Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e39372e3233312e302f32342d3234203d3e203439393939.roa
File:                     3231362e39372e3233312e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          Qimuy9szYfSNI4SnrKmSVn+ACydQCgqFnTkqCy2H5C0=
Subject key identifier:   C5:7A:12:F3:B6:35:71:E6:B8:69:AC:25:76:F7:88:A1:47:7D:10:98
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       02604CD06914989D91957572767F9D2B59F023E0
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e39372e3233312e302f32342d3234203d3e203439393939.roa
Signing time:             Mon 28 Nov 2022 11:22:00 +0000
ROA not before:           Mon 28 Nov 2022 11:17:00 +0000
ROA not after:            Mon 27 Nov 2023 11:22:00 +0000
asID:                     49999
IP address blocks:        216.97.231.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:60:4c:d0:69:14:98:9d:91:95:75:72:76:7f:9d:2b:59:f0:23:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:17:00 2022 GMT
            Not After : Nov 27 11:22:00 2023 GMT
        Subject: CN=C57A12F3B63571E6B869AC2576F788A1477D1098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:81:7b:14:fb:1c:be:89:ac:35:3f:64:0f:fa:
                    ac:d8:fa:f7:d9:86:47:80:56:fb:33:19:ab:7d:e3:
                    88:33:bd:f2:e4:b2:63:69:c3:ca:c3:c6:a9:a0:51:
                    a4:ee:aa:7b:e9:a3:4a:cf:e4:11:c6:fb:56:59:0d:
                    19:62:02:ee:85:1e:dd:c1:46:2d:b0:fe:20:3a:e9:
                    7e:8f:fd:4e:7e:3f:71:a1:5c:a2:31:6e:77:7f:4b:
                    44:d2:7e:8f:1c:5f:ff:a5:e3:cd:51:89:26:cd:76:
                    96:cf:58:87:3c:e8:ce:0b:62:78:ab:ca:4d:a7:30:
                    4e:c5:26:67:a9:9d:99:bf:14:ee:b4:4e:e7:b4:9b:
                    16:68:bf:b9:13:58:6a:99:5d:25:52:49:a3:57:d1:
                    03:01:e0:ce:ea:35:29:18:c5:0a:b8:dc:a4:a8:c2:
                    88:f3:6a:28:19:7d:5a:b6:b7:c0:80:3e:42:1c:f2:
                    b8:87:72:16:d4:27:3f:cd:e3:86:b3:0f:48:4e:8b:
                    fd:9d:31:90:54:3a:13:52:47:93:0e:6a:b6:74:d7:
                    2d:04:e4:a1:b2:95:a9:fb:1d:4b:e9:a0:b4:3e:51:
                    19:75:2d:3f:0d:ed:b2:23:66:43:b5:b8:1a:7f:ae:
                    02:b4:3c:ab:60:0a:e9:90:4f:db:59:6f:0d:a8:4f:
                    c2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7A:12:F3:B6:35:71:E6:B8:69:AC:25:76:F7:88:A1:47:7D:10:98
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e39372e3233312e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:ff:ce:d8:64:eb:23:19:9f:f4:31:a9:22:04:5c:d4:6f:22:
         bb:62:b2:fd:99:1b:4c:af:d6:da:ef:d3:e3:09:61:48:d9:3d:
         b6:b1:83:f0:bf:8d:d9:b6:30:b9:9d:37:54:11:ed:a6:b4:96:
         a4:63:3d:1d:ad:24:d3:89:1a:99:1c:78:92:0f:5b:c7:4c:84:
         8a:03:ef:94:4e:b8:33:99:cd:23:d1:2d:3b:d2:b2:3f:b6:c4:
         18:76:14:1c:0e:3d:8c:5a:62:0f:38:77:57:57:68:07:16:52:
         95:c6:1b:1d:3d:59:ab:56:4e:89:24:08:74:e4:fc:01:0d:a6:
         b0:96:fa:43:b0:97:9b:24:90:a1:72:92:c2:39:85:13:b2:4c:
         4a:a5:5b:ba:8a:d7:b8:77:bf:a0:15:17:97:0d:98:96:d8:2d:
         99:4f:e7:d2:5d:56:1b:eb:04:d3:cc:9f:2e:11:68:2c:41:24:
         90:66:c0:f3:e5:af:8e:ee:ec:1c:21:dc:1f:d9:cb:bb:40:5a:
         f3:f6:a5:5f:50:05:82:18:15:0f:12:b5:e1:bf:bd:2b:45:87:
         39:c1:80:ea:44:dc:1b:00:05:88:77:da:00:b5:5b:41:9d:34:
         ff:32:b9:a6:e8:2d:de:b0:f4:5c:56:88:c0:73:80:ae:a9:96:
         39:59:3d:72
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUAmBM0GkUmJ2RlXVydn+dK1nwI+AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjIxMTI4MTExNzAwWhcNMjMxMTI3MTEyMjAw
WjAzMTEwLwYDVQQDEyhDNTdBMTJGM0I2MzU3MUU2Qjg2OUFDMjU3NkY3ODhBMTQ3
N0QxMDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4F7FPscvoms
NT9kD/qs2Pr32YZHgFb7MxmrfeOIM73y5LJjacPKw8apoFGk7qp76aNKz+QRxvtW
WQ0ZYgLuhR7dwUYtsP4gOul+j/1Ofj9xoVyiMW53f0tE0n6PHF//pePNUYkmzXaW
z1iHPOjOC2J4q8pNpzBOxSZnqZ2ZvxTutE7ntJsWaL+5E1hqmV0lUkmjV9EDAeDO
6jUpGMUKuNykqMKI82ooGX1atrfAgD5CHPK4h3IW1Cc/zeOGsw9ITov9nTGQVDoT
UkeTDmq2dNctBOShspWp+x1L6aC0PlEZdS0/De2yI2ZDtbgaf64CtDyrYArpkE/b
WW8NqE/C+wIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMV6EvO2NXHmuGmsJXb3iKFH
fRCYMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8xLzMyMzEzNjJlMzkzNzJlMzIzMzMxMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzQzOTM5MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANhh5zANBgkqhkiG9w0BAQsF
AAOCAQEAPv/O2GTrIxmf9DGpIgRc1G8iu2Ky/ZkbTK/W2u/T4wlhSNk9trGD8L+N
2bYwuZ03VBHtprSWpGM9Ha0k04kamRx4kg9bx0yEigPvlE64M5nNI9EtO9KyP7bE
GHYUHA49jFpiDzh3V1doBxZSlcYbHT1Zq1ZOiSQIdOT8AQ2msJb6Q7CXmySQoXKS
wjmFE7JMSqVbuorXuHe/oBUXlw2YltgtmU/n0l1WG+sE08yfLhFoLEEkkGbA8+Wv
ju7sHCHcH9nLu0Ba8/alX1AFghgVDxK14b+9K0WHOcGA6kTcGwAFiHfaALVbQZ00
/zK5pugt3rD0XFaIwHOArqmWOVk9cg==
-----END CERTIFICATE-----