Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3234322e302f32342d3234203d3e203330303831.roa
File:                     36362e3232352e3234322e302f32342d3234203d3e203330303831.roa (raw, json)
Hash identifier:          yhNiE8cYL0SP7ZQowhDOIQUNljYptZ3u5brbPn4UBUg=
Subject key identifier:   12:3F:18:0D:AE:24:7B:79:A1:7E:DD:0F:46:F4:2D:8F:CC:15:B8:76
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       50CFD8BEE5728CD5FCE1622C8E4CFA8533B242FB
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3234322e302f32342d3234203d3e203330303831.roa
Signing time:             Sat 22 Apr 2023 11:09:01 +0000
ROA not before:           Sat 22 Apr 2023 11:04:01 +0000
ROA not after:            Sat 20 Apr 2024 11:09:01 +0000
asID:                     30081
IP address blocks:        66.225.242.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:cf:d8:be:e5:72:8c:d5:fc:e1:62:2c:8e:4c:fa:85:33:b2:42:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 22 11:04:01 2023 GMT
            Not After : Apr 20 11:09:01 2024 GMT
        Subject: CN=123F180DAE247B79A17EDD0F46F42D8FCC15B876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f1:e0:b7:48:a2:aa:19:00:dd:cd:a8:49:e6:
                    df:59:37:64:97:b0:da:8b:5c:7e:5a:bc:43:9c:8e:
                    fa:4c:78:27:8b:eb:79:f1:50:6d:88:34:70:b1:f4:
                    91:42:23:78:84:69:ef:75:f0:1c:10:75:62:c8:b6:
                    70:da:2a:7c:10:be:56:19:3c:9d:33:61:32:eb:12:
                    59:e8:5d:96:c4:d7:2f:00:81:7a:5a:3d:6f:ae:4a:
                    4c:bc:f7:99:b1:7d:25:ef:2c:ec:8c:65:61:94:17:
                    05:90:e6:aa:fd:f7:15:c4:ad:8f:c1:32:88:f5:6d:
                    45:e9:c3:93:2f:17:b1:06:94:44:be:46:39:3f:7b:
                    9d:ec:9e:f1:c7:6a:91:ee:3d:b0:4a:44:61:94:c8:
                    05:f7:29:25:09:f5:91:ea:dc:6f:87:bf:df:6c:b3:
                    00:3b:e9:4a:f8:05:bb:cc:f4:8b:45:c9:85:f5:4a:
                    90:c2:dc:ac:05:f5:b8:a1:5a:7b:7a:a2:fd:1d:52:
                    92:07:f5:71:d9:db:a0:82:58:fd:0b:59:31:24:74:
                    a1:4a:2c:8b:ce:bc:57:94:0c:ea:e5:ec:9a:40:5a:
                    c0:dd:02:a8:47:48:01:cf:19:ae:e9:73:ff:50:a1:
                    46:79:18:75:75:8a:9c:fe:de:d7:7d:98:e1:14:e2:
                    14:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3F:18:0D:AE:24:7B:79:A1:7E:DD:0F:46:F4:2D:8F:CC:15:B8:76
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3234322e302f32342d3234203d3e203330303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:68:e6:97:f1:6c:43:f4:bb:d5:28:46:4a:05:14:b4:a8:9e:
         5a:85:c4:d2:4f:3c:91:f5:48:d0:92:70:bd:f6:cb:9d:23:86:
         31:1e:4b:8a:8b:4e:a7:61:68:19:04:4a:22:c1:1a:7c:83:50:
         23:df:8d:61:e4:f3:e1:0d:82:10:bf:64:cd:e6:c4:a2:94:1a:
         a9:4c:c6:3b:b5:ea:f0:f0:1d:59:ee:ab:7c:b4:ac:10:6c:20:
         18:1f:b4:61:15:58:b7:19:9f:84:ec:eb:eb:e5:14:54:d0:2d:
         22:f7:17:e8:02:e0:3a:46:44:ca:6a:e4:55:7f:28:e0:99:22:
         c2:2b:12:5e:d5:b7:c1:4c:1b:99:81:84:22:0b:2c:f1:8f:25:
         c6:88:3b:ad:57:49:af:09:7b:1b:69:9a:a4:48:91:e8:a7:40:
         d4:2f:f5:51:3e:94:05:c6:24:da:27:11:8e:49:c3:24:54:5e:
         66:34:76:6b:38:35:c9:d3:0a:d2:39:42:62:ac:f0:0b:9a:56:
         fa:3e:c7:9b:2a:d0:4a:1c:11:ec:47:ad:09:e6:28:d8:a5:d3:
         a1:6c:a1:15:5d:0d:8d:5b:1f:c4:d1:8d:6a:4c:60:91:46:4b:
         6b:75:40:cf:31:a4:7e:03:65:81:00:ed:59:74:ac:71:8f:c7:
         14:6b:99:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----