Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e39352e302f32342d3234203d3e203336323336.roa
File:                     3130342e3232352e39352e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          xGt7rM53MOFITdm81JHWQLFDLb9Cov961jLV9iu2XkE=
Subject key identifier:   72:3A:9C:1D:C6:FE:72:75:1B:B9:20:9A:1C:C6:95:DB:9D:AF:76:D5
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       663CC6A632200F00FBFEF3E016EDF356259712FE
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e39352e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 31 Oct 2022 17:50:13 +0000
ROA not before:           Mon 31 Oct 2022 17:45:13 +0000
ROA not after:            Mon 30 Oct 2023 17:50:13 +0000
asID:                     36236
IP address blocks:        104.225.95.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:3c:c6:a6:32:20:0f:00:fb:fe:f3:e0:16:ed:f3:56:25:97:12:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:45:13 2022 GMT
            Not After : Oct 30 17:50:13 2023 GMT
        Subject: CN=723A9C1DC6FE72751BB9209A1CC695DB9DAF76D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:3e:74:53:8c:bb:4e:5b:47:14:96:ed:19:
                    06:39:94:33:cf:32:03:c1:06:85:24:0a:75:4f:bf:
                    bc:62:7e:2c:13:69:55:e7:4c:48:13:d1:8a:70:87:
                    3c:6e:87:3f:d2:66:7e:40:9a:27:4e:21:62:01:86:
                    d7:0d:c3:3a:5d:08:77:16:0f:87:28:11:0f:2a:bd:
                    bf:da:86:55:ed:02:8c:ab:84:f7:8e:8e:6a:6c:2a:
                    dc:a7:ef:27:7d:01:45:d7:f5:38:7f:22:81:1f:3c:
                    94:c5:42:19:7b:b7:e4:dd:e2:3a:17:b3:bb:78:5e:
                    70:5e:1d:84:ad:cb:9d:ba:7e:fd:70:a2:fa:9f:c8:
                    8e:77:40:1e:e7:e6:97:e2:f5:c9:22:da:98:ee:e4:
                    5f:57:76:19:c9:11:0e:95:94:fc:5d:56:29:9e:89:
                    b9:c1:53:ba:c0:da:f1:62:b5:b1:a1:cd:36:9d:23:
                    e6:fd:74:a9:41:c2:75:ef:a1:40:48:02:d0:2c:d1:
                    2b:69:46:12:6c:22:22:a1:82:43:28:a9:9d:52:1c:
                    32:50:f8:c2:44:26:ec:8a:2b:67:6a:48:69:33:b0:
                    68:18:37:36:af:58:62:38:47:7f:2d:01:7a:27:fb:
                    94:6d:91:74:77:26:2a:09:da:5e:b9:b4:e9:dc:f4:
                    77:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3A:9C:1D:C6:FE:72:75:1B:B9:20:9A:1C:C6:95:DB:9D:AF:76:D5
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e39352e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:c7:b9:ff:dc:5d:b6:8e:66:fc:ef:d3:f2:e8:40:3e:6a:54:
         cb:94:54:1b:bd:ef:92:5c:08:5d:54:a2:b6:5d:55:a8:fa:d3:
         06:11:de:1f:2d:69:4a:a4:0b:b7:88:42:07:fd:52:37:bd:68:
         c6:bd:21:f5:ff:86:d0:4d:9e:30:0e:1c:e3:e9:42:2e:25:ea:
         54:d0:46:30:07:ef:1d:16:df:53:f3:5f:17:08:49:30:70:22:
         92:1c:3c:8f:2e:6b:6d:f8:bc:9c:2b:f7:98:c3:2c:7f:73:19:
         9e:c7:49:0e:da:d0:38:16:62:ed:27:64:a2:10:24:68:fc:e3:
         e0:e8:fb:aa:6e:d9:d5:4d:7a:5a:26:b3:2f:dc:3d:27:8e:fc:
         1e:41:d0:75:67:47:e1:7f:03:a2:46:78:1b:1a:62:03:2e:cd:
         5f:8e:d3:b4:19:89:8a:02:a7:d9:81:8e:3a:a0:48:f3:b4:b4:
         15:9a:23:c9:42:31:75:16:b2:a8:43:d0:34:b5:fe:f5:72:c8:
         fa:d5:fc:b2:b8:06:20:b7:18:b3:f0:ae:2d:07:a2:ae:21:19:
         bd:f2:1b:79:c3:33:94:e7:0a:2a:97:a4:ef:67:fb:7f:f4:46:
         a6:61:b2:56:31:bf:cc:5c:f3:90:6f:63:46:b8:45:5b:54:37:
         d0:82:0d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----