Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e34332e302f32342d3234203d3e203633393131.roa
File:                     3130342e3232352e34332e302f32342d3234203d3e203633393131.roa (raw, json)
Hash identifier:          CGnexD5u5JkhHgqJiVs4EzPCex5xYDadtv/bXRWV4jw=
Subject key identifier:   42:40:C9:EA:58:D2:E0:C8:EF:C1:BF:E2:0F:6F:84:3F:14:9C:DF:7E
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       2F096CD305B2299B40708604F8BBF75D3F6B75AE
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e34332e302f32342d3234203d3e203633393131.roa
Signing time:             Mon 31 Oct 2022 17:51:31 +0000
ROA not before:           Mon 31 Oct 2022 17:46:31 +0000
ROA not after:            Mon 30 Oct 2023 17:51:31 +0000
asID:                     63911
IP address blocks:        104.225.43.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:09:6c:d3:05:b2:29:9b:40:70:86:04:f8:bb:f7:5d:3f:6b:75:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:46:31 2022 GMT
            Not After : Oct 30 17:51:31 2023 GMT
        Subject: CN=4240C9EA58D2E0C8EFC1BFE20F6F843F149CDF7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f1:9a:90:68:14:6e:26:f4:e8:ca:51:5d:a0:
                    ae:e1:58:e0:49:78:ae:33:c0:bf:47:5f:92:f9:07:
                    fb:67:96:48:4d:b4:67:7e:e9:97:63:86:ee:3c:7d:
                    b0:7c:2f:7d:9b:53:1d:aa:3a:41:b7:f5:81:58:fb:
                    66:ca:93:9f:04:d2:e5:77:a7:11:68:3c:96:5d:f9:
                    a7:12:a8:e8:0f:a0:6f:61:a9:c2:13:7d:32:09:86:
                    7e:54:47:c2:77:0c:74:fb:bb:c1:fc:7c:8f:18:da:
                    7b:d8:5a:59:42:e6:80:3d:ec:be:3e:f6:3c:84:05:
                    5d:fd:80:8a:75:43:b3:57:9b:c7:8d:29:e0:5a:21:
                    9d:bf:e3:03:41:20:03:b0:c6:43:d9:a0:8f:f9:cf:
                    90:ba:13:67:58:ee:8f:f8:54:d8:dc:40:21:49:a2:
                    ac:81:35:88:47:f6:91:cd:64:ae:37:22:cb:78:ae:
                    41:1f:ba:8d:ea:2b:d5:31:a4:8f:25:f1:11:a9:1a:
                    32:e4:29:7b:92:5c:73:e2:75:c4:22:f4:46:e7:c7:
                    d7:dc:11:53:3e:21:be:64:b3:30:e0:b7:1e:de:f5:
                    6b:aa:7c:3f:0f:b5:30:29:e6:ae:2c:b5:69:45:4b:
                    87:e9:36:bc:99:58:21:a2:00:54:4b:fd:c6:75:ff:
                    5f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:40:C9:EA:58:D2:E0:C8:EF:C1:BF:E2:0F:6F:84:3F:14:9C:DF:7E
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e34332e302f32342d3234203d3e203633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:df:9e:e9:08:fd:c6:f6:6a:a0:8b:1c:c6:3d:a1:b4:47:38:
         82:53:5c:14:5b:ac:3c:26:82:3d:02:8c:bc:b2:19:40:7c:30:
         31:31:76:a0:c8:d0:84:8c:c3:24:00:bb:03:f8:5f:b0:4f:ff:
         e0:ee:60:a3:b4:44:cb:e7:29:0e:25:4f:ef:26:3d:7f:11:ae:
         e1:9e:f6:46:53:f5:60:24:f4:05:38:55:9a:33:8d:c0:41:2c:
         9c:08:93:98:83:8c:8e:e3:94:6a:ed:7c:6d:63:ca:45:81:91:
         b6:f0:df:8f:09:66:40:3a:f8:0f:3e:26:d9:3d:12:f5:4b:30:
         72:0e:68:5a:ac:2d:2a:c8:c2:c7:2d:16:0c:8b:97:0d:aa:f6:
         07:3a:58:be:c9:b4:be:d6:1c:83:8e:bc:a6:e1:54:b9:16:e9:
         92:cc:50:ac:b0:eb:cd:05:99:90:8a:66:71:c5:17:c4:3b:91:
         76:14:0f:96:53:07:fd:8b:88:09:71:4d:90:b7:c6:e1:cc:76:
         11:de:1b:03:a7:97:91:95:92:f1:26:a7:5a:94:5d:99:b8:85:
         62:28:80:dc:57:84:42:f0:f2:af:1b:5f:ae:15:69:8d:dd:75:
         d4:a9:3e:a3:2c:4d:9e:2f:80:03:cd:86:62:80:9f:a4:30:4d:
         39:67:c4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----