Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e3232372e3230382e302f32322d3234203d3e2031323339.roa
File:                     3231362e3232372e3230382e302f32322d3234203d3e2031323339.roa (raw, json)
Hash identifier:          39rPvz0kx9sXuDZuVqmEIt6N3bFi1fQwCNWNRqFGL1M=
Subject key identifier:   CB:03:8C:6A:69:2E:F2:AA:20:D1:AE:27:7F:D2:5C:68:F7:C4:6B:0F
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       3AC2362B9DC50E7AE1AA2D37107C8A675BD49D71
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e3232372e3230382e302f32322d3234203d3e2031323339.roa
Signing time:             Mon 28 Nov 2022 11:22:00 +0000
ROA not before:           Mon 28 Nov 2022 11:17:00 +0000
ROA not after:            Mon 27 Nov 2023 11:22:00 +0000
asID:                     1239
IP address blocks:        216.227.208.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c2:36:2b:9d:c5:0e:7a:e1:aa:2d:37:10:7c:8a:67:5b:d4:9d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:17:00 2022 GMT
            Not After : Nov 27 11:22:00 2023 GMT
        Subject: CN=CB038C6A692EF2AA20D1AE277FD25C68F7C46B0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:32:15:8a:e2:68:82:06:73:29:77:c3:0c:fc:
                    7c:61:2f:70:c6:67:7e:e4:4d:cb:85:06:15:a4:cd:
                    26:70:9b:14:ed:1e:da:d4:0e:58:de:d8:f2:cc:33:
                    5e:04:6e:fb:28:de:94:f5:69:a3:1e:88:0d:76:2a:
                    3b:7f:3f:42:05:bc:97:c1:0c:d9:8e:6c:79:35:2a:
                    5a:c6:35:bf:3d:a7:0e:74:f4:71:95:c8:a1:27:27:
                    a9:cd:67:68:24:fb:18:df:38:80:97:49:c9:39:83:
                    81:c5:d9:7e:7d:a7:b9:b0:93:42:5e:a5:95:4e:b8:
                    54:ac:f8:ec:7f:d0:46:ab:4f:45:a6:87:ef:80:25:
                    a2:29:e1:b6:30:95:3f:c3:81:bc:66:41:1a:18:9b:
                    a4:b1:2e:c4:5b:ab:e0:19:7c:6a:7f:68:81:0b:2d:
                    3d:28:c7:0c:42:86:a5:b1:c2:d4:0a:3a:96:69:0c:
                    a8:63:09:36:a6:b5:af:38:44:79:af:80:53:98:cb:
                    aa:20:29:71:b8:5e:d3:25:81:a8:5b:a1:e2:0e:7a:
                    85:8b:ee:27:29:bd:98:e4:ca:56:16:a6:50:6a:8c:
                    ae:63:c7:2e:7f:11:d8:9e:44:d9:f0:3c:7c:bf:02:
                    13:d7:16:99:e2:c3:4e:6b:22:3d:2f:91:df:ed:36:
                    f1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:03:8C:6A:69:2E:F2:AA:20:D1:AE:27:7F:D2:5C:68:F7:C4:6B:0F
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e3232372e3230382e302f32322d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:6b:83:bb:ff:e2:c4:0e:59:69:40:62:b0:4e:10:d4:c5:fa:
         14:64:1a:2c:14:f1:75:f6:50:48:b4:19:1a:0a:87:41:dc:ce:
         a4:26:14:8d:65:7c:3a:ad:41:24:ea:a8:e3:f7:98:6b:b8:bf:
         d6:55:1f:57:0d:bc:dd:ac:55:d2:24:0c:0b:5f:83:2b:84:14:
         c5:52:4c:7f:bf:68:60:4a:1a:9f:d4:f2:d0:3a:99:d5:5a:1b:
         5a:43:15:1a:b9:4c:0b:f8:90:fd:0c:39:a9:be:dc:81:8d:d1:
         5e:8b:22:39:ae:07:96:f5:f7:c7:e3:f6:04:83:67:f0:4f:f1:
         3d:d6:93:5f:f9:7d:04:82:79:2c:65:a6:02:fa:9d:31:b3:88:
         8f:7c:aa:dd:4c:37:bf:d3:19:db:9e:4f:08:d7:97:07:79:fc:
         8f:1a:7c:6a:a5:0b:43:12:f6:80:e5:b2:40:c0:e6:9b:1e:53:
         81:1c:1a:d1:da:e6:0b:b5:1a:39:68:11:df:a4:51:dd:61:19:
         fb:a6:da:ae:fe:21:b7:a6:ff:f3:ff:12:be:54:80:c6:b4:77:
         c3:eb:a7:19:5b:b2:3b:77:87:a6:d7:f1:3e:25:04:50:16:1f:
         d8:49:4e:6d:8a:db:3f:9b:3a:4f:a0:49:ea:f5:f2:b8:73:71:
         d2:c6:f4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----