Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3139302e39322e3136302e302f32322d3234203d3e2037303239.roa
File:                     3139302e39322e3136302e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier:          qTRuD7F4W/xA4Z5Z7zv6XSfAMEK+EvSiFnXkBHbtZWM=
Subject key identifier:   24:BE:E3:CF:86:6A:DE:2F:CD:D3:89:D9:79:2E:0F:A0:8B:1E:59:A1
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       36FE5590BC14D72B93E520EA69190A80FCBE31A8
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3139302e39322e3136302e302f32322d3234203d3e2037303239.roa
Signing time:             Mon 28 Nov 2022 11:21:59 +0000
ROA not before:           Mon 28 Nov 2022 11:16:59 +0000
ROA not after:            Mon 27 Nov 2023 11:21:59 +0000
asID:                     7029
IP address blocks:        190.92.160.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:fe:55:90:bc:14:d7:2b:93:e5:20:ea:69:19:0a:80:fc:be:31:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:59 2022 GMT
            Not After : Nov 27 11:21:59 2023 GMT
        Subject: CN=24BEE3CF866ADE2FCDD389D9792E0FA08B1E59A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6b:08:cd:51:d6:ae:6a:14:73:b7:df:8f:b6:
                    76:a2:c3:3a:09:fc:f2:3e:91:ed:d0:f1:5d:c7:f8:
                    4d:45:63:d5:0e:36:3d:20:c7:44:87:ca:1d:0a:8c:
                    c7:e1:88:e9:59:6e:c9:4f:a5:b9:ee:f8:28:5f:be:
                    18:6d:0e:d2:31:0b:b8:d2:1e:aa:59:85:07:af:cb:
                    ee:ff:e3:6d:b4:39:ac:10:52:4a:4f:be:63:99:fd:
                    53:0f:3c:a2:1f:65:48:16:cb:d1:d8:03:3c:4a:19:
                    07:f3:af:7c:fa:3c:59:d6:81:96:ff:bb:fb:cb:05:
                    9c:17:62:fc:7d:b4:7d:cc:74:40:e7:4f:ce:8a:95:
                    52:ba:c6:82:f3:59:f1:e1:cd:8f:78:20:33:49:98:
                    d5:ca:7b:0a:8f:70:3f:c1:ca:73:76:6e:ee:82:6f:
                    e1:61:98:37:31:74:d4:58:bc:3a:f5:46:45:a3:18:
                    bc:47:7c:54:dd:6d:9d:b8:5c:a8:79:3d:e8:c2:f8:
                    6b:26:7b:9c:13:82:46:34:75:a9:cb:4d:6e:74:84:
                    52:05:16:6f:64:cb:da:30:3c:ac:42:14:6c:2d:a0:
                    08:66:45:d1:80:d1:64:70:a4:00:c4:b0:a9:c8:6b:
                    af:6e:65:af:1e:f1:d7:bc:2d:4b:26:31:45:1c:97:
                    ae:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BE:E3:CF:86:6A:DE:2F:CD:D3:89:D9:79:2E:0F:A0:8B:1E:59:A1
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3139302e39322e3136302e302f32322d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:7c:2e:f4:89:ea:10:8b:42:bd:a1:31:4e:4d:36:9c:07:6e:
         47:e8:82:e7:77:24:bb:55:91:ba:b2:71:e3:c3:e4:19:1c:b5:
         cd:27:f5:6b:bb:78:a2:64:ef:09:dd:24:fc:a7:a0:8e:7e:ad:
         09:4d:fe:2d:43:18:0f:23:ab:8c:bd:3b:12:6a:fc:8c:a4:18:
         e7:4b:7b:1a:e3:cf:0e:40:8a:2e:1a:d1:2b:26:50:86:e1:c3:
         40:89:95:fb:b4:da:f6:0c:77:f2:c3:5b:33:22:52:14:ee:6a:
         9f:d9:f4:69:a4:65:ce:7b:36:ce:c2:62:ec:a3:e5:14:39:06:
         36:7f:a4:4c:27:f7:4f:9a:98:0a:ea:b9:f8:88:08:a9:4a:0b:
         68:5e:10:50:e3:c8:40:38:7f:06:36:c5:42:07:bb:31:c0:39:
         af:97:e2:d9:0e:0e:4f:e4:6b:8d:d0:7b:2e:c2:f5:78:58:9c:
         34:fd:4e:3b:29:38:81:9a:78:ff:b3:5a:9e:7c:32:cb:5f:8a:
         8d:7c:05:7c:f2:03:5d:5d:d6:7e:5a:31:b6:ae:49:c1:d2:b7:
         b3:97:a0:18:11:bd:d4:f3:96:2c:74:6d:9e:39:94:66:c0:4b:
         48:a1:a7:99:47:49:16:ac:c8:2c:49:78:6b:f9:43:ee:36:b3:
         37:cd:a7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----