Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3233362e302f32342d3234203d3e203631333137.roa
File:                     36362e3232352e3233362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          KujkroWhbyHybTs6WPJWltUnPYSqI9AYZY7rpEbUy2Y=
Subject key identifier:   4C:B2:1D:9C:7F:40:FA:70:C5:F2:74:84:C3:17:00:54:FA:6B:61:ED
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       32007035A16513F0AD07494C6EA2D5309909E05B
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3233362e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 12 May 2023 13:09:50 +0000
ROA not before:           Fri 12 May 2023 13:04:50 +0000
ROA not after:            Fri 10 May 2024 13:09:50 +0000
asID:                     61317
IP address blocks:        66.225.236.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:00:70:35:a1:65:13:f0:ad:07:49:4c:6e:a2:d5:30:99:09:e0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 12 13:04:50 2023 GMT
            Not After : May 10 13:09:50 2024 GMT
        Subject: CN=4CB21D9C7F40FA70C5F27484C3170054FA6B61ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:86:71:ed:57:84:94:c4:39:6a:7b:43:0c:95:
                    0c:93:c9:51:07:1f:3f:b7:a9:95:d9:48:50:61:69:
                    5f:d6:7e:45:60:53:e3:b0:73:4b:08:2a:43:91:69:
                    e0:fd:a8:8f:0d:f7:20:48:4c:59:8f:39:bc:1a:be:
                    3c:6b:7c:12:b9:be:64:f4:91:e3:60:1c:cc:42:3d:
                    12:2a:30:b6:71:17:b4:7a:dd:da:13:71:89:01:e3:
                    9e:1e:cb:da:25:b1:9d:dc:98:cd:7f:50:16:66:3f:
                    30:e3:7b:82:e8:9f:0d:c8:fc:ce:7b:95:78:61:2a:
                    a0:01:64:eb:28:b9:28:fb:03:3f:72:7e:a0:c4:2b:
                    f3:ca:83:c0:95:1e:98:90:cd:3a:9b:63:7f:84:eb:
                    cf:69:d9:55:35:65:2c:c1:e3:c8:72:c9:89:f6:d6:
                    25:5b:22:2f:f9:24:ea:0f:f8:8f:5e:03:56:fa:fe:
                    8e:26:f8:6e:f9:d2:93:54:53:3b:c5:fb:2d:65:7f:
                    cd:8f:e5:ff:b8:f9:f2:aa:76:50:9e:2c:da:bf:2a:
                    dc:ca:08:8f:b4:4e:93:83:55:fb:02:f5:a4:ca:1a:
                    e4:b0:3a:c4:1e:66:ee:6a:04:94:70:40:20:b4:c6:
                    a0:19:43:9e:47:87:9c:5a:fb:67:ed:0d:d4:fb:8b:
                    d2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B2:1D:9C:7F:40:FA:70:C5:F2:74:84:C3:17:00:54:FA:6B:61:ED
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3233362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:d3:56:05:29:65:3e:ee:06:3e:f4:2d:73:ce:01:5b:85:9b:
         52:31:a9:87:7c:b3:7b:c2:e6:70:50:69:e5:2d:1d:46:f2:5e:
         de:ed:f0:cd:80:79:94:94:23:17:1c:77:81:96:c7:64:0d:a3:
         89:30:b2:31:2e:a7:13:71:11:34:4d:99:f2:e5:1e:4b:23:2c:
         da:c5:66:f1:b3:bb:d9:88:8c:99:fa:f0:50:46:78:e4:5c:88:
         eb:be:59:68:b6:18:98:3d:3d:ef:c2:3e:4a:5f:5e:88:45:d9:
         7c:d3:6e:56:30:ce:a0:98:41:37:c0:d1:9b:db:56:66:39:b5:
         07:1d:a2:29:69:06:2e:36:91:f6:61:d8:b7:1a:2a:a3:f3:fb:
         be:45:5b:45:79:08:cf:d4:8e:80:50:ca:f2:7c:a3:fe:02:b3:
         7b:20:a6:54:1b:96:93:d7:7f:a2:8e:fc:ff:73:f5:d7:b3:0d:
         d0:ed:49:a0:e5:05:56:4d:51:e1:23:36:c8:47:cd:76:35:dd:
         c0:be:af:46:9e:d5:08:a1:29:ec:69:91:ef:b3:97:ee:0e:85:
         ed:d6:00:65:13:a0:e2:16:a2:c9:da:f0:07:9d:69:85:dc:95:
         21:1a:8e:b2:e2:37:fa:0c:b9:e7:12:e4:fe:d5:a7:0e:54:80:
         da:81:e4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----