Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e33392e302f32342d3234203d3e203633393131.roa
File:                     3130342e3232352e33392e302f32342d3234203d3e203633393131.roa (raw, json)
Hash identifier:          vGYrcqVs8GaSvQ1LG+yWkqelx6kJp9VKpoxrvBfk08E=
Subject key identifier:   B2:E9:97:FF:75:BE:F1:44:B8:B1:D4:6E:0D:0C:51:0D:87:4D:F8:7A
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       0B450E8D1BFFA851A53FC3A1E4C395D2397C968B
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e33392e302f32342d3234203d3e203633393131.roa
Signing time:             Mon 31 Oct 2022 17:51:32 +0000
ROA not before:           Mon 31 Oct 2022 17:46:32 +0000
ROA not after:            Mon 30 Oct 2023 17:51:32 +0000
asID:                     63911
IP address blocks:        104.225.39.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:45:0e:8d:1b:ff:a8:51:a5:3f:c3:a1:e4:c3:95:d2:39:7c:96:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:46:32 2022 GMT
            Not After : Oct 30 17:51:32 2023 GMT
        Subject: CN=B2E997FF75BEF144B8B1D46E0D0C510D874DF87A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2f:c6:7c:74:88:9e:ba:ba:4b:c0:07:0f:cf:
                    78:81:05:22:ff:4b:7f:a6:9d:b8:b7:a5:c0:98:5d:
                    a5:9b:65:46:b3:4d:00:e9:b6:e0:c5:ef:db:ea:48:
                    f1:4b:e6:ee:28:7d:a8:f5:29:33:3a:fa:f1:bb:3e:
                    ac:36:16:13:c3:82:1d:92:e3:af:77:b2:a9:cb:60:
                    0e:ee:1f:43:ef:c3:07:a3:09:f4:29:78:dc:43:88:
                    97:ba:ff:31:4c:6a:c2:26:44:10:8a:e8:2f:31:f9:
                    ae:67:49:ad:da:ea:2e:58:c8:3e:cd:83:82:a8:f2:
                    01:66:1b:05:15:76:2b:f2:2e:fb:a8:f1:09:47:d8:
                    04:a1:dd:78:37:e6:01:aa:59:a9:ec:e6:e3:e9:94:
                    b5:b1:df:82:fe:e7:69:3b:0d:81:b8:fd:d4:6b:6a:
                    fe:f7:2e:56:5b:b4:9d:8a:07:54:d5:84:22:9b:92:
                    d5:9b:fa:d8:c6:ba:a3:b9:d6:e2:59:9c:38:16:f6:
                    dc:2c:01:1b:00:9b:c9:ad:0b:85:ea:ef:65:1f:95:
                    92:5d:b6:58:e8:43:d7:36:de:77:27:c2:09:2f:57:
                    29:e5:d0:6e:d6:c3:1a:a7:93:72:0f:10:fe:92:24:
                    7c:7f:eb:b5:28:98:d5:ab:3f:b9:4a:e4:d0:8c:fa:
                    ac:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E9:97:FF:75:BE:F1:44:B8:B1:D4:6E:0D:0C:51:0D:87:4D:F8:7A
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e33392e302f32342d3234203d3e203633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:5e:22:1b:31:7f:2e:10:a0:83:f3:4e:b7:7a:32:84:f8:16:
         7b:78:8b:bc:8d:4b:85:b5:16:c5:c7:51:5c:53:7f:8a:d7:48:
         cf:4b:92:4f:fd:32:51:b9:8c:2d:62:dd:97:d2:ee:19:83:c3:
         c0:c9:f2:6e:e2:58:bb:82:12:a3:2b:98:da:57:cc:e3:e7:55:
         f9:11:ef:e3:9d:36:5c:39:ab:a6:4b:f5:88:fe:d8:92:ed:ca:
         35:aa:be:6f:7f:26:10:a7:c2:b0:ce:fd:0d:5d:37:d8:4f:2d:
         0f:25:ed:dd:d5:32:9a:cf:b3:46:8c:26:34:4b:5e:cd:f2:3c:
         86:51:75:c1:8c:eb:b0:38:f5:91:02:d0:af:9b:d2:ed:5f:b8:
         7c:7b:cc:6e:03:7f:58:30:fe:c0:54:18:2f:47:7a:4f:58:fb:
         ff:e2:57:0d:da:ab:e4:c4:11:c6:b6:b7:24:83:e3:7c:dc:90:
         32:c1:a5:24:29:c3:49:2d:50:e4:2c:0f:d0:b8:2e:82:04:da:
         d1:8e:e2:42:2f:72:ff:f6:1f:d7:ab:0e:9d:ca:48:4f:19:15:
         52:80:93:6b:be:b8:c1:e7:d3:69:5d:ba:6a:ab:0e:5c:d5:90:
         c1:41:ce:42:d0:b8:d6:a0:45:e6:ae:cd:91:3d:33:72:2d:d8:
         99:f3:60:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----