Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3234322e302f32342d3234203d3e203631313338.roa
File:                     36362e3232352e3234322e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          Io6XCoZ1XnOQdzQ+50EoEWkOx3LpR/zHA6e5rNUlYvs=
Subject key identifier:   E6:13:42:59:51:35:45:F4:DF:DE:EA:C9:1F:C1:EF:34:7F:94:5E:81
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       4B58E72881682F6F7275DB7CDF1B29A5B8C57103
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3234322e302f32342d3234203d3e203631313338.roa
Signing time:             Thu 25 May 2023 14:57:29 +0000
ROA not before:           Thu 25 May 2023 14:52:29 +0000
ROA not after:            Thu 23 May 2024 14:57:29 +0000
asID:                     61138
IP address blocks:        66.225.242.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:58:e7:28:81:68:2f:6f:72:75:db:7c:df:1b:29:a5:b8:c5:71:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 25 14:52:29 2023 GMT
            Not After : May 23 14:57:29 2024 GMT
        Subject: CN=E6134259513545F4DFDEEAC91FC1EF347F945E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:31:b4:c5:18:6b:99:03:54:2a:97:7a:14:1e:
                    6b:47:99:b1:44:44:b6:d6:1c:cf:b7:cb:d3:b3:63:
                    79:4f:30:c3:cd:17:6f:a6:2c:35:d4:f4:67:9e:f8:
                    d2:eb:92:82:df:25:15:49:ef:52:4f:7b:0c:d7:7a:
                    18:10:8d:cf:5c:0b:01:1c:f0:94:d8:80:cd:7d:d8:
                    df:09:a8:f4:bd:28:c3:e0:47:b6:8b:77:49:d3:b8:
                    d7:89:54:d0:7e:93:e0:2d:db:32:5f:31:35:b5:dd:
                    04:5e:05:c5:ab:2d:49:20:3c:35:61:2d:3c:43:a7:
                    1a:54:e1:f3:be:02:f8:22:bd:28:05:f6:ba:25:d9:
                    1a:1e:1f:bf:9a:99:45:90:b8:9e:e6:9f:16:94:92:
                    d9:93:98:79:55:c6:87:cd:c8:f5:a2:69:6a:60:e1:
                    f7:20:66:18:8f:ab:be:2c:ed:49:26:dd:9a:d2:a9:
                    f4:07:a8:4a:b7:79:b3:bb:3f:41:4c:3e:84:ec:ba:
                    8b:9b:5b:4e:79:83:12:c2:75:92:dc:af:55:61:d0:
                    17:46:9c:24:c4:69:77:2b:14:03:c7:ef:92:ab:ba:
                    f3:20:56:bf:4e:24:d1:3d:ce:de:0e:84:8c:37:6a:
                    ff:f5:8d:09:70:31:a5:21:1d:77:e5:99:54:63:1b:
                    27:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:13:42:59:51:35:45:F4:DF:DE:EA:C9:1F:C1:EF:34:7F:94:5E:81
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3234322e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:7f:9b:57:44:d1:49:d1:d7:66:f4:4e:62:ca:5c:e9:fe:26:
         46:a0:2d:70:83:a1:3c:14:68:38:86:5c:d7:bd:ba:76:a3:ed:
         b1:fe:e2:33:00:ef:e2:a1:f3:89:60:f4:da:65:48:92:c0:c8:
         ee:3e:8f:a7:6e:6d:fe:97:e2:5b:f2:86:61:7e:97:d1:04:4b:
         5c:7e:e2:14:77:dd:54:10:1d:18:f5:d8:d2:39:d5:0a:47:00:
         c0:74:15:ab:1c:58:be:9a:ee:c4:22:4c:b9:82:f9:e7:1d:22:
         a9:e3:f9:3c:53:bd:52:09:c9:15:43:ab:2b:6e:6d:f5:c4:65:
         6c:f2:9c:13:f4:d1:e9:70:d6:2d:db:1c:14:69:e3:35:ce:22:
         38:35:ce:aa:2b:c0:77:90:4a:b0:86:24:ca:3d:3a:b9:b4:93:
         bf:ed:b2:97:8c:04:7e:6c:de:d7:27:bd:dd:2e:aa:94:ab:f3:
         e6:73:8b:95:98:06:78:22:0e:11:13:20:01:e4:b5:cd:b2:3f:
         0f:af:14:2c:65:fa:be:12:df:42:8f:ed:6e:48:15:a4:3a:4f:
         35:50:f4:75:74:c7:72:f7:09:52:29:66:67:a3:e8:91:26:33:
         c3:2e:65:c3:b0:3f:f4:ab:e9:97:90:ef:41:68:3f:e2:e7:8a:
         60:24:9d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----