Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e342e302f32322d3232203d3e203336323336.roa
File:                     3130342e3232352e342e302f32322d3232203d3e203336323336.roa (raw, json)
Hash identifier:          5Axpq7+304KcRSZ6QvfNcp7bObql9pkBywRRvKikgBk=
Subject key identifier:   E4:82:31:E5:60:53:95:65:60:CC:3E:DA:7B:C5:2E:04:47:84:56:1F
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       374A790B14817806FDF8AB1218D419F73C5F5CF3
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e342e302f32322d3232203d3e203336323336.roa
Signing time:             Mon 31 Oct 2022 17:50:12 +0000
ROA not before:           Mon 31 Oct 2022 17:45:12 +0000
ROA not after:            Mon 30 Oct 2023 17:50:12 +0000
asID:                     36236
IP address blocks:        104.225.4.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:4a:79:0b:14:81:78:06:fd:f8:ab:12:18:d4:19:f7:3c:5f:5c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:45:12 2022 GMT
            Not After : Oct 30 17:50:12 2023 GMT
        Subject: CN=E48231E56053956560CC3EDA7BC52E044784561F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:90:6b:4d:40:2f:b2:5c:9e:f6:12:7c:d7:5d:
                    fb:23:e5:78:17:b8:7d:f5:2e:2b:10:f4:6b:98:f3:
                    72:9d:65:2d:21:5c:d8:f5:b8:cd:65:a4:ac:54:3d:
                    56:f2:9d:d4:5e:06:43:68:d6:f2:4f:56:74:0a:9b:
                    11:43:67:d1:a1:33:b5:52:fd:c3:8d:49:f9:f7:1d:
                    8e:8c:b1:15:f9:73:6b:bb:45:2c:5f:c1:0f:2f:5e:
                    50:e8:6b:f3:a2:dc:a2:e4:b9:15:30:fd:b2:c7:dc:
                    ef:32:0d:e1:5e:6d:77:4b:6b:ec:c8:94:48:ba:91:
                    fe:4a:97:85:6d:ef:5e:a9:5d:bc:0e:a7:58:24:ca:
                    03:71:59:c2:5f:3c:de:ad:ee:5a:4d:03:a9:b0:1c:
                    ea:f6:a8:2c:c4:5a:54:fa:ae:d7:fc:15:a2:07:4f:
                    a3:a4:1f:20:bf:2a:55:40:0b:b0:5d:3d:10:02:76:
                    b5:b4:12:94:8d:1d:a1:24:84:51:6a:82:8f:4f:8c:
                    dc:4b:70:8f:d1:70:0b:21:1d:f4:d0:14:cb:3f:16:
                    24:e1:bf:c0:7d:bc:5e:fd:68:e9:36:66:f9:39:6e:
                    ba:de:67:1c:9f:b5:a2:dc:bc:bb:f0:0c:d0:94:9f:
                    ff:13:55:56:ac:2b:67:a2:ed:0e:23:ef:45:90:d9:
                    14:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:82:31:E5:60:53:95:65:60:CC:3E:DA:7B:C5:2E:04:47:84:56:1F
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e342e302f32322d3232203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:0d:4a:fc:96:e9:a2:d9:ff:52:1d:e6:79:f7:06:eb:9c:8f:
         ea:94:b8:c8:7d:ae:ae:e4:94:7e:3c:3c:45:57:1d:ab:fc:ee:
         0f:ad:a9:02:e2:c7:fe:2a:d5:06:33:d0:1e:be:b3:7d:6c:9b:
         28:55:c2:a9:ae:9b:75:af:bb:49:80:81:92:dc:77:c6:96:6c:
         5b:68:d6:a8:7a:dd:90:ea:a7:76:eb:9e:c8:57:9a:05:59:a1:
         16:ac:ec:f0:f2:1e:93:bf:fa:90:8a:a7:75:bb:70:6f:ad:d2:
         33:5e:c8:47:e0:06:1e:4e:71:20:be:3b:3c:5d:18:d9:9a:7d:
         e2:4d:a0:06:47:a8:44:b2:f2:6a:b0:66:4d:ed:6e:1e:f8:ee:
         41:66:d2:09:e6:38:0e:0e:c8:ac:06:69:63:35:c9:c4:3c:60:
         b8:c0:5d:ed:49:99:ab:c8:d4:ea:3d:da:f0:53:f9:3c:36:19:
         5b:ad:24:8e:b8:20:8c:50:6a:80:29:a9:10:95:14:a4:02:62:
         a1:63:28:cb:38:58:da:ad:80:a1:f5:85:30:94:79:ef:51:68:
         0b:b0:82:a9:f0:b4:f2:a6:91:43:37:63:09:05:af:83:ba:24:
         33:60:00:38:1a:01:c4:3d:3b:c7:83:fa:a6:d6:a8:75:13:07:
         21:4b:6c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----