Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS203758.roa
File:                     AS203758.roa (raw, json)
Hash identifier:          bsRHFQmpfH1SyulghhqZ3gT5oUMwbItb2Bqr3YK91xs=
Subject key identifier:   04:A8:50:2F:FF:D8:F0:FD:EE:E7:01:42:C1:DA:0E:9F:0E:2B:7C:8F
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       29DE5E3E315491DC15A87DB2D296DA792C9D3FE2
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS203758.roa
Signing time:             Sat 29 Apr 2023 11:47:57 +0000
ROA not before:           Sat 29 Apr 2023 11:42:57 +0000
ROA not after:            Sat 27 Apr 2024 11:47:57 +0000
asID:                     203758
IP address blocks:        206.53.57.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:de:5e:3e:31:54:91:dc:15:a8:7d:b2:d2:96:da:79:2c:9d:3f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr 29 11:42:57 2023 GMT
            Not After : Apr 27 11:47:57 2024 GMT
        Subject: CN=04A8502FFFD8F0FDEEE70142C1DA0E9F0E2B7C8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7c:2e:39:25:4d:e5:17:06:ac:5c:2d:b1:fb:
                    64:08:30:ba:92:df:40:2f:f1:5e:b0:7b:9b:13:9d:
                    e2:43:e2:ed:b7:2d:7b:f9:99:81:d1:86:2e:55:b9:
                    a2:82:6d:6b:d3:1a:03:00:4e:da:fd:0b:b2:f1:8a:
                    66:d8:12:d0:41:1e:df:62:ed:5c:14:72:24:e5:4e:
                    66:01:9c:eb:97:7d:ed:c0:c6:0f:ad:2f:c9:1b:91:
                    84:c9:c2:6c:03:9f:5c:15:70:7e:4f:c2:2e:e3:07:
                    55:63:d6:61:17:43:9b:8e:35:c9:f2:38:f3:0d:cb:
                    d5:d4:98:57:0d:00:d8:cf:6d:f6:1c:d0:d6:d4:02:
                    6f:77:a7:4b:04:9d:e0:cf:ca:2b:bf:7a:e4:cd:98:
                    2f:36:53:1f:5d:31:4a:08:c5:b7:c0:e7:98:b0:d1:
                    53:31:6b:6a:1d:3e:94:e5:be:5a:71:a9:b6:eb:6b:
                    70:20:fd:2c:e5:aa:91:94:d3:7f:ef:5d:7c:b5:de:
                    d6:63:27:56:67:bb:a0:3b:50:43:cd:91:80:f9:09:
                    62:9c:5e:01:f2:16:71:e4:64:69:cd:5e:67:54:56:
                    5c:aa:4e:20:0b:df:6e:13:32:3d:ce:2c:5f:5b:8f:
                    fe:4f:2b:fc:3a:b1:b3:36:84:06:7b:93:b4:03:52:
                    fd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A8:50:2F:FF:D8:F0:FD:EE:E7:01:42:C1:DA:0E:9F:0E:2B:7C:8F
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS203758.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:21:67:eb:3e:75:f5:a6:c5:31:6e:39:f0:04:4a:3e:70:cc:
         4f:fc:d4:f9:6a:a4:e4:25:25:ee:86:88:1c:dd:ae:a3:86:be:
         91:d5:41:49:b1:bb:fe:e0:2b:d9:ce:de:c2:6a:d8:85:06:b5:
         02:25:7f:64:09:a1:ab:0a:19:e7:07:09:e9:91:d3:21:fa:73:
         d7:18:80:45:45:1c:8d:77:3a:fe:e6:49:5f:a7:76:21:13:8b:
         bc:c3:c5:56:ba:e6:0b:ca:43:c2:c2:be:5d:20:09:5f:88:1f:
         81:5d:8b:a9:f0:8d:03:75:82:db:a6:fc:9f:c7:82:99:58:a8:
         61:db:ac:d2:f7:bf:f7:a0:c0:66:fc:1e:e0:f6:14:b1:f3:15:
         23:1f:5c:81:bc:0f:3c:43:e9:d2:d3:ed:b9:3f:25:c9:8b:29:
         2f:6e:de:64:04:47:10:36:ec:41:e2:54:49:65:03:6b:77:9f:
         f0:d4:04:34:1d:53:1d:c3:97:c3:5c:eb:9f:cc:cf:99:dc:4b:
         17:77:7f:d1:9f:4b:9d:d3:c9:ca:01:fa:42:87:9b:87:42:37:
         8d:4e:6f:c6:86:1e:f6:8b:39:c9:90:b2:ef:f0:ff:8a:eb:2f:
         92:5d:b2:fb:09:d8:c7:7e:d0:76:fd:ac:64:89:6d:a6:1d:12:
         83:e7:c0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----