Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131312e302f32342d3234203d3e20313437323837.roa
File:                     3231362e3234372e3131312e302f32342d3234203d3e20313437323837.roa (raw, json)
Hash identifier:          jbJyU6sqnL5J56EpjegQYUOIaHKJpLudwxGbSQo6MKA=
Subject key identifier:   B4:49:E8:56:8D:35:A2:9D:50:AB:23:38:36:96:1C:D9:69:6B:04:93
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       170085D2D9D0BC8358E2FD6C6C140A75EEC282B6
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131312e302f32342d3234203d3e20313437323837.roa
Signing time:             Mon 29 May 2023 10:17:22 +0000
ROA not before:           Mon 29 May 2023 10:12:22 +0000
ROA not after:            Mon 27 May 2024 10:17:22 +0000
asID:                     147287
IP address blocks:        216.247.111.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:00:85:d2:d9:d0:bc:83:58:e2:fd:6c:6c:14:0a:75:ee:c2:82:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: May 29 10:12:22 2023 GMT
            Not After : May 27 10:17:22 2024 GMT
        Subject: CN=B449E8568D35A29D50AB233836961CD9696B0493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8b:50:6e:26:58:25:50:2b:98:dd:b0:cb:61:
                    8a:e4:f5:c7:df:81:ee:62:a9:e5:3f:57:8f:bd:fa:
                    eb:25:19:3f:d7:b7:a5:73:c2:5e:5a:e8:9f:b1:9b:
                    c3:f7:b5:0f:f8:06:b0:b4:cd:af:09:2e:43:c0:69:
                    f0:c9:ea:ad:be:e2:88:a1:54:e6:f1:3d:c4:6c:01:
                    b5:18:d3:ed:39:71:f6:ea:34:db:24:39:44:52:06:
                    f1:75:59:10:9c:12:a6:30:1e:5d:b6:be:05:e3:cd:
                    71:c8:bd:4d:7e:b6:24:0b:1d:5f:ce:65:33:71:c9:
                    bd:b0:1c:3e:94:66:db:cd:f8:e5:f9:44:8d:41:8f:
                    cf:78:32:c0:07:bf:da:ca:23:d7:96:95:27:d4:93:
                    fd:8a:0a:3e:80:b4:82:b0:cf:bd:15:94:7e:c7:e8:
                    c5:57:80:c4:8c:33:20:7e:71:04:84:67:29:b5:bf:
                    1b:dd:9c:c5:ed:f4:02:98:1c:b7:78:43:17:25:9b:
                    fc:62:be:b8:f8:bd:2d:34:56:21:13:d3:ff:b5:2a:
                    6e:fe:7a:9b:a3:c2:d6:58:4c:49:3a:91:aa:40:f3:
                    42:f2:66:2a:25:54:46:d9:10:ad:42:ab:e0:e5:b3:
                    bb:6e:d9:3c:f0:62:97:e1:0b:e6:e0:5a:db:de:01:
                    ed:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:49:E8:56:8D:35:A2:9D:50:AB:23:38:36:96:1C:D9:69:6B:04:93
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131312e302f32342d3234203d3e20313437323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:80:56:ae:ef:f1:3a:d7:73:7a:c8:b1:86:20:4f:73:4b:b9:
         c9:72:3f:31:99:83:29:a0:25:84:e3:5c:82:ab:1a:06:44:ee:
         16:7e:e3:a5:7c:4c:63:a2:d2:01:a1:4c:52:92:22:4c:65:a8:
         fd:18:c1:9b:30:9b:87:26:5f:75:a2:5c:7c:ce:04:24:6b:6d:
         88:f0:f6:8f:2b:ec:1e:82:e4:b1:84:2c:d9:2c:eb:37:82:8a:
         b7:fa:36:ba:bf:5a:21:b4:19:50:92:cc:af:43:ad:c5:69:67:
         a7:77:89:eb:cb:0e:7a:02:d3:28:83:52:17:74:04:1b:67:f7:
         96:68:aa:c9:56:c4:43:47:58:92:f9:3d:79:f2:f9:c7:dc:a3:
         c4:31:f6:91:8c:8b:cb:e7:28:43:75:93:ae:c9:03:16:62:89:
         9f:e4:af:7c:b0:94:65:78:a5:2b:ef:38:c2:62:9a:c3:3d:d3:
         e1:49:89:1e:09:af:c9:ca:e7:b7:28:af:72:51:c2:71:84:fa:
         1f:9a:27:c4:1a:76:db:6b:66:51:75:e7:7e:64:a3:1a:85:06:
         f4:fd:52:cf:de:42:fb:9e:59:06:17:68:19:ff:df:46:83:f1:
         d0:32:41:73:de:59:90:2b:08:ee:8d:01:b2:85:b2:19:84:57:
         a0:46:f9:f7
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUFwCF0tnQvINY4v1sbBQKde7CgrYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjMwNTI5MTAxMjIyWhcNMjQwNTI3MTAxNzIy
WjAzMTEwLwYDVQQDEyhCNDQ5RTg1NjhEMzVBMjlENTBBQjIzMzgzNjk2MUNEOTY5
NkIwNDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ItQbiZYJVAr
mN2wy2GK5PXH34HuYqnlP1ePvfrrJRk/17elc8JeWuifsZvD97UP+AawtM2vCS5D
wGnwyeqtvuKIoVTm8T3EbAG1GNPtOXH26jTbJDlEUgbxdVkQnBKmMB5dtr4F481x
yL1NfrYkCx1fzmUzccm9sBw+lGbbzfjl+USNQY/PeDLAB7/ayiPXlpUn1JP9igo+
gLSCsM+9FZR+x+jFV4DEjDMgfnEEhGcptb8b3ZzF7fQCmBy3eEMXJZv8Yr64+L0t
NFYhE9P/tSpu/nqbo8LWWExJOpGqQPNC8mYqJVRG2RCtQqvg5bO7btk88GKX4Qvm
4Frb3gHtswIDAQABo4ICtjCCArIwHQYDVR0OBBYEFLRJ6FaNNaKdUKsjODaWHNlp
awSTMB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzMyMzEzNjJlMzIzNDM3MmUzMTMxMzEyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM0MzczMjM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADY928wDQYJKoZIhvcN
AQELBQADggEBAL+AVq7v8TrXc3rIsYYgT3NLuclyPzGZgymgJYTjXIKrGgZE7hZ+
46V8TGOi0gGhTFKSIkxlqP0YwZswm4cmX3WiXHzOBCRrbYjw9o8r7B6C5LGELNks
6zeCirf6Nrq/WiG0GVCSzK9DrcVpZ6d3ievLDnoC0yiDUhd0BBtn95ZoqslWxENH
WJL5PXny+cfco8Qx9pGMi8vnKEN1k67JAxZiiZ/kr3ywlGV4pSvvOMJimsM90+FJ
iR4Jr8nK57cor3JRwnGE+h+aJ8QadttrZlF1535koxqFBvT9Us/eQvueWQYXaBn/
30aD8dAyQXPeWZArCO6NAbKFshmEV6BG+fc=
-----END CERTIFICATE-----