Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3234362e302f32342d3234203d3e203631333137.roa
File:                     36362e3232352e3234362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          iJXJLC7C9fBn45deNtYnzyBEP6T/GMzvtoAHfAOGG6g=
Subject key identifier:   2F:97:E6:E2:F9:BE:43:90:25:F2:C9:97:F7:89:06:F5:FF:18:46:AB
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       61B6E88C057F0BFC4500E67DDD8705B159D94FC2
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3234362e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 21 Apr 2023 06:12:46 +0000
ROA not before:           Fri 21 Apr 2023 06:07:46 +0000
ROA not after:            Fri 19 Apr 2024 06:12:46 +0000
asID:                     61317
IP address blocks:        66.225.246.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b6:e8:8c:05:7f:0b:fc:45:00:e6:7d:dd:87:05:b1:59:d9:4f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 21 06:07:46 2023 GMT
            Not After : Apr 19 06:12:46 2024 GMT
        Subject: CN=2F97E6E2F9BE439025F2C997F78906F5FF1846AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ff:21:4b:50:b4:c9:3b:ad:7b:f0:76:10:6b:
                    38:1a:f5:42:c2:c9:05:d1:05:34:c4:2d:c8:aa:93:
                    b9:6d:5f:42:9e:8b:80:43:56:58:bc:de:f0:7b:20:
                    f7:4a:b5:7f:f5:75:7a:9a:fa:c7:37:3e:07:38:67:
                    bc:7a:2e:ae:32:67:50:b2:32:8e:2e:70:53:4f:7c:
                    ab:cc:80:15:12:33:37:dc:bd:5d:64:a7:ea:60:3e:
                    58:db:2f:a6:65:22:47:e2:f8:98:8f:e1:f1:1d:48:
                    a0:f5:c4:1b:da:97:ad:dd:36:b3:b6:e8:01:f9:fd:
                    17:61:76:87:11:93:29:2f:7b:2a:e6:3a:95:99:c7:
                    02:67:07:0d:7f:dd:a0:ae:9a:54:f1:88:df:aa:87:
                    8b:56:1e:03:c5:4b:c9:a4:bc:be:a0:f0:a8:7e:d0:
                    46:45:d8:7b:fa:33:45:ad:6b:15:92:23:c5:df:f7:
                    1e:bf:ec:a5:d8:d3:85:7c:28:d8:e1:a4:b1:d2:61:
                    f9:48:08:83:de:2f:f6:d0:10:e8:b1:c6:7a:c4:7d:
                    b3:b8:14:b0:0f:12:29:b4:ba:85:26:86:9a:b2:24:
                    3d:99:8b:c8:0c:00:ca:5c:e9:92:e3:ca:33:5a:3d:
                    67:5b:ec:23:9a:64:13:04:c3:b6:dc:b6:0d:5b:4a:
                    7a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:97:E6:E2:F9:BE:43:90:25:F2:C9:97:F7:89:06:F5:FF:18:46:AB
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3234362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:f5:88:97:3b:66:74:4f:db:e6:29:0a:d9:67:30:dd:ef:6b:
         2a:fc:d0:ee:f1:46:4b:54:00:6c:85:0e:13:dc:12:59:07:93:
         0e:3e:e7:3d:5f:6c:f9:cc:87:82:7e:da:82:55:a7:35:a0:30:
         55:9d:ee:04:02:42:15:10:98:e1:9f:db:c0:3a:59:71:6f:89:
         c5:69:94:2c:ab:07:b9:81:61:70:68:f1:07:99:cf:2a:5d:97:
         66:31:62:ec:45:d0:b2:f7:d8:04:bf:8c:4d:42:af:0f:2b:48:
         55:61:84:e6:ae:03:17:31:fe:80:80:30:f2:68:8a:82:ac:20:
         49:a2:d9:be:02:25:d7:d7:dd:c9:eb:20:08:7d:87:da:5b:d7:
         ac:99:70:d6:d7:33:2e:fe:eb:29:15:05:64:be:bc:6c:0a:3d:
         98:f4:d0:20:c6:7d:2a:eb:26:32:1b:94:6a:f6:b9:2b:1b:e8:
         92:b6:bb:ad:19:74:68:53:b4:72:df:fc:d7:cd:7b:07:90:56:
         49:f9:23:a8:cf:a1:0f:2b:52:c8:aa:e5:2d:10:93:64:b7:4f:
         7f:62:63:25:18:50:ea:4f:a9:57:7b:c0:3d:47:12:eb:d0:69:
         ae:f7:2d:93:a4:8f:ec:25:9e:90:68:16:7e:15:46:d3:51:cb:
         05:cc:21:06
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUYbbojAV/C/xFAOZ93YcFsVnZT8IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNDIxMDYwNzQ2WhcNMjQwNDE5MDYxMjQ2
WjAzMTEwLwYDVQQDEygyRjk3RTZFMkY5QkU0MzkwMjVGMkM5OTdGNzg5MDZGNUZG
MTg0NkFCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6v8hS1C0yTut
e/B2EGs4GvVCwskF0QU0xC3IqpO5bV9CnouAQ1ZYvN7weyD3SrV/9XV6mvrHNz4H
OGe8ei6uMmdQsjKOLnBTT3yrzIAVEjM33L1dZKfqYD5Y2y+mZSJH4viYj+HxHUig
9cQb2pet3TaztugB+f0XYXaHEZMpL3sq5jqVmccCZwcNf92grppU8YjfqoeLVh4D
xUvJpLy+oPCoftBGRdh7+jNFrWsVkiPF3/cev+yl2NOFfCjY4aSx0mH5SAiD3i/2
0BDoscZ6xH2zuBSwDxIptLqFJoaasiQ9mYvIDADKXOmS48ozWj1nW+wjmmQTBMO2
3LYNW0p68QIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFC+X5uL5vkOQJfLJl/eJBvX/
GEarMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzM2MzYyZTMyMzIzNTJlMzIzNDM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAELh9jANBgkqhkiG9w0BAQsF
AAOCAQEAqfWIlztmdE/b5ikK2Wcw3e9rKvzQ7vFGS1QAbIUOE9wSWQeTDj7nPV9s
+cyHgn7aglWnNaAwVZ3uBAJCFRCY4Z/bwDpZcW+JxWmULKsHuYFhcGjxB5nPKl2X
ZjFi7EXQsvfYBL+MTUKvDytIVWGE5q4DFzH+gIAw8miKgqwgSaLZvgIl19fdyesg
CH2H2lvXrJlw1tczLv7rKRUFZL68bAo9mPTQIMZ9KusmMhuUava5Kxvokra7rRl0
aFO0ct/81817B5BWSfkjqM+hDytSyKrlLRCTZLdPf2JjJRhQ6k+pV3vAPUcS69Bp
rvctk6SP7CWekGgWfhVG01HLBcwhBg==
-----END CERTIFICATE-----