Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e3131352e302f32342d3234203d3e203631313338.roa
File:                     36372e3231302e3131352e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          qQpKUt2BpykBn1smjxba4yTx4xJeVtojqyyfjQoMqcc=
Subject key identifier:   29:4D:6A:E1:B8:79:EE:DC:91:91:2B:27:4D:49:65:FE:7E:F5:78:94
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7B72A101D026025DB34CD22844ED2703EAC40D70
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e3131352e302f32342d3234203d3e203631313338.roa
Signing time:             Wed 30 Nov 2022 03:20:42 +0000
ROA not before:           Wed 30 Nov 2022 03:15:42 +0000
ROA not after:            Wed 29 Nov 2023 03:20:42 +0000
asID:                     61138
IP address blocks:        67.210.115.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:72:a1:01:d0:26:02:5d:b3:4c:d2:28:44:ed:27:03:ea:c4:0d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 30 03:15:42 2022 GMT
            Not After : Nov 29 03:20:42 2023 GMT
        Subject: CN=294D6AE1B879EEDC91912B274D4965FE7EF57894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5a:b2:bc:2d:0a:3f:e4:03:29:0b:7d:a1:90:
                    c5:aa:bf:87:82:d2:72:eb:5b:4b:10:21:a1:8a:7c:
                    a2:4a:29:db:2f:e6:71:c7:99:ec:ed:05:70:d2:b8:
                    02:8a:cf:93:e7:28:4b:1f:17:29:e1:ba:17:9a:56:
                    f6:bc:35:79:8e:3c:e4:35:39:89:1c:e1:1c:db:2d:
                    e8:9e:f8:ac:10:f6:1d:d7:29:d8:e4:40:19:53:26:
                    bf:d3:de:43:5c:70:af:02:ab:ca:5a:8e:c0:55:1a:
                    fb:68:22:30:48:1c:5d:fe:c5:ce:a6:f4:f9:48:c2:
                    a1:cf:ad:81:0b:b1:5a:33:cc:d2:ff:85:9c:92:0c:
                    09:2e:ae:08:81:99:1b:a9:e9:66:e3:c8:41:78:30:
                    b3:d1:fb:08:cb:93:6a:20:26:77:60:82:d7:4f:a4:
                    6a:8d:b3:b4:1e:b7:ce:fe:14:ca:7a:30:47:5f:8f:
                    fa:87:c7:e2:3c:00:fb:70:0f:be:87:5e:87:95:69:
                    f0:c9:19:ae:c2:3a:85:ab:5c:ff:8f:ee:a8:38:cb:
                    ec:d4:80:14:d7:11:9e:f0:70:a7:c4:9c:33:8e:ec:
                    2c:6b:a3:83:df:95:5d:a2:ba:91:9b:71:5a:48:61:
                    82:38:a0:52:a7:fa:06:29:79:d5:de:9b:91:dd:de:
                    48:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4D:6A:E1:B8:79:EE:DC:91:91:2B:27:4D:49:65:FE:7E:F5:78:94
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e3131352e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:d8:57:92:5a:e9:00:87:79:ca:a5:36:80:c6:07:64:71:63:
         c8:53:81:eb:b1:3a:38:12:ba:e2:32:aa:f9:78:54:6a:fe:63:
         3b:80:5d:8e:65:17:4a:40:b6:df:98:6f:de:57:51:dc:5d:24:
         bf:33:e5:cc:ae:cc:bb:1a:44:65:c5:c1:55:ae:47:28:90:46:
         a8:56:11:74:ec:28:2f:76:bf:8d:39:9c:55:11:b0:81:b0:2a:
         a9:aa:d6:32:34:d2:ce:16:fa:30:f4:71:48:a4:a3:82:bf:1f:
         51:11:0b:83:aa:cf:59:7e:15:5e:34:72:7c:ed:5c:32:72:3a:
         74:5b:e8:5f:ee:e1:84:66:ac:86:d9:74:58:da:4e:9d:f0:ff:
         9b:06:d4:38:ed:53:64:fc:cf:97:e1:24:36:94:de:97:8f:30:
         8d:00:00:d4:f9:66:54:98:e9:94:1f:c2:41:a9:d4:69:ce:6d:
         d0:e8:a4:7d:d3:9a:a5:93:81:f8:d3:6b:7d:7f:44:4a:6d:e8:
         63:02:20:da:b7:92:14:f9:87:46:43:21:d3:e4:6c:c1:92:ea:
         d7:95:9b:2e:d9:4f:2a:d3:2e:77:a3:ce:83:c2:8b:27:a9:16:
         d5:8f:08:cc:7e:3b:23:d3:53:2f:c7:23:9a:5e:54:a4:83:ac:
         65:ed:8a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----