Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS210546.roa
File:                     AS210546.roa (raw, json)
Hash identifier:          OGRCbb4HEz1oQMXjOJMaQKV98MF8ZkLxFR1uqFm3x30=
Subject key identifier:   0B:76:92:ED:7C:9D:10:BE:7B:58:B2:7D:A5:86:AC:29:68:9B:FE:E3
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       711406B9B620651E72554FE73C1026B71B96B907
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS210546.roa
Signing time:             Wed 18 Jan 2023 17:16:41 +0000
ROA not before:           Wed 18 Jan 2023 17:11:41 +0000
ROA not after:            Wed 17 Jan 2024 17:16:41 +0000
asID:                     210546
IP address blocks:        206.53.53.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:14:06:b9:b6:20:65:1e:72:55:4f:e7:3c:10:26:b7:1b:96:b9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 18 17:11:41 2023 GMT
            Not After : Jan 17 17:16:41 2024 GMT
        Subject: CN=0B7692ED7C9D10BE7B58B27DA586AC29689BFEE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:2e:79:87:ae:4b:5b:c8:25:e2:16:f3:9f:
                    1c:43:46:01:53:ce:32:d1:e4:d7:81:93:1d:a9:b5:
                    ba:d6:91:cd:7f:06:51:53:7f:85:4e:83:a7:6f:72:
                    f0:24:4d:03:54:37:80:91:20:ee:db:1a:a4:c0:92:
                    b0:f0:cf:74:a8:14:56:96:db:78:7c:6c:e5:5f:32:
                    ca:b3:a8:79:09:f0:87:64:ac:1b:ac:39:1e:02:44:
                    c4:9c:62:28:3c:96:0a:9c:41:e4:e6:31:5e:ea:59:
                    7a:e2:9d:29:4f:b7:1f:26:dd:af:8c:72:ee:4f:40:
                    1e:ef:2d:06:ed:28:e1:02:f2:0a:02:ab:57:e0:71:
                    0a:52:28:6c:98:29:7c:53:79:e9:ce:01:8d:31:25:
                    c5:1c:3f:69:6b:b7:b7:6f:64:40:d4:11:bd:bc:c7:
                    c0:57:3c:19:c1:da:db:d1:73:8d:ac:66:a8:5e:fb:
                    97:6f:3f:23:18:f2:67:55:a1:5c:26:3c:ff:4e:02:
                    18:38:ba:28:8e:49:95:dc:e4:b7:a8:73:ea:94:d2:
                    0e:f2:95:77:51:43:e2:3c:31:c7:d2:27:b3:13:8c:
                    68:28:fc:ed:cd:04:69:d1:40:e9:5f:45:97:2a:50:
                    36:4d:14:3f:e0:fb:ba:f8:b9:90:42:61:07:b7:89:
                    3c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:76:92:ED:7C:9D:10:BE:7B:58:B2:7D:A5:86:AC:29:68:9B:FE:E3
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS210546.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:6d:da:e3:63:45:25:1c:c4:dd:55:7f:1b:a0:f3:13:bc:a0:
         69:9d:28:9c:f8:28:18:90:43:68:9b:bf:da:28:50:93:e6:2c:
         f7:74:98:27:3f:39:e1:9d:6f:3e:c0:79:4f:84:79:16:41:1f:
         6f:7f:ab:4a:22:d0:54:73:a1:be:4c:cf:fa:5c:84:99:43:b4:
         aa:63:1b:90:e6:4f:8a:62:35:32:ca:12:46:ba:60:85:ae:71:
         21:89:d6:03:66:18:05:2e:fe:34:11:ed:b5:3f:29:b8:60:8e:
         77:42:33:b4:89:24:aa:24:e2:90:03:53:cd:9a:e8:b4:57:77:
         b1:6a:23:07:33:6a:a2:e9:62:53:4d:d9:80:3e:61:fc:5b:39:
         b2:1b:27:c4:c0:99:2a:60:47:e8:33:52:13:b7:11:b2:cb:af:
         97:6b:0d:a0:75:a9:c8:13:32:88:7f:da:97:fe:96:28:fa:91:
         e2:a3:7d:49:07:f3:6f:1f:22:8b:b4:85:8b:55:91:b1:06:0c:
         7b:59:36:17:6e:ed:e2:7b:30:bb:3f:69:dc:e7:16:ef:93:4c:
         9c:bb:78:d3:b3:7d:33:31:ef:d3:a5:b2:35:f3:52:c9:1a:5c:
         84:30:cd:9b:f2:cd:2c:2b:d3:6d:74:74:d3:65:33:94:12:45:
         5b:68:e3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----