Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e3232372e3230382e302f32322d3234203d3e203631333137.roa
File:                     3231362e3232372e3230382e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          +iI3WYTSVcpBsaxhz2MF8DO3twe7EhPvdJLp8IPSbSw=
Subject key identifier:   D9:0E:A6:BD:0C:FB:E0:33:45:12:23:9C:F7:65:EA:D5:65:28:44:14
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       707A55DB04B69697EE3676E57AA2C0BF9242C4A3
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e3232372e3230382e302f32322d3234203d3e203631333137.roa
Signing time:             Mon 28 Nov 2022 11:21:58 +0000
ROA not before:           Mon 28 Nov 2022 11:16:58 +0000
ROA not after:            Mon 27 Nov 2023 11:21:58 +0000
asID:                     61317
IP address blocks:        216.227.208.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7a:55:db:04:b6:96:97:ee:36:76:e5:7a:a2:c0:bf:92:42:c4:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:58 2022 GMT
            Not After : Nov 27 11:21:58 2023 GMT
        Subject: CN=D90EA6BD0CFBE0334512239CF765EAD565284414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c7:1e:09:a4:38:58:46:b9:8e:11:2d:7e:a1:
                    1a:66:3e:1c:f1:86:91:e9:db:51:90:30:86:b0:dd:
                    a0:d5:e1:1a:5b:c5:3b:89:44:eb:b6:93:60:69:d4:
                    c8:ce:7e:e2:37:ae:c3:d2:d0:42:ad:df:fc:f7:56:
                    5f:57:4f:16:a7:37:e2:84:2b:c6:da:77:b0:ea:fd:
                    31:ed:db:5b:70:06:99:5b:3f:97:0c:64:93:1c:20:
                    fa:42:e6:bd:c7:79:23:ca:b3:e0:59:a9:8f:71:ff:
                    34:b7:89:18:a0:67:93:54:95:56:a9:4f:d0:7f:54:
                    7b:ba:87:4c:75:8e:18:94:9b:23:2c:3a:b1:98:11:
                    dd:eb:84:b1:a6:3c:74:93:e5:5d:e8:45:5d:43:24:
                    11:bf:16:91:8f:ff:1d:49:52:4c:ab:32:2d:f8:cb:
                    81:76:ef:ce:22:ea:80:02:11:40:3d:a9:7d:fa:7c:
                    c0:11:07:91:3d:46:de:4a:a2:b0:b2:74:1e:1f:c5:
                    18:34:d1:7c:e3:5c:d8:8d:36:00:6b:79:cb:fa:99:
                    6d:65:a1:4d:5c:4e:5f:99:c9:6b:66:40:b0:89:1f:
                    6c:bb:25:0a:72:5e:79:a2:58:d9:3e:2d:c6:91:33:
                    47:d1:9d:9d:98:db:27:0c:17:d7:a6:7f:40:dc:98:
                    f3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0E:A6:BD:0C:FB:E0:33:45:12:23:9C:F7:65:EA:D5:65:28:44:14
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e3232372e3230382e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:c9:d1:52:8d:4a:d6:66:75:ab:65:5e:53:ff:57:fb:c9:1a:
         8b:c9:eb:c0:f8:b9:ac:2e:90:64:22:64:1e:75:1a:44:31:3c:
         ae:88:11:81:f4:e2:d3:dd:11:d2:47:a4:1b:4e:4e:36:10:d6:
         07:bb:2d:1e:1f:16:04:80:c0:42:c4:fe:a2:b1:22:26:80:d0:
         a8:9b:80:9f:87:a2:7f:35:84:a9:80:78:38:6b:48:7a:ee:35:
         05:49:2f:1a:27:07:6d:6d:f1:ea:f3:48:58:3c:ad:b2:c8:f6:
         ee:cc:da:e0:7f:39:71:7d:9b:ee:20:fa:2a:21:34:fd:49:f1:
         b5:82:09:72:65:e3:36:1c:b9:82:3e:f1:8d:37:6a:22:f5:d6:
         14:b0:49:4f:1b:47:4c:9d:e7:1f:d1:2e:4b:cb:1d:b1:2a:41:
         b0:91:c2:f9:de:66:e9:08:bf:c8:36:ef:e3:bb:2e:32:29:f9:
         31:8c:57:21:2a:c7:68:8d:29:e6:a5:a9:e9:36:b7:62:0d:13:
         3a:73:f8:dc:ce:f5:e6:05:85:ef:a8:ca:bc:a1:25:15:b2:33:
         78:c5:8a:8f:36:22:5e:ee:c2:78:26:73:54:25:65:ba:a6:d2:
         8e:71:29:45:b7:9c:a9:91:29:35:6d:67:4f:fe:2f:55:1b:3c:
         7c:f6:ca:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----