Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e3232372e3232302e302f32322d3234203d3e20323039373337.roa
File:                     3231362e3232372e3232302e302f32322d3234203d3e20323039373337.roa (raw, json)
Hash identifier:          ehKuzFBdNimUYbbrRBTfsD7+XK4aXl1yP418BuCxP5o=
Subject key identifier:   AA:5A:0A:49:1B:61:DF:14:15:88:4B:16:E5:F9:29:46:DA:1B:FC:64
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       531BD421F101ABE31D81CFA40C1144E345D07D06
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e3232372e3232302e302f32322d3234203d3e20323039373337.roa
Signing time:             Mon 28 Nov 2022 11:21:58 +0000
ROA not before:           Mon 28 Nov 2022 11:16:58 +0000
ROA not after:            Mon 27 Nov 2023 11:21:58 +0000
asID:                     209737
IP address blocks:        216.227.220.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:1b:d4:21:f1:01:ab:e3:1d:81:cf:a4:0c:11:44:e3:45:d0:7d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:58 2022 GMT
            Not After : Nov 27 11:21:58 2023 GMT
        Subject: CN=AA5A0A491B61DF1415884B16E5F92946DA1BFC64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:34:bd:1f:29:31:35:00:a8:f8:f3:88:b1:
                    99:e5:da:84:61:e4:53:4c:7b:8e:04:ff:1e:8c:42:
                    d4:82:ad:8c:a7:c6:af:1f:fa:ae:a1:0d:eb:6a:61:
                    24:2b:87:67:94:13:1e:c9:0d:70:8c:d1:de:37:b5:
                    68:98:91:09:23:42:13:c3:05:26:fe:d1:bd:5b:4c:
                    24:6c:31:cc:c8:fa:c7:f8:6c:81:c3:f8:bb:e0:d4:
                    7d:d2:bf:e2:75:9a:90:43:6b:13:a7:c6:a0:9d:44:
                    ea:44:34:bc:94:bc:07:91:4a:55:12:71:26:27:e6:
                    8a:20:a1:22:c7:38:80:29:85:0c:9b:c1:94:bd:13:
                    61:0b:95:ad:35:fe:37:03:f9:6e:2a:a9:1e:64:ca:
                    a4:ef:12:f9:06:b9:66:50:98:ed:d0:eb:ba:38:7a:
                    29:1a:7d:08:5d:1a:f2:07:13:ba:4d:3d:61:30:03:
                    01:e6:57:ff:a6:87:a3:3b:f6:dd:3a:0a:c6:10:a4:
                    fc:34:7e:ed:2e:2e:fd:72:81:66:c7:79:ab:16:bb:
                    85:e0:e1:9d:15:1e:3a:af:91:10:84:71:5c:d3:9d:
                    81:5a:f5:32:4a:d2:b7:a2:61:a2:33:68:e2:f5:ee:
                    78:ed:ae:28:e8:8d:2c:c4:7b:cb:c9:47:84:33:48:
                    ee:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5A:0A:49:1B:61:DF:14:15:88:4B:16:E5:F9:29:46:DA:1B:FC:64
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e3232372e3232302e302f32322d3234203d3e20323039373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:9e:69:a7:26:a8:6f:bd:f7:c2:f9:4b:d4:f2:cd:f5:bf:3a:
         c0:9d:08:e7:1d:ed:6e:49:08:ba:33:36:c8:27:4b:57:5a:a9:
         34:f9:55:a3:07:50:01:4e:eb:1b:9f:45:21:fa:cd:a1:3a:46:
         95:d0:aa:10:21:3b:cd:c2:42:6d:68:2c:4c:1b:02:49:b5:a5:
         68:87:63:43:fb:d7:14:38:12:bc:79:df:64:59:9f:d2:9f:7d:
         75:60:eb:6d:9f:a3:8c:db:33:f9:da:f7:27:f8:94:91:99:2f:
         b1:d7:cc:90:3a:06:c0:8f:66:30:94:58:78:e0:30:da:5f:ae:
         fc:e7:e5:a6:68:ad:18:f6:f3:0b:b2:ea:d7:7b:67:d2:40:c2:
         4b:60:88:6b:c8:c8:59:96:4a:c2:33:84:4a:5b:2a:23:d4:a9:
         97:97:2d:c3:b7:3b:97:43:e2:65:c8:ae:77:40:14:1e:4c:4d:
         a0:11:1d:af:bf:57:7f:07:f1:ad:61:6e:d7:29:85:cf:3a:cb:
         71:c9:5f:d6:ea:41:a6:19:15:6d:6d:a9:6a:ce:c0:f4:bc:14:
         11:99:a0:35:77:c4:3a:66:bb:30:f7:d5:8f:55:e7:da:47:0c:
         bb:23:c6:42:da:b6:e2:94:26:5b:97:c3:23:c5:67:86:ed:51:
         e7:e9:ad:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----