Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3130342e3234352e3231332e302f32342d3234203d3e20323030343832.roa
File:                     3130342e3234352e3231332e302f32342d3234203d3e20323030343832.roa (raw, json)
Hash identifier:          a78Tef9HETZzZodUCgadFb5F35O/lBEuPa1Id+svXKw=
Subject key identifier:   31:8C:91:FB:6B:1A:4B:68:40:66:D6:E7:3F:85:9F:56:76:C9:0D:39
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       4EDF8015EB6D810CAC5D00183E461FBE66FAB8D9
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3130342e3234352e3231332e302f32342d3234203d3e20323030343832.roa
Signing time:             Tue 18 Apr 2023 16:08:37 +0000
ROA not before:           Tue 18 Apr 2023 16:03:37 +0000
ROA not after:            Tue 16 Apr 2024 16:08:37 +0000
asID:                     200482
IP address blocks:        104.245.213.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:df:80:15:eb:6d:81:0c:ac:5d:00:18:3e:46:1f:be:66:fa:b8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 18 16:03:37 2023 GMT
            Not After : Apr 16 16:08:37 2024 GMT
        Subject: CN=318C91FB6B1A4B684066D6E73F859F5676C90D39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c7:c5:8d:12:f3:cf:44:8f:9c:d8:b3:35:f6:
                    ff:83:91:9f:76:60:6f:17:97:16:c0:50:26:a0:cd:
                    5a:f3:51:e5:b7:5c:ed:c7:01:bb:31:c1:b9:80:ce:
                    6c:6d:c8:e9:f2:d6:33:47:70:42:1c:2e:9a:2e:d5:
                    dd:6f:c4:06:16:2e:a5:c9:14:5e:35:e0:75:6c:b7:
                    61:57:75:74:ec:da:7a:f6:37:d9:5c:16:f7:8a:a8:
                    1d:25:a3:cf:45:65:f4:c5:a7:76:1c:c9:a2:4d:c7:
                    86:a5:57:88:42:d0:d8:5a:89:46:21:ac:33:21:54:
                    85:25:d5:f6:06:f5:8c:f7:35:eb:ad:a0:b8:60:d9:
                    2f:a2:53:ee:d9:89:f0:2a:20:71:42:f1:7e:57:b0:
                    47:7c:b1:90:c5:c9:63:b4:6b:82:f3:37:6e:16:5a:
                    1c:26:cc:53:88:4e:57:d0:d1:6e:3d:5d:b9:e6:6f:
                    80:fb:84:c6:a1:14:98:c3:77:69:71:95:af:35:7d:
                    1e:80:1c:b0:93:31:73:d6:c5:c7:bc:be:9e:92:35:
                    9e:a7:e5:6f:e6:76:56:c3:80:95:3f:96:0e:49:3a:
                    c8:bb:6c:94:7b:f9:14:cb:b5:46:39:1c:41:f9:ae:
                    95:e9:d3:90:e2:48:93:35:63:94:b5:7b:8a:b1:2e:
                    68:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8C:91:FB:6B:1A:4B:68:40:66:D6:E7:3F:85:9F:56:76:C9:0D:39
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3130342e3234352e3231332e302f32342d3234203d3e20323030343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:f1:45:38:03:20:53:8a:b0:09:e0:09:16:9c:02:fc:51:ba:
         ac:17:99:87:93:d1:37:0f:8e:33:05:20:76:c0:4b:d5:48:d3:
         fc:77:8d:e9:26:f6:c4:69:df:d7:b6:8a:e0:93:f2:d0:b7:0a:
         b2:a9:eb:57:0b:6d:21:db:0a:9c:4a:45:b1:e0:5b:f9:2e:3a:
         bf:97:3a:be:79:6a:b3:0d:23:32:ba:bc:1e:78:fc:2e:71:7d:
         c9:25:53:05:4b:a9:d3:54:16:15:df:1b:9f:f4:b7:de:2c:0f:
         2a:34:c8:de:4a:11:e2:ed:81:0d:25:74:8c:df:54:e7:50:5e:
         b8:ca:5d:e8:2b:a0:23:0c:21:86:64:0a:92:51:be:93:02:58:
         99:65:7c:5a:a0:f8:91:c2:38:13:8a:c8:e5:79:17:ab:8f:58:
         ac:a8:81:61:56:67:66:0d:f3:d6:ef:de:04:02:35:b2:fc:76:
         58:19:4e:28:fd:e2:a2:19:dc:fc:c1:41:b6:01:1d:e1:10:4d:
         57:a3:95:48:47:b6:ef:9d:72:58:53:c9:c3:13:e4:c8:91:97:
         d6:e2:fa:e0:f9:64:da:21:ff:cb:b5:90:ae:b9:93:f8:6a:ab:
         9d:08:8c:d5:58:0d:c9:11:55:8e:93:8d:29:a7:d3:92:16:47:
         3a:cf:8a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----