Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS133973.roa
File:                     AS133973.roa (raw, json)
Hash identifier:          UY1+H7YF6BGAzECfTAbUGeWlAXUuDACQcS9vBTHP1ks=
Subject key identifier:   19:14:89:E7:6D:00:85:BD:8F:25:35:72:4F:E1:12:6B:B4:F2:E3:28
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       0F5C398D5CC45F3BF36AD984E712D49E295B81B5
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS133973.roa
Signing time:             Wed 29 Mar 2023 06:39:15 +0000
ROA not before:           Wed 29 Mar 2023 06:34:15 +0000
ROA not after:            Wed 27 Mar 2024 06:39:15 +0000
asID:                     133973
IP address blocks:        104.234.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5c:39:8d:5c:c4:5f:3b:f3:6a:d9:84:e7:12:d4:9e:29:5b:81:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Mar 29 06:34:15 2023 GMT
            Not After : Mar 27 06:39:15 2024 GMT
        Subject: CN=191489E76D0085BD8F2535724FE1126BB4F2E328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d1:c0:81:bd:4e:77:1f:7a:b3:40:0e:a6:29:
                    89:fb:c6:2e:bf:71:5b:43:e5:da:45:13:ab:c1:66:
                    a5:88:6e:5e:f4:04:af:0f:c1:2c:a3:1e:89:30:1c:
                    f8:23:c6:a6:03:74:d1:46:a1:37:fd:a5:3c:ef:d5:
                    5f:a1:d9:58:6c:8c:c1:ca:50:ee:51:7f:f5:b0:c6:
                    23:bf:4f:f7:56:27:05:96:45:51:df:07:b9:33:c5:
                    a0:a4:d5:c4:fd:aa:81:4b:d7:43:f9:dd:22:e4:3e:
                    db:b6:44:7a:af:ec:3e:14:04:c9:e3:71:0d:37:ff:
                    69:8f:d8:dc:cd:5a:81:b6:5e:3f:0c:ad:db:fb:2d:
                    38:77:7c:a4:77:64:ef:d7:f9:27:77:da:d9:2b:49:
                    06:d6:7b:3c:98:f2:59:af:7b:60:bd:95:52:29:c2:
                    a1:04:a0:76:5b:ba:04:5b:40:07:02:b7:78:b5:c3:
                    5d:b3:27:28:9a:f8:e0:ae:bf:42:4d:44:49:d5:aa:
                    1b:61:97:b8:1a:a8:ab:11:2a:7f:12:08:3b:32:17:
                    ba:e1:b4:bf:7e:a6:a6:d9:bb:6a:fd:82:43:b7:4d:
                    22:0c:a6:a3:1e:51:ff:25:4e:78:0e:15:28:c6:f6:
                    39:c4:55:51:7b:14:f5:10:e0:e0:67:63:47:b9:13:
                    18:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:14:89:E7:6D:00:85:BD:8F:25:35:72:4F:E1:12:6B:B4:F2:E3:28
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS133973.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:d4:82:a5:9c:9d:6a:92:78:1b:86:7a:c3:ad:67:fe:11:72:
         ae:c9:0e:3f:d5:5a:95:60:b0:e5:6a:7f:bf:ef:3c:d6:34:7f:
         68:25:ad:51:56:8c:17:aa:fc:2e:88:9d:93:fa:f5:da:b6:aa:
         bd:90:03:9e:1e:a7:57:e7:22:bd:f4:38:14:5b:c1:c2:11:01:
         cc:1d:42:09:2d:cf:9b:04:f8:63:1c:db:fe:1b:23:b3:48:39:
         44:1c:90:f3:c3:b9:9e:a2:d1:4f:90:a5:51:e0:0a:9d:ce:cc:
         e7:3b:39:24:e6:5c:58:89:31:8a:bf:74:bb:ab:9c:a9:04:6b:
         3f:74:2a:5a:07:b6:c4:8a:da:03:16:50:d9:93:a6:de:57:24:
         85:ea:32:b5:80:f8:28:91:18:7e:63:6e:5a:52:80:78:27:5b:
         17:3b:05:0c:e9:55:76:15:7d:e3:8b:f3:1f:2b:07:05:5d:78:
         67:a7:c7:6e:5b:f1:f4:fc:54:3f:4b:2c:ad:96:9f:b9:60:5a:
         e3:01:36:cb:e4:ce:0b:a3:f8:37:fa:a7:dd:e8:48:81:eb:ea:
         dc:5f:d3:c3:6d:8f:b7:fe:8e:31:e5:a7:19:17:6b:f3:e3:9e:
         d9:d2:86:b0:a7:d1:e6:b5:fd:97:56:14:86:83:1c:e0:de:de:
         a4:a6:a4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----