Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e39382e302f32342d3234203d3e203336323336.roa
File:                     3130342e3232352e39382e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          8uN4njQ3JQhzqv/sdDog49aqz7vEQJycVunPQL82+9s=
Subject key identifier:   78:3E:25:36:FD:7E:AE:6A:7D:54:5E:BF:01:C7:09:64:3E:0A:61:30
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       3D4938EA0232B01A5F69A71995ADBAE02D65D75B
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e39382e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 31 Oct 2022 17:50:10 +0000
ROA not before:           Mon 31 Oct 2022 17:45:10 +0000
ROA not after:            Mon 30 Oct 2023 17:50:10 +0000
asID:                     36236
IP address blocks:        104.225.98.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:49:38:ea:02:32:b0:1a:5f:69:a7:19:95:ad:ba:e0:2d:65:d7:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:45:10 2022 GMT
            Not After : Oct 30 17:50:10 2023 GMT
        Subject: CN=783E2536FD7EAE6A7D545EBF01C709643E0A6130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:96:d2:35:c6:88:6b:06:6d:47:a5:4a:72:32:
                    97:48:03:b8:1a:5e:62:f0:77:2d:d7:b5:d5:71:6e:
                    0b:8b:c8:1d:2f:43:35:d5:1f:d0:28:91:d5:95:b7:
                    4d:6d:b4:b1:05:a0:a0:ef:af:b6:20:da:36:e4:e7:
                    bc:69:7b:e7:fb:27:bf:8c:56:61:47:eb:09:53:00:
                    e4:62:07:1b:2c:b7:5a:cf:9e:93:92:f0:0c:94:88:
                    ff:68:75:2d:11:74:3c:9e:96:81:72:f1:9d:d7:c9:
                    1e:35:8b:19:44:c4:d9:8e:3c:16:f6:51:98:a5:fe:
                    ef:6a:5f:52:3f:15:32:ee:ad:cc:8b:ce:2d:04:4f:
                    00:f4:91:3a:83:82:2b:fc:15:83:42:0e:8b:e7:fc:
                    d1:c1:7f:f3:bc:5f:5c:66:f0:5e:58:3f:4a:82:ec:
                    bc:68:34:49:5f:69:19:2b:59:45:ba:37:47:1f:ce:
                    5b:2f:1c:62:cf:fa:37:7a:a0:ee:04:f5:4b:9c:9f:
                    02:e0:86:50:e9:c2:65:77:69:b7:e7:0a:3f:6d:83:
                    84:63:ec:ff:01:f0:68:86:8b:a4:43:17:e2:f0:b4:
                    15:20:62:75:42:c6:4e:cf:54:06:b5:bf:77:77:23:
                    58:36:76:a5:9b:9a:f4:48:2a:fd:1b:ce:6b:21:68:
                    bd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3E:25:36:FD:7E:AE:6A:7D:54:5E:BF:01:C7:09:64:3E:0A:61:30
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e39382e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:d9:37:e3:27:2f:96:81:ee:0a:a9:ad:43:6b:47:22:70:55:
         de:cc:75:c3:5e:a7:b4:e7:53:17:40:96:64:29:5f:83:d5:e7:
         d7:02:14:21:5b:ff:44:e5:e0:1d:a1:29:7a:5c:de:a6:39:67:
         9b:ea:98:17:cd:f9:c8:00:a5:a1:04:bb:a3:0e:81:5f:b4:90:
         91:92:5a:54:d8:2a:af:d6:1c:fe:7e:3d:8a:7e:46:9d:11:38:
         c1:bb:14:77:40:2c:af:39:01:a7:38:69:ef:7f:51:2f:94:de:
         31:cb:6b:5e:92:03:d1:75:41:93:40:9b:18:f3:cb:d5:18:29:
         73:ee:27:e5:ea:b5:5d:1a:e9:c1:dd:98:9a:41:f6:fe:2a:a7:
         ad:ed:a5:0f:11:c1:43:52:b4:ad:52:f3:73:68:1d:43:1d:5f:
         28:66:91:70:f1:d7:aa:4d:9b:9d:a9:6c:99:14:26:74:e3:1d:
         61:a8:79:72:0b:04:0c:12:d4:83:6d:34:55:a3:96:60:ea:f9:
         41:23:9e:5e:6e:5e:e5:06:f9:67:40:06:32:3e:41:8c:90:ca:
         d3:39:a3:2a:fc:e8:09:c1:0d:18:6f:48:5a:b5:8f:90:6c:94:
         c3:8b:b6:1f:72:4b:e3:07:72:4d:04:b4:a7:9e:d4:79:d2:d9:
         86:b6:62:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----