5:93:35:e0:28:38:a8:81:39:ad:61:3d:96:
                    25:72:a1:00:45:ad:a8:82:8f:9b:67:22:9b:9a:2f:
                    60:50:0a:e9:80:70:ec:84:94:80:25:7a:e2:28:a4:
                    20:5c:65:55:f3:f3:16:4b:6b:67:10:ad:fe:70:ee:
                    f8:38:f4:9f:1b:8e:a9:31:1c:2c:7d:c7:22:77:74:
                    f6:d1:eb:3d:ea:76:66:15:6c:30:a6:6a:08:9f:8c:
                    75:e5:44:26:88:f8:f9:4d:f7:8d:27:41:b2:6b:c2:
                    46:68:e7:f1:c6:18:34:98:22:1a:79:aa:11:a0:54:
                    87:ff:52:11:0e:2d:dc:2c:a4:58:52:7f:81:de:9b:
                    3a:2e:8b:8a:5e:58:86:bd:30:44:39:3d:59:bd:ff:
                    94:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:94:C8:24:0C:A8:BD:6E:4B:6D:AD:69:58:B0:CC:83:F9:B7:2B:B6
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e33382e302f32342d3234203d3e203633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:9d:94:b6:02:86:6e:5c:51:f9:66:db:70:0c:34:c3:c0:1a:
         aa:a9:70:8b:05:47:eb:8d:1f:42:0a:cb:24:16:c1:a5:00:54:
         91:7f:69:5c:c7:7d:ef:02:ee:3d:6a:1a:a1:d2:4b:9c:ff:5d:
         3d:7b:8c:63:05:50:da:c2:6b:4e:ec:59:13:46:fc:be:1d:07:
         24:6c:d4:a5:a0:41:d8:8a:d1:5e:73:53:b6:0b:4c:ea:59:b2:
         3a:7e:06:8f:b6:87:45:66:00:5b:26:f4:44:dd:97:de:1e:a9:
         dc:5f:b2:25:0d:05:d3:86:0d:16:57:9d:ab:66:21:5b:fc:4a:
         58:f7:23:1f:49:24:ca:03:40:da:05:95:86:c7:79:9a:e7:e4:
         5b:fe:53:20:88:73:1e:7c:00:40:c2:c7:2b:f0:9a:57:69:c2:
         a6:08:1c:7d:11:84:f1:ab:87:6f:ce:98:3f:8c:38:ef:f1:81:
         bf:49:0c:16:26:17:77:2c:27:f5:0f:e7:68:99:83:03:f2:39:
         7b:cf:ad:82:c4:73:4e:21:f7:4b:a2:aa:3d:85:14:55:76:d8:
         50:f9:6b:5f:af:16:c1:fc:71:35:91:70:a4:91:0d:24:3c:3b:
         34:50:cc:df:35:40:a4:f2:4e:f0:19:fd:fd:30:5e:bd:f7:78:
         1c:66:18:99
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUSqbjT8ehXohwY8KtnAEtJBWxP/EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm
ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjIxMDMxMTc0NjMxWhcNMjMxMDMwMTc1MTMx
WjAzMTEwLwYDVQQDEyhGNDk0QzgyNDBDQThCRDZFNEI2REFENjk1OEIwQ0M4M0Y5
QjcyQkI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ3rrlusBLsR
hZDUSaKq75NbfzYYKD7LDUDGE5eWOSg2OxgU7cj7byM4wOnPNb9aRS4+90scyjeq
u8G7kRudAa4icjAkwgf5wJ+WNgTE6awwBlkkeRoTZ83n6bi1O7pupCOUskbVBDtU
+rWTNeAoOKiBOa1hPZYlcqEARa2ogo+bZyKbmi9gUArpgHDshJSAJXriKKQgXGVV
8/MWS2tnEK3+cO74OPSfG46pMRwsfccid3T20es96nZmFWwwpmoIn4x15UQmiPj5
TfeNJ0Gya8JGaOfxxhg0mCIaeaoRoFSH/1IRDi3cLKRYUn+B3ps6LouKXliGvTBE
OT1Zvf+UbwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFPSUyCQMqL1uS22taViwzIP5
tyu2MB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv
MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0
ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2
ODY2MTA4NGI4Ni8wLzMxMzAzNDJlMzIzMjM1MmUzMzM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMzM5MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjhJjANBgkqhkiG9w0BAQsF
AAOCAQEAYZ2UtgKGblxR+WbbcAw0w8AaqqlwiwVH640fQgrLJBbBpQBUkX9pXMd9
7wLuPWoaodJLnP9dPXuMYwVQ2sJrTuxZE0b8vh0HJGzUpaBB2IrRXnNTtgtM6lmy
On4Gj7aHRWYAWyb0RN2X3h6p3F+yJQ0F04YNFledq2YhW/xKWPcjH0kkygNA2gWV
hsd5mufkW/5TIIhzHnwAQMLHK/CaV2nCpggcfRGE8auHb86YP4w47/GBv0kMFiYX
dywn9Q/naJmDA/I5e8+tgsRzTiH3S6KqPYUUVXbYUPlrX68WwfxxNZFwpJENJDw7
NFDM3zVApPJO8Bn9/TBevfd4HGYYmQ==
-----END CERTIFICATE-----