Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397113.roa
File:                     AS397113.roa (raw, json)
Hash identifier:          aKyHPryEeZmwAFv0Wt/uAUW26+UllZMukr/o/erRZdU=
Subject key identifier:   B6:5B:B1:CC:D0:9B:03:2F:C4:69:18:7F:64:9C:B5:83:73:91:6D:73
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       12207CA4A4A55EAD58DD5164D2EEFA4AD0B8424F
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397113.roa
Signing time:             Wed 18 Jan 2023 17:16:38 +0000
ROA not before:           Wed 18 Jan 2023 17:11:38 +0000
ROA not after:            Wed 17 Jan 2024 17:16:38 +0000
asID:                     397113
IP address blocks:        104.234.232.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:20:7c:a4:a4:a5:5e:ad:58:dd:51:64:d2:ee:fa:4a:d0:b8:42:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 18 17:11:38 2023 GMT
            Not After : Jan 17 17:16:38 2024 GMT
        Subject: CN=B65BB1CCD09B032FC469187F649CB58373916D73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:76:f2:c2:ca:e5:ee:52:0a:86:92:b6:d2:96:
                    55:aa:fd:74:92:7e:9a:15:32:89:b0:fb:f5:0c:6f:
                    b0:fd:11:db:13:5b:5c:d0:5e:b5:7b:bf:b9:65:e9:
                    26:ed:1c:9c:40:a2:2a:d2:ac:b8:cb:fe:32:4c:7e:
                    b7:38:4c:61:b4:df:38:b2:79:29:61:18:92:05:eb:
                    f7:08:94:0c:dd:74:8d:e6:ba:67:cf:1f:e2:7d:2c:
                    00:94:63:17:32:5d:f4:a5:47:da:ed:be:69:72:07:
                    cd:96:94:4b:e5:7d:4d:f8:00:e2:26:a8:5a:4e:18:
                    67:7a:ad:4b:58:a4:6d:93:ce:44:2e:0a:e7:21:cc:
                    c8:54:e8:8f:b7:f9:b6:ca:17:67:9c:56:c4:0e:82:
                    54:25:c3:14:ff:a2:68:ba:54:88:ca:72:28:01:c9:
                    1a:08:a6:38:1b:0b:a3:46:e0:83:30:57:ce:41:95:
                    44:75:05:ec:8c:cd:b6:f4:49:71:d0:aa:fd:f3:87:
                    64:43:80:ad:22:2f:ef:ba:bd:3c:3e:68:28:30:b4:
                    0a:a7:57:5e:a6:f6:a7:a1:de:07:57:78:3c:38:ef:
                    c5:b5:95:f0:a1:ea:79:8c:ce:31:14:c9:7e:fb:bc:
                    00:58:47:3f:ce:c9:a1:45:0d:32:e3:0a:27:d3:43:
                    ac:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5B:B1:CC:D0:9B:03:2F:C4:69:18:7F:64:9C:B5:83:73:91:6D:73
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397113.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:d5:44:e3:2e:4a:e4:fc:0e:ff:f2:18:47:2c:d4:52:c5:da:
         f8:d4:3c:8e:3c:81:e7:da:b8:0e:04:c0:86:7d:a8:dc:d8:b4:
         58:b1:19:dd:f8:0c:d6:4c:21:a4:77:9a:98:33:cc:f2:1b:9b:
         0f:a6:24:a3:d4:ee:46:f8:20:0f:d8:b9:50:80:1a:33:6c:90:
         45:9c:0e:22:b8:12:53:21:eb:80:06:8c:c7:d0:30:55:58:7e:
         2f:47:0d:4c:8c:57:af:13:40:0f:f1:07:65:16:2f:b8:17:eb:
         f9:99:0f:47:80:e1:d4:6b:24:b4:50:a2:1b:f6:e3:41:bb:0c:
         1e:73:6d:8c:4a:a2:48:6f:12:d9:e8:46:9a:1f:72:1d:02:00:
         24:3c:86:97:60:e0:ba:cb:b2:1e:ef:b2:de:b1:7d:d3:eb:3d:
         48:71:a9:bf:69:ac:24:e5:03:27:0e:7d:d5:aa:46:c6:5d:b6:
         7b:5d:18:e5:90:dc:ee:c0:99:da:0c:71:16:a8:a0:a6:d1:a1:
         23:a2:e2:08:70:3b:78:59:57:0a:64:23:70:be:92:14:90:3a:
         65:e4:fe:d0:13:d7:5e:ee:e9:2c:7d:b6:69:ab:7e:ee:c6:95:
         de:81:44:fb:59:1f:a4:be:1a:73:4e:92:d7:43:22:8f:1b:e1:
         e4:3e:7a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----