Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e39372e3233322e302f32322d3234203d3e203439393939.roa
File:                     3231362e39372e3233322e302f32322d3234203d3e203439393939.roa (raw, json)
Hash identifier:          OmigQrJFaoMFDrww3TOQ0bHNe1HAzULGmZqzhLtGtJ0=
Subject key identifier:   27:B5:7F:BD:92:AE:DA:15:E8:E3:C1:60:6B:C5:AD:9F:38:8A:0B:6D
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       41FB648FD104F4F1F2B5D8709C6D363780A856CA
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e39372e3233322e302f32322d3234203d3e203439393939.roa
Signing time:             Mon 28 Nov 2022 11:21:59 +0000
ROA not before:           Mon 28 Nov 2022 11:16:59 +0000
ROA not after:            Mon 27 Nov 2023 11:21:59 +0000
asID:                     49999
IP address blocks:        216.97.232.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:fb:64:8f:d1:04:f4:f1:f2:b5:d8:70:9c:6d:36:37:80:a8:56:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:59 2022 GMT
            Not After : Nov 27 11:21:59 2023 GMT
        Subject: CN=27B57FBD92AEDA15E8E3C1606BC5AD9F388A0B6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:42:5b:5a:99:fb:18:de:1c:5a:db:df:ff:91:
                    70:8d:65:0e:c1:b7:45:21:7e:61:dc:10:19:54:08:
                    04:b9:8e:45:af:c4:92:9c:94:4e:fc:1f:08:21:ab:
                    4a:6c:bb:17:40:80:7b:99:6c:a5:31:66:fe:0b:82:
                    cf:47:3e:c1:a0:02:c6:fd:29:db:d0:eb:83:ae:21:
                    ba:23:3e:e2:04:b0:3e:33:1e:7f:a8:7d:20:06:e1:
                    28:d3:24:08:94:1f:c7:f8:31:50:c6:1a:91:8c:f8:
                    2b:4b:e1:ac:91:cf:3d:11:5b:55:43:3a:b3:04:9f:
                    ab:a7:b9:ae:fe:20:88:d3:1b:c1:0d:cf:82:6f:bd:
                    72:3d:8a:c6:0a:e1:5f:2c:dd:92:7d:28:ff:a7:06:
                    e3:8e:3b:c4:f1:8c:96:34:cd:fc:03:e1:10:b3:db:
                    4c:b2:91:9c:cc:3b:1c:39:8a:53:14:14:0d:9f:00:
                    4a:e4:3b:5b:1c:7f:86:3a:df:29:61:62:50:61:c0:
                    25:1e:b8:b1:2e:11:6b:34:84:1e:85:ae:05:fc:f6:
                    55:00:80:8d:06:7e:5e:46:93:b8:73:7c:6d:ea:2c:
                    9d:87:58:7c:93:f2:d2:2d:08:6c:4f:47:f9:c7:67:
                    b4:66:dc:2d:13:1b:da:6c:11:e2:7c:33:8f:83:29:
                    0d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B5:7F:BD:92:AE:DA:15:E8:E3:C1:60:6B:C5:AD:9F:38:8A:0B:6D
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e39372e3233322e302f32322d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:d1:24:b3:e8:2f:67:f7:9a:fd:03:7a:16:0c:1a:0b:ec:23:
         39:45:cc:fa:53:1f:e0:5e:f4:89:cb:e7:e8:36:9c:6f:4d:81:
         e4:f7:66:d2:85:3f:fa:41:79:be:85:f7:f3:80:62:7e:e9:76:
         29:8e:f6:45:43:30:a5:28:57:73:4c:5e:f6:28:cf:fe:2f:bf:
         b0:29:c4:75:46:eb:8f:06:6b:fd:2e:d9:35:15:97:9d:7e:21:
         ea:91:25:02:89:0d:6d:42:a8:3e:e8:f0:22:49:33:27:ea:62:
         b2:07:e1:86:9b:32:45:24:fd:8f:8d:a1:4b:d3:5e:64:77:92:
         be:16:cb:65:91:2b:df:df:ce:c6:a9:23:81:c5:50:31:a0:e7:
         05:f6:9b:f7:67:fb:35:1e:fc:60:a2:00:ce:8a:a0:83:1e:c7:
         a3:fb:a5:8f:0f:56:27:3f:f0:7f:f2:95:84:e3:f9:d7:d9:0e:
         71:64:ae:dd:11:cd:80:39:5c:cb:57:2f:4d:ad:e6:5c:3e:46:
         90:ed:1c:ce:29:f4:41:bf:9a:e4:a0:81:73:66:c1:cb:f9:9d:
         87:d5:23:94:bd:98:2a:bf:b5:a0:5f:da:65:e9:ed:fc:ec:bc:
         b8:ff:ee:fe:68:96:c8:81:5f:2f:5e:26:23:25:f5:b2:dc:df:
         0b:1e:9f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----