Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS210439.roa
File:                     AS210439.roa (raw, json)
Hash identifier:          XkZIvMdon9TSFflUFSER9J//dCpDx9F/nozO38tUZxg=
Subject key identifier:   5F:B5:30:5C:27:31:39:96:4A:48:79:6C:5D:A7:96:96:D8:F7:D6:06
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       38C2AD6452B3DD2FED5F893FAEACFCB477A59DE4
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS210439.roa
Signing time:             Mon 30 Jan 2023 12:11:54 +0000
ROA not before:           Mon 30 Jan 2023 12:06:54 +0000
ROA not after:            Mon 29 Jan 2024 12:11:54 +0000
asID:                     210439
IP address blocks:        98.142.248.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c2:ad:64:52:b3:dd:2f:ed:5f:89:3f:ae:ac:fc:b4:77:a5:9d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 30 12:06:54 2023 GMT
            Not After : Jan 29 12:11:54 2024 GMT
        Subject: CN=5FB5305C273139964A48796C5DA79696D8F7D606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:59:8d:b5:b2:39:31:7d:3b:c7:a8:df:1a:aa:
                    48:2f:17:63:6e:52:b5:1a:74:4c:2e:0d:c9:0c:a7:
                    5c:6c:82:6a:2c:31:26:9c:50:41:0b:ec:dc:38:45:
                    3a:51:a7:c2:f2:f9:83:0a:e7:6d:5d:c1:2d:45:8e:
                    6f:7a:04:83:88:00:ab:94:13:1d:59:e6:da:8b:05:
                    2d:2c:a3:02:94:9a:f7:4f:f0:fe:d7:b0:2e:de:b7:
                    e5:25:b3:32:be:1c:bc:88:d3:bf:53:cc:cf:98:7a:
                    1a:c9:80:6f:a3:94:6f:80:57:08:a7:ec:bf:3c:fe:
                    17:6b:65:82:f3:6b:3c:38:60:73:62:d9:47:6c:3b:
                    3c:66:75:8e:5d:2b:30:14:39:3e:64:09:95:41:dd:
                    8c:80:10:83:ee:fa:af:d0:b7:80:04:df:42:5e:db:
                    19:32:b9:83:70:d8:3c:c7:91:17:e2:a1:47:53:17:
                    d3:3d:66:8c:0e:49:80:aa:0a:01:d1:84:5f:8e:23:
                    18:93:69:38:f4:ac:8e:c9:bd:74:c8:0c:e7:15:d9:
                    59:ab:d6:c9:6c:09:ef:3f:28:19:a0:a6:c6:c6:ef:
                    3c:3b:69:d4:36:e7:95:8c:b5:26:01:31:ba:de:0d:
                    3f:7a:dd:81:0c:94:c2:f2:86:de:2a:1e:65:57:22:
                    a4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B5:30:5C:27:31:39:96:4A:48:79:6C:5D:A7:96:96:D8:F7:D6:06
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS210439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:a9:cf:12:3d:0f:2e:46:f1:dc:e3:78:93:73:0e:05:c6:f9:
         07:ee:28:e9:4a:03:ca:5b:4a:4b:a8:a5:06:71:85:17:1f:69:
         bd:1c:4c:ae:70:46:f2:94:9c:59:c5:c1:66:d8:51:65:d7:e8:
         1a:a3:82:41:5f:19:05:5c:63:11:12:b6:6f:0b:f9:49:17:c4:
         a0:1c:cc:c4:2b:fb:6e:3a:1b:1a:d8:14:e5:b2:a0:2c:b7:2d:
         db:3a:fc:8d:13:28:4e:08:10:eb:0a:5b:33:26:df:e1:c0:fd:
         f2:4a:a4:e5:95:3f:17:63:42:1b:58:d4:c3:c0:12:88:11:6d:
         35:61:b1:fe:eb:40:a0:02:66:18:71:0c:58:6c:00:13:68:56:
         72:cd:6e:ab:36:a2:99:2c:89:e9:4f:9b:2c:f4:7c:07:fb:fc:
         b8:e9:4c:5e:9f:86:e1:a8:1e:4c:fb:31:ad:a2:3b:60:66:3b:
         3e:e4:d9:55:4b:df:39:56:0f:7f:ba:9d:6b:f3:94:2c:47:0c:
         54:6b:f9:90:0a:ff:c8:8c:a5:71:ef:39:36:f4:63:c1:37:9c:
         f5:af:3c:73:20:e9:89:a5:28:14:19:21:29:64:1d:6e:cd:ed:
         3c:43:36:bf:96:77:18:2a:39:09:42:29:c0:b5:f6:25:58:46:
         39:3b:e5:89
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUOMKtZFKz3S/tX4k/rqz8tHelneQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjMwMTMwMTIwNjU0WhcNMjQwMTI5MTIxMTU0
WjAzMTEwLwYDVQQDEyg1RkI1MzA1QzI3MzEzOTk2NEE0ODc5NkM1REE3OTY5NkQ4
RjdENjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VmNtbI5MX07
x6jfGqpILxdjblK1GnRMLg3JDKdcbIJqLDEmnFBBC+zcOEU6UafC8vmDCudtXcEt
RY5vegSDiACrlBMdWebaiwUtLKMClJr3T/D+17Au3rflJbMyvhy8iNO/U8zPmHoa
yYBvo5RvgFcIp+y/PP4Xa2WC82s8OGBzYtlHbDs8ZnWOXSswFDk+ZAmVQd2MgBCD
7vqv0LeABN9CXtsZMrmDcNg8x5EX4qFHUxfTPWaMDkmAqgoB0YRfjiMYk2k49KyO
yb10yAznFdlZq9bJbAnvPygZoKbGxu88O2nUNueVjLUmATG63g0/et2BDJTC8obe
Kh5lVyKkTwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFF+1MFwnMTmWSkh5bF2nlpbY
99YGMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzIxMDQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGKO+DANBgkqhkiG9w0BAQsFAAOC
AQEAB6nPEj0PLkbx3ON4k3MOBcb5B+4o6UoDyltKS6ilBnGFFx9pvRxMrnBG8pSc
WcXBZthRZdfoGqOCQV8ZBVxjERK2bwv5SRfEoBzMxCv7bjobGtgU5bKgLLct2zr8
jRMoTggQ6wpbMybf4cD98kqk5ZU/F2NCG1jUw8ASiBFtNWGx/utAoAJmGHEMWGwA
E2hWcs1uqzaimSyJ6U+bLPR8B/v8uOlMXp+G4ageTPsxraI7YGY7PuTZVUvfOVYP
f7qda/OULEcMVGv5kAr/yIylce85NvRjwTec9a88cyDpiaUoFBkhKWQdbs3tPEM2
v5Z3GCo5CUIpwLX2JVhGOTvliQ==
-----END CERTIFICATE-----