Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e34372e302f32342d3234203d3e203633393131.roa
File:                     3130342e3232352e34372e302f32342d3234203d3e203633393131.roa (raw, json)
Hash identifier:          THpBJibw6Yl/uMsE3hr3zcPBb0utZgorbZQ9mB2wFtw=
Subject key identifier:   EF:65:A9:95:D7:6D:EF:E7:53:F2:9E:10:84:D9:6E:7A:B8:8F:AC:C0
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       4A77267BAD3D1277B647EF7C541E3B1A75A6175F
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e34372e302f32342d3234203d3e203633393131.roa
Signing time:             Mon 31 Oct 2022 17:51:31 +0000
ROA not before:           Mon 31 Oct 2022 17:46:31 +0000
ROA not after:            Mon 30 Oct 2023 17:51:31 +0000
asID:                     63911
IP address blocks:        104.225.47.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:77:26:7b:ad:3d:12:77:b6:47:ef:7c:54:1e:3b:1a:75:a6:17:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:46:31 2022 GMT
            Not After : Oct 30 17:51:31 2023 GMT
        Subject: CN=EF65A995D76DEFE753F29E1084D96E7AB88FACC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:33:77:7e:a3:2f:10:5b:08:60:5d:eb:da:90:
                    ec:a0:51:7d:9b:2d:37:43:e8:aa:36:14:11:a8:4f:
                    87:f4:fc:88:74:c6:64:71:a1:ed:63:74:f7:a2:1d:
                    20:3d:e3:d5:51:8c:19:1c:5f:15:b7:bb:ef:57:ea:
                    4c:50:ed:0e:b9:93:db:52:e9:80:2b:e3:9f:10:94:
                    3f:2d:c1:78:23:95:67:8a:50:b9:56:71:06:c5:d8:
                    3e:7a:51:33:3b:c7:9c:a3:d8:8a:ea:96:85:28:2d:
                    55:66:6f:6e:38:2e:51:1d:8e:fc:c9:f0:63:bc:d0:
                    58:be:4e:fe:9f:f3:47:f7:0c:77:61:03:e4:26:c2:
                    ea:19:59:b2:dc:87:c3:fc:27:a5:91:ec:ee:77:b5:
                    3a:36:2c:94:01:77:4a:65:e9:64:ab:9f:56:2c:5d:
                    44:82:4a:dc:24:48:c8:18:92:89:8e:ff:11:ef:71:
                    aa:be:10:61:dc:ce:79:b1:f2:61:c1:e7:6f:73:3c:
                    f5:ec:79:3d:53:fc:b6:f6:10:14:91:e3:ad:ad:b4:
                    d4:ff:c3:b8:b5:07:be:50:aa:8b:d2:24:22:90:cf:
                    cb:76:51:93:36:55:d8:16:d9:51:d6:30:2f:e5:49:
                    54:68:76:4a:de:a9:37:b9:40:c8:b4:b7:08:3c:1e:
                    21:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:65:A9:95:D7:6D:EF:E7:53:F2:9E:10:84:D9:6E:7A:B8:8F:AC:C0
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e34372e302f32342d3234203d3e203633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:50:c9:1d:4f:15:7b:05:82:6a:b3:62:4c:5b:85:11:90:32:
         fc:48:82:a9:08:21:c2:11:69:f1:43:f1:e8:a1:97:67:49:07:
         8f:0a:37:ff:1d:2d:58:ca:62:79:7b:07:6f:c6:12:92:01:08:
         04:ab:6b:16:43:5d:69:47:eb:8a:85:04:d0:1d:b7:68:7a:3c:
         54:65:e8:40:f7:52:86:1e:2d:ec:16:b7:e8:26:59:06:cd:95:
         31:5a:b7:41:47:5d:82:34:3f:3d:94:92:a8:6c:b8:d5:91:1f:
         13:e1:d6:49:ab:fb:1f:2c:12:b4:ad:b9:65:7c:bf:be:5f:55:
         4d:e3:49:3a:f9:82:20:35:4a:6c:aa:0a:a5:d5:a1:e3:44:ad:
         2e:28:12:66:af:07:0b:63:ed:a0:bd:f2:f8:e1:20:24:a3:3f:
         c6:97:00:1d:26:06:1f:bd:40:3d:53:f2:bd:e8:4e:b4:2c:1e:
         90:5f:80:6a:42:ac:84:35:a7:60:e0:46:08:e7:1e:09:3a:48:
         15:7a:95:fe:68:f0:c3:a2:c5:d7:fc:50:43:7e:64:8a:00:be:
         5a:2f:60:ed:2b:0f:53:15:91:b1:3a:5d:53:d7:a8:bf:1e:2e:
         6e:c7:13:cb:1f:18:46:fd:a9:7e:f8:7b:03:82:c0:0d:b8:e4:
         b9:dc:3a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----