Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e34322e302f32342d3234203d3e203633393131.roa
File:                     3130342e3232352e34322e302f32342d3234203d3e203633393131.roa (raw, json)
Hash identifier:          9UNc3+0/vLFlYnyfEHr/hoMQm6nMelwoqaH0Wbr6Z1k=
Subject key identifier:   EF:2C:2A:70:90:1D:AA:52:0B:71:2E:B8:11:A2:07:21:DB:AE:87:72
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       09555D7F95555BF54CB029941B7200581EBD7A01
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e34322e302f32342d3234203d3e203633393131.roa
Signing time:             Mon 31 Oct 2022 17:51:31 +0000
ROA not before:           Mon 31 Oct 2022 17:46:31 +0000
ROA not after:            Mon 30 Oct 2023 17:51:31 +0000
asID:                     63911
IP address blocks:        104.225.42.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:55:5d:7f:95:55:5b:f5:4c:b0:29:94:1b:72:00:58:1e:bd:7a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:46:31 2022 GMT
            Not After : Oct 30 17:51:31 2023 GMT
        Subject: CN=EF2C2A70901DAA520B712EB811A20721DBAE8772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a3:f2:d5:ba:eb:9f:ef:68:fa:ee:a7:02:7e:
                    43:57:91:a3:8c:c2:a6:ac:25:fc:51:a2:b5:79:1e:
                    ed:f3:37:e2:c1:0f:ed:61:92:51:c1:22:d4:9f:ae:
                    d9:76:3b:06:87:44:c3:fe:6b:5c:f8:1e:3f:a7:e0:
                    8b:84:08:ad:7d:e3:42:22:3c:43:e4:55:dc:bf:86:
                    4a:b6:88:20:9b:f2:a2:14:dc:cf:f8:53:4d:b8:44:
                    28:31:78:db:02:c8:54:7c:18:ee:e5:69:12:e0:db:
                    b5:b6:74:8d:3d:8f:89:ac:a8:7d:a0:7b:7e:95:85:
                    15:1b:a1:6c:97:6f:17:59:45:63:be:73:e7:ce:0d:
                    c8:ae:b7:3a:23:00:a8:5d:5b:0b:99:bd:87:55:59:
                    df:02:c9:d6:d2:5a:9a:3f:a5:5c:6f:f3:bc:20:e9:
                    ce:32:9f:2a:6a:0e:de:d9:84:f3:53:65:c7:6a:65:
                    91:71:36:a8:94:96:7d:40:f2:71:17:de:3f:ca:4b:
                    2b:be:05:72:f4:87:8f:dc:9c:0e:68:13:8e:16:93:
                    a1:1c:e0:cd:40:81:15:6a:cf:c1:68:21:a7:0b:59:
                    5b:dd:16:48:70:44:38:c9:fe:8a:3e:c9:22:cd:16:
                    ee:25:a1:53:d8:8b:d2:4e:4f:cd:f3:13:a4:bf:01:
                    c7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2C:2A:70:90:1D:AA:52:0B:71:2E:B8:11:A2:07:21:DB:AE:87:72
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e34322e302f32342d3234203d3e203633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:d7:92:da:ef:d3:14:7c:8b:bc:22:d7:09:e9:16:b0:63:5f:
         f7:d5:1a:fb:f0:55:c6:32:d4:4f:f5:56:b3:22:2d:f1:12:a6:
         7b:0d:33:63:9c:2c:2a:47:9f:30:e4:d2:73:2f:90:50:38:37:
         7c:e0:95:c0:8a:f1:fe:e6:95:31:61:4b:8e:7c:39:84:5c:81:
         f0:53:fd:53:cc:9b:74:0e:d0:21:a7:f6:ef:d3:88:c7:06:9a:
         3e:dd:cb:77:ed:48:42:20:89:2b:bc:d5:6b:54:8e:54:4d:2e:
         d1:ac:ac:62:6c:2f:ac:ae:af:37:e9:32:4d:e2:76:ee:37:d4:
         8e:1c:a2:59:de:c6:44:9c:24:93:14:bf:6b:42:88:62:7c:63:
         d6:96:2f:b6:16:6d:b1:ea:2a:53:4b:b3:7b:51:5f:51:c3:87:
         5d:30:f8:e0:68:2d:8f:0f:fd:68:a0:d0:cc:7a:8b:28:3c:31:
         42:d8:10:c6:40:ff:a1:cd:2b:6d:09:f5:19:6a:17:46:43:9c:
         da:f6:94:81:31:91:04:4d:04:af:eb:10:ea:36:91:c9:ee:38:
         14:df:d5:45:b4:d2:2b:62:fe:de:40:1f:6d:7d:45:7d:38:d8:
         72:0e:4c:ef:2d:c0:27:91:d4:7d:18:47:a7:7d:0d:0d:35:5c:
         7d:9a:ed:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----