Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e39372e302f32342d3234203d3e203535313534.roa
File:                     36372e3231302e39372e302f32342d3234203d3e203535313534.roa (raw, json)
Hash identifier:          pSUG5i3/w+2Q2rq/8Ko73am/A090UsoGURhB26IngZw=
Subject key identifier:   04:DF:FE:F4:4C:36:34:5A:03:05:F3:5F:6E:31:1B:F8:9D:3C:00:8A
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7278DD062F0B83E4A4D5F88CB23362E1F8BFE1F7
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e39372e302f32342d3234203d3e203535313534.roa
Signing time:             Mon 28 Nov 2022 11:22:00 +0000
ROA not before:           Mon 28 Nov 2022 11:17:00 +0000
ROA not after:            Mon 27 Nov 2023 11:22:00 +0000
asID:                     55154
IP address blocks:        67.210.97.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:78:dd:06:2f:0b:83:e4:a4:d5:f8:8c:b2:33:62:e1:f8:bf:e1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:17:00 2022 GMT
            Not After : Nov 27 11:22:00 2023 GMT
        Subject: CN=04DFFEF44C36345A0305F35F6E311BF89D3C008A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fa:c7:d2:af:bf:d8:9a:17:b3:9c:e7:a5:e4:
                    9d:3f:c1:7c:4b:e0:62:96:b3:94:b8:b7:b4:6b:75:
                    50:0d:a5:ff:be:22:69:14:e5:1a:8b:a8:4e:9d:8d:
                    1e:38:94:b8:e1:25:d1:f6:88:12:97:6d:5c:3f:a7:
                    2a:be:c9:f7:2d:02:87:95:5e:e8:f7:ae:96:92:e4:
                    8f:e5:86:a1:0d:c3:82:d1:c9:7d:a1:15:bd:77:30:
                    38:54:ee:8e:f3:50:52:c9:61:51:ed:ba:e2:28:54:
                    95:f3:77:25:a7:9c:b9:89:90:8b:24:a8:08:21:9f:
                    17:81:23:5e:a2:f7:bb:95:c8:b6:91:d4:2f:3e:52:
                    aa:2f:60:d0:66:46:6d:88:1d:8f:86:b7:7d:16:89:
                    ac:98:20:cc:4b:55:eb:bc:f8:f7:18:c1:02:57:2b:
                    d8:01:35:b1:07:45:cd:29:c4:b5:c3:37:42:54:77:
                    e4:33:0a:0d:c2:21:f3:e5:24:2e:f0:ae:85:a0:ae:
                    54:1f:43:da:9c:c6:0a:22:23:03:ee:8a:a8:c4:d7:
                    d7:cd:b3:75:7f:61:d9:9b:e2:4c:c2:f4:09:4e:38:
                    a4:9f:27:af:12:de:52:5c:bc:e4:b3:dd:5e:55:76:
                    cd:f2:69:02:59:e0:19:1e:ba:e3:02:b6:4f:67:43:
                    4d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DF:FE:F4:4C:36:34:5A:03:05:F3:5F:6E:31:1B:F8:9D:3C:00:8A
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e39372e302f32342d3234203d3e203535313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:99:77:8c:32:dc:33:6e:a7:92:aa:ce:db:28:26:30:72:ad:
         1b:1d:03:75:66:35:2e:66:8c:06:0d:10:1e:06:c8:e5:ac:be:
         2b:f4:01:00:54:60:86:a3:d7:3a:8e:4c:b6:97:6e:92:16:b4:
         00:d9:f0:5b:bf:4d:47:a0:2c:37:13:d8:55:d0:0c:bb:f5:ee:
         a8:a6:8c:63:b2:71:91:42:8c:42:16:10:76:bf:9e:12:1c:2c:
         22:ab:ef:ba:35:bd:b3:53:d9:3f:a7:7f:cd:56:ee:bc:7b:ec:
         27:7c:b6:86:7d:6a:97:1a:ec:1b:09:95:e3:c5:b5:a0:76:2e:
         c8:16:0b:db:56:90:a1:8a:2a:53:4c:a7:1f:b3:22:95:01:17:
         d3:50:ce:8d:6a:f2:f6:e5:ed:57:e7:3f:ff:65:88:0d:36:ac:
         33:6c:04:4e:39:aa:0e:23:ff:47:0c:a9:9a:b5:be:87:80:40:
         f4:da:d0:cb:58:af:bd:5c:b5:24:7a:0f:ef:97:8d:f9:0a:82:
         ac:ae:92:0a:68:1c:9a:c5:2d:b7:23:de:3e:06:75:bd:59:46:
         b6:b8:e8:8b:7f:2f:55:6f:b2:4a:55:c6:cb:6a:e9:85:bc:9c:
         35:4c:f7:cb:22:2e:7b:0f:77:59:1e:c3:f6:58:e5:21:7a:de:
         4a:63:1b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----