Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e382e302f32322d3232203d3e203336323336.roa
File:                     3130342e3232352e382e302f32322d3232203d3e203336323336.roa (raw, json)
Hash identifier:          wS2yMAktdYPCwOLu/FPMIaAWh7UBn5mEc+8Zd/gFtu4=
Subject key identifier:   F2:6D:07:7E:BF:CD:9A:93:D9:20:40:A8:C7:04:FF:4F:BC:66:B2:EE
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       2A53D4B255E98ABE61B730CBA8AD47458B6BE5C3
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e382e302f32322d3232203d3e203336323336.roa
Signing time:             Mon 31 Oct 2022 17:50:13 +0000
ROA not before:           Mon 31 Oct 2022 17:45:13 +0000
ROA not after:            Mon 30 Oct 2023 17:50:13 +0000
asID:                     36236
IP address blocks:        104.225.8.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:53:d4:b2:55:e9:8a:be:61:b7:30:cb:a8:ad:47:45:8b:6b:e5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:45:13 2022 GMT
            Not After : Oct 30 17:50:13 2023 GMT
        Subject: CN=F26D077EBFCD9A93D92040A8C704FF4FBC66B2EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:73:e3:fb:67:3e:b4:fe:3a:73:5c:7e:e5:b8:
                    15:c0:28:31:57:e1:b3:6f:37:bd:9d:5e:d7:3a:84:
                    ef:d5:da:df:f5:69:08:95:a5:86:18:22:a9:2d:e3:
                    34:02:20:a0:93:c3:bf:e7:8f:6f:87:74:20:20:a5:
                    25:b2:4a:9b:83:43:20:2b:63:23:e9:db:26:42:4f:
                    da:0e:27:21:94:c8:d3:d2:ad:da:40:c1:fc:ec:64:
                    a0:c5:f0:86:37:8b:bb:bc:5f:a3:c1:9d:1b:c7:0f:
                    47:9f:46:09:6f:62:78:7e:b0:58:ab:8f:f4:59:85:
                    9b:eb:7b:80:9c:9b:6d:97:59:ef:c9:8c:04:51:58:
                    ad:9e:c6:94:4a:ad:0e:90:95:9f:45:45:ee:27:24:
                    1f:63:d1:92:87:ae:9a:f4:89:a9:8c:07:7d:1c:78:
                    8b:a6:6c:05:70:ae:54:58:69:33:35:a4:88:fd:62:
                    ea:62:1c:ad:72:64:45:c4:b0:f4:7d:53:55:37:cd:
                    a8:d2:e7:37:90:55:79:37:2a:58:63:a8:c4:cc:26:
                    67:28:d2:aa:a7:c6:c2:bd:7b:69:8a:cf:c9:91:ab:
                    55:17:02:f7:99:5b:89:dd:65:f4:10:7e:15:10:68:
                    c0:fa:50:81:23:7a:de:6f:98:91:3d:8a:ee:2d:60:
                    4c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6D:07:7E:BF:CD:9A:93:D9:20:40:A8:C7:04:FF:4F:BC:66:B2:EE
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e382e302f32322d3232203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:2b:05:28:eb:c9:a0:ee:64:67:24:95:c6:ae:26:b6:ed:4b:
         7f:27:f4:ad:1a:62:a1:06:34:10:57:15:cc:7c:03:cb:c4:d2:
         46:e4:13:f6:53:0c:d9:f5:b7:98:82:1a:fb:b3:a1:76:8e:f6:
         ad:58:a7:eb:b3:06:12:06:8f:8c:79:5a:5d:83:82:e9:e7:d9:
         a0:db:51:1f:cd:5e:58:c0:07:92:02:60:df:d6:a8:7b:5c:b0:
         94:18:1b:a7:a1:eb:4c:ec:9d:b7:c6:53:91:92:fa:50:35:f9:
         73:87:27:2e:c7:2f:f1:74:b0:05:e3:31:84:94:16:76:82:28:
         de:6e:99:67:2a:e7:09:2b:4e:1a:90:d8:a5:6d:ec:8f:ea:a6:
         54:b4:61:65:b7:55:bc:d1:40:24:a9:75:3c:e6:e1:ef:9f:22:
         87:98:14:8c:b3:5e:f5:ab:34:88:44:90:ba:5a:5e:3f:1d:b5:
         fb:17:c3:a4:bd:93:92:9b:45:87:e7:30:f6:d5:09:65:36:dc:
         f3:cb:cb:a5:30:36:f6:50:cb:6d:cc:ce:38:d8:25:86:17:d1:
         62:12:0d:0b:c9:4f:c5:c0:dd:fd:81:cb:9a:52:fe:8b:9f:b4:
         ca:f3:d4:a1:67:13:88:09:0a:2f:eb:18:67:5a:12:d8:e2:d1:
         38:82:7d:95
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUKlPUslXpir5htzDLqK1HRYtr5cMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm
ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjIxMDMxMTc0NTEzWhcNMjMxMDMwMTc1MDEz
WjAzMTEwLwYDVQQDEyhGMjZEMDc3RUJGQ0Q5QTkzRDkyMDQwQThDNzA0RkY0RkJD
NjZCMkVFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3Pj+2c+tP46
c1x+5bgVwCgxV+Gzbze9nV7XOoTv1drf9WkIlaWGGCKpLeM0AiCgk8O/549vh3Qg
IKUlskqbg0MgK2Mj6dsmQk/aDichlMjT0q3aQMH87GSgxfCGN4u7vF+jwZ0bxw9H
n0YJb2J4frBYq4/0WYWb63uAnJttl1nvyYwEUVitnsaUSq0OkJWfRUXuJyQfY9GS
h66a9ImpjAd9HHiLpmwFcK5UWGkzNaSI/WLqYhytcmRFxLD0fVNVN82o0uc3kFV5
NypYY6jEzCZnKNKqp8bCvXtpis/JkatVFwL3mVuJ3WX0EH4VEGjA+lCBI3reb5iR
PYruLWBMGwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFPJtB36/zZqT2SBAqMcE/0+8
ZrLuMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv
MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0
ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2
ODY2MTA4NGI4Ni8wLzMxMzAzNDJlMzIzMjM1MmUzODJlMzAyZjMyMzIyZDMyMzIy
MDNkM2UyMDMzMzYzMjMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJo4QgwDQYJKoZIhvcNAQELBQAD
ggEBAGcrBSjryaDuZGcklcauJrbtS38n9K0aYqEGNBBXFcx8A8vE0kbkE/ZTDNn1
t5iCGvuzoXaO9q1Yp+uzBhIGj4x5Wl2Dgunn2aDbUR/NXljAB5ICYN/WqHtcsJQY
G6eh60zsnbfGU5GS+lA1+XOHJy7HL/F0sAXjMYSUFnaCKN5umWcq5wkrThqQ2KVt
7I/qplS0YWW3VbzRQCSpdTzm4e+fIoeYFIyzXvWrNIhEkLpaXj8dtfsXw6S9k5Kb
RYfnMPbVCWU23PPLy6UwNvZQy23MzjjYJYYX0WISDQvJT8XA3f2By5pS/ouftMrz
1KFnE4gJCi/rGGdaEtji0TiCfZU=
-----END CERTIFICATE-----