Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e34312e302f32342d3234203d3e203633393131.roa
File:                     3130342e3232352e34312e302f32342d3234203d3e203633393131.roa (raw, json)
Hash identifier:          UTE0Fhv9GzmC61iAfpOgH+wfpR9aqeu+QkWIOJLl5R8=
Subject key identifier:   00:60:59:B4:3B:82:3E:4A:18:D5:FA:B9:13:88:8A:D7:DF:3D:2E:EB
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       10677BF9AFDABCB9D882D5DA144183CD66A511F4
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e34312e302f32342d3234203d3e203633393131.roa
Signing time:             Mon 31 Oct 2022 17:51:30 +0000
ROA not before:           Mon 31 Oct 2022 17:46:30 +0000
ROA not after:            Mon 30 Oct 2023 17:51:30 +0000
asID:                     63911
IP address blocks:        104.225.41.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:67:7b:f9:af:da:bc:b9:d8:82:d5:da:14:41:83:cd:66:a5:11:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:46:30 2022 GMT
            Not After : Oct 30 17:51:30 2023 GMT
        Subject: CN=006059B43B823E4A18D5FAB913888AD7DF3D2EEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:73:21:d2:7b:0e:e0:e4:72:11:e6:ea:68:9c:
                    2e:3e:71:0f:ae:ce:08:7e:24:04:82:42:83:81:72:
                    56:85:64:85:02:64:6a:07:38:98:42:a3:9d:be:48:
                    23:16:23:c3:ea:90:48:99:1a:ce:91:ee:3f:a7:ab:
                    68:5d:68:6b:cd:f6:ed:8c:9b:0f:9a:e0:02:ef:52:
                    2f:dd:68:d6:c9:2a:47:dd:3c:ab:33:00:76:28:7d:
                    e0:9f:95:02:20:6b:98:2f:45:52:20:4a:5a:67:6a:
                    f2:4c:fe:30:5c:cd:dd:2e:e8:73:a4:f4:f1:6f:29:
                    4a:c7:56:06:02:ff:e5:72:76:9c:63:1e:f2:7b:a1:
                    ad:bd:9b:7b:18:27:cb:91:74:ec:38:10:48:6d:38:
                    0b:a4:28:39:59:02:6a:c5:90:40:de:58:c8:59:09:
                    18:18:87:00:35:01:a2:1b:de:72:b9:bd:eb:28:18:
                    f5:84:6d:7c:aa:7e:fa:dc:7d:77:ef:e3:15:ad:08:
                    17:42:1b:f0:1d:d6:5f:ec:1e:85:29:14:62:ef:92:
                    89:58:bc:47:49:f0:0d:77:63:75:1e:97:e2:e3:7b:
                    f7:bc:32:53:ae:0c:72:b9:72:61:c0:d3:0d:75:92:
                    bf:41:a3:1a:46:0f:24:b9:ee:b2:48:57:da:40:f3:
                    9c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:60:59:B4:3B:82:3E:4A:18:D5:FA:B9:13:88:8A:D7:DF:3D:2E:EB
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e34312e302f32342d3234203d3e203633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:a1:a2:28:05:fc:22:00:9a:80:03:36:0d:b1:94:47:f1:f1:
         2a:9e:23:58:18:09:c9:68:59:43:69:86:df:73:88:91:33:ee:
         93:44:56:8f:5f:f8:41:21:a5:c1:68:4f:fd:79:d0:67:e5:33:
         00:86:a7:99:ee:1b:97:28:70:5c:4b:1e:3d:39:1e:4b:4c:d4:
         b0:d8:a2:17:33:53:92:56:a6:6e:0f:03:09:e9:6c:d4:91:bc:
         c5:bb:13:28:db:7d:34:ab:40:38:e2:df:9a:5f:79:6c:2f:96:
         e0:03:5d:bb:d1:19:2b:b2:47:e2:17:1f:1e:fc:f4:4c:33:e5:
         d9:80:e3:55:53:11:16:1b:0d:71:7d:f4:b5:61:4f:65:0c:97:
         ef:7f:a8:cc:7d:9e:54:5a:fd:59:28:9f:c1:c1:25:86:72:ba:
         c9:fb:69:e8:03:a8:a0:f6:ac:5b:94:a2:5f:c9:06:5e:8f:46:
         ff:bc:b2:3b:f8:13:9a:dc:42:03:ef:7a:36:b5:7e:ff:4f:53:
         f5:83:73:46:e6:82:98:48:05:53:04:18:19:9f:c3:c6:b3:f4:
         47:84:87:05:cd:50:c2:3f:e7:4c:21:7b:70:92:d5:d5:b5:c4:
         2d:84:ae:8d:fc:e4:7e:d8:e8:9d:ad:d4:fe:a3:2e:12:6b:3b:
         61:68:84:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----