Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135372e302f32342d3234203d3e203631313338.roa
File:                     3231362e37332e3135372e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          SQE/VKO1SBV0tCarB/imAgBAlF0M3TG/4hnJDr+2x+A=
Subject key identifier:   65:A2:94:B7:04:35:5A:B7:C7:5C:3E:74:E7:0B:89:E7:E6:55:3E:01
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       19655494ACC0F7B04DF8DE930DDEE39FB3D628BC
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135372e302f32342d3234203d3e203631313338.roa
Signing time:             Tue 03 Jan 2023 02:07:02 +0000
ROA not before:           Tue 03 Jan 2023 02:02:02 +0000
ROA not after:            Tue 02 Jan 2024 02:07:02 +0000
asID:                     61138
IP address blocks:        216.73.157.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:65:54:94:ac:c0:f7:b0:4d:f8:de:93:0d:de:e3:9f:b3:d6:28:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jan  3 02:02:02 2023 GMT
            Not After : Jan  2 02:07:02 2024 GMT
        Subject: CN=65A294B704355AB7C75C3E74E70B89E7E6553E01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:18:13:5c:ad:54:27:57:42:bd:cd:30:61:73:
                    07:e4:60:19:16:3a:d5:ca:a8:41:6f:6a:c4:7a:18:
                    6d:65:3d:bf:d6:1b:ed:76:a7:84:f4:82:85:91:8c:
                    b9:85:03:30:cc:c6:bc:ea:71:29:00:fd:6b:d2:c8:
                    a3:97:21:76:3d:82:5d:ac:33:65:5c:39:65:4b:ec:
                    98:ff:67:12:41:95:cb:47:cd:4f:f5:a7:3c:7d:bb:
                    cb:d3:c7:2a:3e:e1:43:c3:a3:4c:a1:cd:b2:13:1e:
                    2f:88:30:73:01:38:8f:8a:fa:be:00:8b:1b:b4:a3:
                    48:5c:ab:62:d4:e5:69:b8:7e:ad:37:56:b2:7b:f2:
                    4c:44:b2:7b:de:dc:8e:37:95:54:a6:21:53:54:58:
                    5c:c0:19:d2:86:b6:b4:ed:60:5e:07:11:bf:70:40:
                    d0:f8:a8:ba:fd:ee:7e:1a:1a:96:ae:a3:4b:95:91:
                    f4:c7:22:f3:d4:8f:cb:67:fb:05:e6:01:cb:94:05:
                    6f:c5:66:fd:58:3b:11:2b:cb:b4:d8:e1:04:cf:e0:
                    0f:f3:17:62:36:da:8d:aa:9f:ad:0d:e8:13:f1:3e:
                    0c:cd:01:46:51:6f:95:39:eb:c1:ca:19:ba:f6:52:
                    64:c1:99:22:09:d3:a5:f4:7a:8b:86:b7:f9:c4:dc:
                    e1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A2:94:B7:04:35:5A:B7:C7:5C:3E:74:E7:0B:89:E7:E6:55:3E:01
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135372e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:22:e6:fa:08:07:67:72:99:81:14:10:b8:05:6d:fb:53:9c:
         62:ba:4e:04:55:b4:58:3e:d9:b2:f7:fe:00:e3:70:f3:c0:97:
         25:7e:4e:9a:f7:f5:33:14:92:fa:50:6b:0a:65:79:c0:50:2a:
         90:19:d8:11:fd:25:04:67:6b:3f:14:ff:51:33:77:89:99:e7:
         2f:02:44:f2:44:7d:01:ba:af:3f:25:64:fe:be:1a:f5:2d:07:
         89:ba:f0:c8:da:5f:17:ec:93:2c:5a:12:fa:18:e1:b3:eb:a5:
         37:b4:81:0a:3e:59:86:6a:cb:af:cb:24:49:0f:b7:2f:26:78:
         e2:76:bc:13:2a:26:c3:89:fb:85:d9:b6:89:31:ac:7d:40:47:
         59:c0:eb:b1:75:d3:f2:9d:0d:5a:f1:29:13:c3:49:08:c5:46:
         e7:73:9f:82:6b:04:8e:4d:52:95:36:7b:60:f0:65:9f:8a:ba:
         c7:9b:b3:9a:89:81:ce:21:e3:fe:64:c6:dd:45:42:cd:e3:69:
         85:59:ce:0c:02:c3:ae:8c:3c:82:eb:c5:2a:78:dc:fc:f7:da:
         6f:6a:a7:56:35:99:88:8f:35:4c:c6:c8:ea:77:e6:3e:fe:3e:
         39:03:5f:0d:d2:6e:f3:c2:17:ea:41:bb:b7:25:c9:84:55:3e:
         8c:d2:13:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----