Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3130342e3234352e3231322e302f32342d3234203d3e203631313338.roa
File:                     3130342e3234352e3231322e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          jGGvTeZ7jOj5U79PMCV0fOwk0VV8zlJMntYSQ5+P/R8=
Subject key identifier:   06:8E:F5:2C:C8:CB:8B:E1:44:04:59:D7:43:66:2E:5D:D9:3E:CC:74
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       3587EA016830C9580BB572BA56C80DB81DE92DF6
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3130342e3234352e3231322e302f32342d3234203d3e203631313338.roa
Signing time:             Fri 24 Mar 2023 15:10:14 +0000
ROA not before:           Fri 24 Mar 2023 15:05:14 +0000
ROA not after:            Fri 22 Mar 2024 15:10:14 +0000
asID:                     61138
IP address blocks:        104.245.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:87:ea:01:68:30:c9:58:0b:b5:72:ba:56:c8:0d:b8:1d:e9:2d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Mar 24 15:05:14 2023 GMT
            Not After : Mar 22 15:10:14 2024 GMT
        Subject: CN=068EF52CC8CB8BE1440459D743662E5DD93ECC74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:32:c0:06:79:47:a9:0e:bd:c0:02:83:d7:f5:
                    4d:b8:86:ac:9f:51:aa:6d:91:51:81:d3:43:58:e5:
                    ea:e6:ba:fb:1d:20:c7:6e:b5:67:37:be:c6:e1:ab:
                    c5:2e:b2:83:c3:27:c3:d1:e4:52:6a:d9:02:48:2b:
                    7f:db:58:6e:85:89:f9:2c:1c:3f:f4:dd:83:ef:7c:
                    8f:69:76:37:3d:b8:f0:84:79:7b:36:4e:2d:ad:af:
                    13:66:03:49:15:6f:b1:b6:e4:c7:20:0a:98:d9:0a:
                    80:07:33:a2:20:2f:8a:67:df:2b:3c:8d:e4:11:19:
                    d3:0b:03:8d:46:7d:8e:f9:8d:fb:9d:e0:06:37:dc:
                    46:2e:f7:de:a6:2b:30:7a:05:36:b4:f2:02:ac:ea:
                    95:94:21:4e:ee:e8:95:40:16:80:f0:82:dd:bd:30:
                    10:36:b0:b9:73:84:b6:ec:6a:85:66:16:8d:d6:3a:
                    71:55:4f:b4:b1:67:a4:be:96:d4:3f:9f:2a:6e:86:
                    ef:59:0f:37:b6:60:5c:97:02:71:4c:49:d6:d7:54:
                    1b:ec:b2:f0:55:4c:41:a8:76:86:45:c1:ad:db:40:
                    83:75:01:a7:a4:13:6b:6a:d2:14:00:6e:f8:84:cf:
                    1b:6e:01:98:4d:d1:0d:18:e4:a6:b1:ee:11:7a:be:
                    8f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8E:F5:2C:C8:CB:8B:E1:44:04:59:D7:43:66:2E:5D:D9:3E:CC:74
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3130342e3234352e3231322e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:ee:fd:86:f3:9c:54:fe:32:63:9e:89:21:9e:c0:eb:5b:8b:
         03:28:21:6c:17:92:eb:82:05:dc:52:7e:9b:a0:ff:af:e7:06:
         8f:3f:72:3a:cf:9c:50:0b:55:3f:0d:a5:20:22:30:3c:f1:7c:
         60:c4:1f:e3:49:66:5c:a9:c7:f5:36:5d:af:1f:d0:f5:4b:0d:
         89:f3:c0:66:8a:ec:81:9f:a7:12:55:ea:7b:01:12:1e:60:6d:
         d7:c4:a3:e9:a1:58:ce:c0:43:21:d9:92:1e:c8:57:3d:f7:e1:
         11:8c:61:19:44:da:26:7c:5c:05:b1:d2:ea:36:51:ba:5b:0a:
         43:01:e0:69:5a:20:8c:f4:c3:02:4f:28:a3:4a:1d:65:c3:07:
         36:3e:a9:83:f8:11:3a:23:82:4d:70:b2:5b:83:31:37:a1:bc:
         f2:c7:b3:b8:b2:55:81:bd:c3:7c:97:5d:3d:16:b5:15:1a:4b:
         f7:c4:5d:00:eb:b5:be:89:18:65:46:a5:25:f0:94:5a:5e:95:
         03:6a:3d:95:0c:b6:94:93:ec:3e:b9:18:ba:56:94:ab:9f:ae:
         69:c5:55:5e:fa:ef:c0:21:b1:5e:4e:66:86:6c:22:af:ca:f9:
         64:45:18:dc:d8:d6:44:20:9b:45:6e:9e:da:d8:6e:f6:f8:b2:
         80:a4:90:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----