Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e34342e302f32342d3234203d3e203336323336.roa
File:                     3130342e3232352e34342e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          d72x38Pn0s963w4GM2g8m83CCcL3c9fB5TXfmgpGRsU=
Subject key identifier:   90:CA:42:47:0B:23:FB:7F:CA:5F:AF:3B:42:D7:F4:6C:C9:3A:85:6F
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       622EB90B9AE56CF9DA9F56322FCCA65CDF5CB1CB
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e34342e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 31 Oct 2022 17:50:11 +0000
ROA not before:           Mon 31 Oct 2022 17:45:11 +0000
ROA not after:            Mon 30 Oct 2023 17:50:11 +0000
asID:                     36236
IP address blocks:        104.225.44.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2e:b9:0b:9a:e5:6c:f9:da:9f:56:32:2f:cc:a6:5c:df:5c:b1:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:45:11 2022 GMT
            Not After : Oct 30 17:50:11 2023 GMT
        Subject: CN=90CA42470B23FB7FCA5FAF3B42D7F46CC93A856F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bd:b5:b2:61:02:a9:cb:9b:17:c8:2a:15:f8:
                    b5:60:2e:f1:84:13:e1:ad:f7:c1:fb:bf:6e:92:2e:
                    df:de:07:15:8a:3c:ca:02:d1:b5:b4:a9:bb:c5:c0:
                    45:dc:37:74:7d:b7:5a:9f:d0:fa:9a:c1:b8:ab:4e:
                    2e:95:95:df:3d:c2:18:f4:1f:5e:e6:b3:a7:f2:53:
                    aa:9b:da:52:5a:d7:ff:d9:ab:f7:08:44:97:5b:c0:
                    2b:fb:1f:1f:09:35:57:ac:2c:9d:ec:e9:69:b5:80:
                    20:81:cc:e2:6c:00:10:83:c1:7a:7f:43:69:d8:5b:
                    32:aa:90:73:68:d0:43:87:93:f3:06:08:4f:9f:c7:
                    ee:eb:3f:64:f7:79:a8:45:73:93:50:38:38:52:5c:
                    d4:12:fc:72:66:54:13:60:8b:2d:4a:0d:b9:96:2d:
                    02:0c:da:f9:28:fd:15:86:2e:6b:10:a4:e6:de:89:
                    88:e2:e1:c1:ce:5a:39:94:32:f5:97:23:d0:e6:f5:
                    8f:43:04:12:5d:a0:4d:db:d8:ec:22:c1:f6:e9:3b:
                    07:11:04:4e:d4:ee:ff:63:eb:9c:20:3a:a0:a5:5c:
                    56:bd:05:15:e2:ff:d6:1e:d1:4d:7d:a0:6c:75:38:
                    48:30:ce:65:74:6c:a9:99:4f:b7:0f:51:a5:42:4b:
                    7c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CA:42:47:0B:23:FB:7F:CA:5F:AF:3B:42:D7:F4:6C:C9:3A:85:6F
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e34342e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:b0:e8:20:27:e7:0c:72:0d:b1:92:d2:04:00:2c:d7:9f:aa:
         44:f6:10:93:1c:cb:86:b8:e6:33:d4:20:19:df:89:7c:f2:0d:
         00:de:82:be:f4:28:9b:4b:1c:99:fc:e2:00:d6:bc:24:44:e8:
         db:42:b9:7c:a6:89:f5:a0:ab:63:67:44:7a:dd:f3:11:bb:fc:
         b9:60:39:6d:4f:ad:a2:70:35:01:df:03:60:54:19:72:87:00:
         1e:ea:53:87:e2:9e:5b:73:80:08:f6:4c:83:59:da:68:de:20:
         e7:10:a9:e2:87:a6:94:9c:7f:5b:0b:f1:56:c5:2f:6b:25:8f:
         3f:d3:8f:97:c7:3e:75:aa:8b:f1:3a:5a:7a:62:c5:e4:c5:18:
         7e:c5:ce:c6:19:f0:6f:05:17:d8:4e:d6:b7:6c:0f:1d:c5:ed:
         66:b4:aa:09:a4:ee:72:ac:9e:e3:ad:3f:41:24:16:f9:70:5e:
         8f:0a:17:1a:1d:35:1c:e7:da:dc:e1:e8:a9:bb:08:91:5b:2b:
         ce:a0:51:5c:81:0f:4f:49:77:54:50:39:ad:d5:25:d4:01:11:
         8a:87:4d:e4:37:59:45:b1:fc:12:43:73:08:85:44:0d:d6:38:
         b6:aa:b7:b4:2f:9a:58:f5:df:31:d7:77:8e:fd:f3:96:73:5a:
         70:8d:67:b4
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUYi65C5rlbPnan1YyL8ymXN9cscswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm
ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjIxMDMxMTc0NTExWhcNMjMxMDMwMTc1MDEx
WjAzMTEwLwYDVQQDEyg5MENBNDI0NzBCMjNGQjdGQ0E1RkFGM0I0MkQ3RjQ2Q0M5
M0E4NTZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1b21smECqcub
F8gqFfi1YC7xhBPhrffB+79uki7f3gcVijzKAtG1tKm7xcBF3Dd0fbdan9D6msG4
q04ulZXfPcIY9B9e5rOn8lOqm9pSWtf/2av3CESXW8Ar+x8fCTVXrCyd7OlptYAg
gczibAAQg8F6f0Np2FsyqpBzaNBDh5PzBghPn8fu6z9k93moRXOTUDg4UlzUEvxy
ZlQTYIstSg25li0CDNr5KP0Vhi5rEKTm3omI4uHBzlo5lDL1lyPQ5vWPQwQSXaBN
29jsIsH26TsHEQRO1O7/Y+ucIDqgpVxWvQUV4v/WHtFNfaBsdThIMM5ldGypmU+3
D1GlQkt8sQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFJDKQkcLI/t/yl+vO0LX9GzJ
OoVvMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv
MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0
ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2
ODY2MTA4NGI4Ni8wLzMxMzAzNDJlMzIzMjM1MmUzNDM0MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzMzNjMyMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjhLDANBgkqhkiG9w0BAQsF
AAOCAQEAWbDoICfnDHINsZLSBAAs15+qRPYQkxzLhrjmM9QgGd+JfPINAN6CvvQo
m0scmfziANa8JETo20K5fKaJ9aCrY2dEet3zEbv8uWA5bU+tonA1Ad8DYFQZcocA
HupTh+KeW3OACPZMg1naaN4g5xCp4oemlJx/WwvxVsUvayWPP9OPl8c+daqL8Tpa
emLF5MUYfsXOxhnwbwUX2E7Wt2wPHcXtZrSqCaTucqye460/QSQW+XBejwoXGh01
HOfa3OHoqbsIkVsrzqBRXIEPT0l3VFA5rdUl1AERiodN5DdZRbH8EkNzCIVEDdY4
tqq3tC+aWPXfMdd3jv3zlnNacI1ntA==
-----END CERTIFICATE-----