Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/323630373a663734303a653030613a3a2f34382d3438203d3e203336323137.roa
File:                     323630373a663734303a653030613a3a2f34382d3438203d3e203336323137.roa (raw, json)
Hash identifier:          PWKGaKqB7bvaloeKsrMKeJ/sdXiIFkuLiXBjEkeggXI=
Subject key identifier:   BA:C3:6C:B1:76:86:33:EE:5B:FC:3F:50:09:4A:CC:F8:6A:A9:DB:F9
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       7ED8290A590937606118AF55C5A53125D25D9C97
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/323630373a663734303a653030613a3a2f34382d3438203d3e203336323137.roa
Signing time:             Thu 20 Oct 2022 18:05:10 +0000
ROA not before:           Thu 20 Oct 2022 18:00:10 +0000
ROA not after:            Thu 19 Oct 2023 18:05:10 +0000
asID:                     36217
IP address blocks:        2607:f740:e00a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d8:29:0a:59:09:37:60:61:18:af:55:c5:a5:31:25:d2:5d:9c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 20 18:00:10 2022 GMT
            Not After : Oct 19 18:05:10 2023 GMT
        Subject: CN=BAC36CB1768633EE5BFC3F50094ACCF86AA9DBF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b6:bc:8e:7b:cb:58:e6:aa:cf:26:05:3a:0b:
                    d3:0b:99:97:f2:87:39:d8:33:88:83:0f:fe:fb:f8:
                    81:8f:99:41:be:91:e7:0b:30:d8:67:7b:3f:b2:6e:
                    a6:4a:9f:52:6d:c0:c0:68:07:f0:bf:43:5e:d4:e0:
                    ae:35:86:a6:40:c4:ba:f9:07:af:0c:0a:cf:c7:3b:
                    d4:c3:0a:7e:7f:2b:9e:17:4b:94:49:25:83:fb:3f:
                    4d:86:67:32:b1:d5:7a:89:7e:bb:1e:e2:71:8b:a3:
                    3c:d1:3f:e9:a8:78:99:97:0b:b0:ca:6e:b0:b2:9f:
                    0c:ff:17:69:3a:e2:46:93:56:32:86:b7:ab:ef:4f:
                    50:f3:2b:45:11:9e:4a:c3:e6:84:d2:9f:08:42:f0:
                    15:0a:e3:d3:2a:49:f2:7e:20:fd:32:23:3a:0c:f0:
                    09:f6:51:f3:c0:1a:fe:27:6c:b0:3d:f7:82:30:69:
                    cd:33:d0:b6:a8:19:90:80:f5:bf:12:a3:13:3e:07:
                    5d:30:7b:df:e8:ee:2b:c7:98:15:72:a3:09:cc:87:
                    0f:61:1d:e8:40:7a:5d:29:08:53:41:e1:a8:02:17:
                    d3:23:22:5f:d8:eb:d7:7c:20:be:57:86:db:a9:d8:
                    25:7c:d3:5d:14:74:4a:fb:5b:a7:38:17:b0:61:57:
                    31:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C3:6C:B1:76:86:33:EE:5B:FC:3F:50:09:4A:CC:F8:6A:A9:DB:F9
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/323630373a663734303a653030613a3a2f34382d3438203d3e203336323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f740:e00a::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:6e:13:9a:47:3f:e8:a6:12:92:9e:fc:c1:af:78:7e:ee:5b:
         f5:e8:dc:42:0d:3a:0c:e5:34:59:ca:f7:19:03:0d:fb:b8:a5:
         a3:0a:e2:4d:77:e0:4d:94:ac:1c:26:cf:f6:4b:1b:85:f5:c9:
         83:3e:50:ff:26:05:0c:aa:db:50:35:76:f1:23:d4:2b:1a:91:
         1a:fd:32:33:e7:e9:f9:0b:f8:91:d7:ee:d9:ba:ed:c6:fd:05:
         b2:a4:ef:ef:e1:c6:3b:3a:1a:9d:79:b3:5a:69:ae:f9:4d:35:
         73:d3:3a:73:13:2b:d0:6a:0f:f1:e9:2e:ef:f8:b0:24:d9:b7:
         13:fc:83:9a:b9:57:1d:ed:cb:eb:6b:a7:da:a7:6e:62:48:9e:
         45:2d:62:75:cc:0c:3e:cf:69:d7:6f:1b:89:31:93:8a:29:aa:
         09:38:bb:21:c8:c8:60:35:7d:d4:b9:08:36:17:db:17:05:13:
         3a:8e:fa:cb:c3:43:4f:30:1f:c1:3a:53:88:b7:e1:2f:d2:e3:
         ed:d1:2f:e9:eb:5f:76:f2:30:99:9d:fe:8f:18:da:a8:90:f4:
         ff:fb:d4:af:76:42:d8:d1:53:9b:44:ee:0c:cb:9b:89:dd:36:
         11:ee:db:b7:5e:ec:21:0b:37:83:64:40:17:30:76:6f:4b:b8:
         de:ed:9f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----