Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3232362e302f32332d3234203d3e20323131353835.roa
File:                     36362e3232352e3232362e302f32332d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          8WnccEXd6+Ry3t9qHYUTlc9LFlFprxhPBeQVqraSUDA=
Subject key identifier:   26:BA:70:3B:9F:7A:C8:63:E6:0A:C4:D8:91:5F:BF:F0:75:A4:70:90
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       4942339110CF9C15638647A646C464D333733039
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3232362e302f32332d3234203d3e20323131353835.roa
Signing time:             Fri 19 May 2023 15:42:50 +0000
ROA not before:           Fri 19 May 2023 15:37:50 +0000
ROA not after:            Fri 17 May 2024 15:42:50 +0000
asID:                     211585
IP address blocks:        66.225.226.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:42:33:91:10:cf:9c:15:63:86:47:a6:46:c4:64:d3:33:73:30:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 19 15:37:50 2023 GMT
            Not After : May 17 15:42:50 2024 GMT
        Subject: CN=26BA703B9F7AC863E60AC4D8915FBFF075A47090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:60:d7:a8:6d:ca:0a:0c:7d:42:89:6b:03:44:
                    d5:9d:04:7b:e7:72:21:34:23:c7:26:ac:d6:15:09:
                    c7:42:10:76:7d:25:ba:49:95:de:58:8c:5b:95:ed:
                    db:68:e9:b9:d3:ed:37:26:b8:22:23:13:c3:71:bf:
                    de:02:df:44:82:ed:eb:68:0f:a4:14:c5:e2:0c:82:
                    a2:c6:d3:80:cb:73:6a:b2:bc:c0:eb:0a:7e:2f:b3:
                    e1:25:f4:0c:8c:74:62:bd:e0:1b:ef:59:70:3d:83:
                    64:cd:61:5a:30:f5:9d:4e:69:b3:56:e1:ba:81:01:
                    71:dc:89:bb:85:ef:b6:6d:9a:ae:dc:ff:11:6d:36:
                    1c:fb:ea:c4:6b:ea:51:a2:dd:ff:b2:9f:71:37:b2:
                    a8:58:85:89:9e:a2:18:89:6c:73:e3:ec:b3:e1:ea:
                    ae:04:48:92:fa:68:1a:72:eb:f4:93:b3:86:71:40:
                    ac:a9:b0:0f:d7:f7:7b:d7:44:2e:1d:0b:61:cb:e3:
                    ed:8c:03:40:04:ad:3e:5e:ec:4e:6a:39:35:85:c8:
                    14:db:bc:f3:70:1d:d4:13:41:0a:0f:34:4a:a7:9d:
                    5c:92:8c:78:97:3e:a7:76:3e:27:51:8f:ae:d9:08:
                    0f:06:52:d6:df:6c:bf:3a:dc:d2:46:38:2b:ad:04:
                    fb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BA:70:3B:9F:7A:C8:63:E6:0A:C4:D8:91:5F:BF:F0:75:A4:70:90
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3232362e302f32332d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:6b:ec:7f:3b:bb:04:55:f5:ed:3d:31:55:78:d4:f7:4b:08:
         b3:00:20:de:47:c2:56:a6:37:4d:1f:8e:40:2d:97:4e:18:da:
         9a:94:b6:40:d0:7e:67:31:72:85:a4:50:46:57:7b:a4:a8:8c:
         6e:9e:ca:62:03:6b:db:78:65:72:05:d3:25:11:78:88:c8:4d:
         c5:80:21:81:39:88:02:96:00:d7:c3:1f:77:7b:f2:8f:51:b1:
         b7:9b:23:25:cb:c2:8a:d6:f0:e7:01:1f:34:bd:4d:a1:7e:3e:
         28:42:ce:61:7a:3e:fd:c6:47:04:bf:3a:7c:f0:f5:94:80:2f:
         9f:ed:51:29:8f:99:77:20:6a:48:b0:6c:ed:b0:c2:6f:00:92:
         19:93:ad:f2:09:ac:69:41:39:46:a0:9e:84:1d:12:52:0d:6a:
         6f:90:f5:00:52:c0:3f:ff:c7:69:c1:c9:9d:67:28:34:6d:74:
         44:4e:11:a5:d6:ae:a7:e5:74:fc:4b:6d:5e:d8:ef:49:33:e1:
         54:12:81:1b:f8:6a:eb:83:3d:72:3a:ae:7a:1a:b2:46:e6:51:
         95:d5:29:1a:51:b1:45:d1:7f:5a:26:80:5d:11:01:cc:0c:75:
         9d:92:26:33:53:76:95:e6:7a:f8:cd:59:c5:0b:86:44:2a:ab:
         f3:ae:3e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----