Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e39372e3233302e302f32342d3234203d3e203631313338.roa
File:                     3231362e39372e3233302e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          9e0IxxogFM7qSvOUcK/g3gseZJYliCUhEqu6ZnJ1OrI=
Subject key identifier:   D5:CF:C4:F7:D3:11:75:C8:93:5B:09:46:D9:5C:86:50:E5:B2:F2:93
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       0E882FB297D3EF2B8E5298455DAC8FD4B6C62897
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e39372e3233302e302f32342d3234203d3e203631313338.roa
Signing time:             Mon 28 Nov 2022 11:22:02 +0000
ROA not before:           Mon 28 Nov 2022 11:17:02 +0000
ROA not after:            Mon 27 Nov 2023 11:22:02 +0000
asID:                     61138
IP address blocks:        216.97.230.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:88:2f:b2:97:d3:ef:2b:8e:52:98:45:5d:ac:8f:d4:b6:c6:28:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:17:02 2022 GMT
            Not After : Nov 27 11:22:02 2023 GMT
        Subject: CN=D5CFC4F7D31175C8935B0946D95C8650E5B2F293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:16:58:38:ca:73:f2:04:ee:1e:a9:d7:79:
                    79:02:ed:81:d3:3f:1b:2e:f9:a4:28:c8:7e:81:54:
                    7f:39:a8:1f:4b:84:a3:ce:da:45:cd:dd:2a:ed:b8:
                    da:7d:85:23:5d:ab:83:70:3c:dc:a1:c5:3a:0d:d0:
                    35:69:99:91:8f:2d:86:d3:51:e7:72:83:36:c3:83:
                    bb:ec:0e:f3:9d:5d:9e:41:ae:26:62:56:0c:15:1e:
                    6c:e1:f6:31:17:85:0a:21:94:7d:86:45:39:a9:6d:
                    67:bf:27:e1:2d:83:53:8d:e0:0a:31:e1:5f:ed:a2:
                    54:ad:fc:46:4a:40:fd:68:4e:db:91:b8:2a:87:df:
                    2b:ba:fe:cc:e7:7e:53:cb:a8:76:64:c4:85:78:45:
                    ed:d7:5b:36:30:a8:82:d3:9e:7c:6a:a0:a6:3e:63:
                    dc:50:e4:ad:8a:f8:c3:79:b1:1e:5c:a7:bd:7a:25:
                    15:9b:92:a1:b0:fb:d6:fb:e8:16:c3:6c:12:20:ea:
                    9b:2b:89:1b:d4:20:77:f3:45:f4:7f:84:b7:8d:a0:
                    23:2e:2b:47:f2:d8:1c:08:9e:54:c4:e6:97:23:af:
                    e3:cf:e9:03:01:d3:8c:57:a6:a2:40:be:97:7a:cc:
                    74:6b:e9:31:5f:4a:11:b8:64:c8:db:eb:99:9a:32:
                    f0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CF:C4:F7:D3:11:75:C8:93:5B:09:46:D9:5C:86:50:E5:B2:F2:93
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e39372e3233302e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:8a:35:0e:eb:de:f8:d1:32:74:81:01:b6:16:3d:0e:7a:89:
         0c:d2:dd:e9:da:e4:b2:68:ad:65:c7:0d:ae:e0:88:6e:bc:42:
         b6:a4:2d:81:04:07:b9:51:b1:72:d4:e8:d4:fb:c8:0d:3b:f6:
         2f:59:d5:c1:cd:bb:da:ae:20:a5:6b:3b:a4:15:15:32:1c:77:
         bd:e2:47:d3:c0:df:6e:2a:05:13:9f:f1:86:62:b8:7c:3b:ca:
         ce:cb:3f:9e:80:cd:4e:ee:54:37:a0:ea:13:d1:5b:00:f9:24:
         b8:0c:14:59:c9:8b:10:98:5c:74:db:77:27:88:a6:30:9e:54:
         e7:78:04:13:80:4b:e1:2b:f7:27:73:9f:77:f0:aa:64:29:51:
         d0:b6:ed:ff:4c:53:1d:58:1f:f3:d1:88:11:25:8d:34:91:18:
         a8:e2:88:ca:cc:c6:bb:0e:5e:e1:80:34:83:84:f5:4e:32:68:
         7e:52:f5:1f:d7:73:55:ec:64:fd:67:15:09:2e:6d:c0:f7:d6:
         2c:57:4c:c8:b3:45:7c:3c:84:44:dc:7e:94:a1:a8:e4:44:e1:
         b2:83:04:f4:dc:29:43:a4:56:0f:3b:f0:71:05:4c:4f:cb:24:
         67:79:cd:63:a4:10:48:8b:45:54:50:04:2a:e5:19:d6:24:dc:
         06:8d:02:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----