Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3136322e3231332e302e302f32322d3234203d3e2036343631.roa
File:                     3136322e3231332e302e302f32322d3234203d3e2036343631.roa (raw, json)
Hash identifier:          wY6bZJyL68BcarQVFwDxbNnxGEoKLx/OqTwF/MXkZ4g=
Subject key identifier:   D6:6C:AE:D9:30:3A:6F:EF:29:1B:DA:3C:95:D9:D1:DC:EB:87:96:26
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       31DF2F007970204C69FA7BF0046B50DF2DB9D54F
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3136322e3231332e302e302f32322d3234203d3e2036343631.roa
Signing time:             Mon 28 Nov 2022 11:22:01 +0000
ROA not before:           Mon 28 Nov 2022 11:17:01 +0000
ROA not after:            Mon 27 Nov 2023 11:22:01 +0000
asID:                     6461
IP address blocks:        162.213.0.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:df:2f:00:79:70:20:4c:69:fa:7b:f0:04:6b:50:df:2d:b9:d5:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:17:01 2022 GMT
            Not After : Nov 27 11:22:01 2023 GMT
        Subject: CN=D66CAED9303A6FEF291BDA3C95D9D1DCEB879626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:10:e4:3c:b2:77:ed:53:6a:68:b9:40:61:67:
                    b2:03:6b:3e:35:3b:b4:97:ff:b7:a0:41:e5:4d:c1:
                    c8:32:75:d4:f9:8d:a4:ab:ed:f7:2b:41:1c:fa:b0:
                    53:e9:67:49:58:46:74:54:75:08:bc:d9:b5:60:67:
                    e1:85:4d:34:d9:26:2e:67:30:99:21:23:35:5c:cf:
                    ac:23:23:5b:b8:64:71:27:a9:3f:05:9c:96:ab:e1:
                    a7:f0:8f:1b:2d:94:24:f5:65:b8:9b:84:72:40:c6:
                    23:9a:2e:97:35:07:b6:99:7c:38:51:d5:88:4d:99:
                    ae:98:3e:ed:30:64:82:47:86:53:48:42:4f:b2:53:
                    15:81:d6:7f:c7:01:d9:32:2a:2e:4f:5f:f7:3b:ce:
                    82:6f:49:0a:a8:ce:80:43:85:c1:55:5c:63:f1:b8:
                    71:01:a7:27:40:be:05:f5:c0:48:ed:9f:cf:cf:dc:
                    f5:4d:51:49:9a:0c:13:8e:47:5a:3d:99:0f:b8:df:
                    62:ec:d8:44:e2:7c:79:5c:cb:cb:6a:95:7e:96:58:
                    d0:f4:d6:4c:c8:18:f4:f7:ee:70:ed:64:02:92:f2:
                    55:ce:47:c0:71:5f:b8:41:e8:46:de:f3:d5:d5:5a:
                    30:3f:3d:0a:b3:69:f3:98:8c:66:2f:d7:88:89:a2:
                    5d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6C:AE:D9:30:3A:6F:EF:29:1B:DA:3C:95:D9:D1:DC:EB:87:96:26
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3136322e3231332e302e302f32322d3234203d3e2036343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:86:c9:67:71:a5:ac:34:e1:ca:e1:d8:5d:3f:6a:91:88:08:
         d2:2b:d2:39:8d:b2:58:1f:d1:b3:c0:a5:9e:88:27:44:38:11:
         02:58:40:52:d8:30:31:85:aa:d5:00:c1:0d:9d:67:e9:9f:6a:
         ba:4a:7b:38:4d:bd:de:c9:ef:2c:81:77:d0:b9:ca:b9:c8:14:
         31:6b:98:92:b1:d6:e5:2f:b0:fb:bc:06:7f:4c:83:c8:ac:a9:
         18:f3:9d:87:51:1b:72:2c:cf:d1:20:b1:be:48:ca:ca:d6:2a:
         4a:3d:f7:68:cc:44:a5:73:97:c6:07:20:40:f8:b3:b0:3f:c1:
         d1:74:48:36:d6:4a:99:be:50:05:08:d5:6f:d0:70:f3:83:3a:
         ba:c7:ce:bf:6d:f7:9c:c5:f4:04:cb:f8:8d:43:40:76:f1:43:
         97:c5:97:87:36:5e:1c:36:ba:a8:c3:10:13:d3:87:99:97:2e:
         69:65:68:6a:0c:f9:ec:a6:8d:37:59:5f:a2:55:0a:51:c9:d1:
         71:47:c6:9e:a8:9c:ad:f4:1a:af:1d:6f:76:15:b3:13:ec:a1:
         ff:3e:1c:e5:76:1a:bf:f9:ac:3d:5e:64:3f:b0:a6:4c:ca:a6:
         7d:30:84:2d:71:f6:5c:b3:77:6d:10:6c:fe:af:62:67:a1:65:
         cf:d6:c1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----