Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3130342e3234352e3231332e302f32342d3234203d3e20383334.roa
File:                     3130342e3234352e3231332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          tdj/17gZ19Vl+C6Spk0q6UDGax5xqjq0CZtKAPI7o2g=
Subject key identifier:   52:12:8C:A9:A7:86:C7:71:79:B1:99:E2:74:3C:3B:32:38:68:BF:7F
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       40345D5FC06089C542E41D1B30D4C916B2B43FBA
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3130342e3234352e3231332e302f32342d3234203d3e20383334.roa
Signing time:             Sun 16 Apr 2023 00:00:16 +0000
ROA not before:           Sat 15 Apr 2023 23:55:16 +0000
ROA not after:            Sun 14 Apr 2024 00:00:16 +0000
asID:                     834
IP address blocks:        104.245.213.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:34:5d:5f:c0:60:89:c5:42:e4:1d:1b:30:d4:c9:16:b2:b4:3f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 15 23:55:16 2023 GMT
            Not After : Apr 14 00:00:16 2024 GMT
        Subject: CN=52128CA9A786C77179B199E2743C3B323868BF7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:ab:55:76:84:f7:f7:9f:a1:d8:48:4a:25:
                    7d:25:b5:5b:36:11:61:c1:ae:57:0c:b0:47:5e:92:
                    7a:98:42:63:8f:bd:f4:6b:fd:2a:50:ae:0c:99:30:
                    14:92:03:a9:71:cf:7f:91:0a:36:99:26:89:70:ef:
                    0d:f3:e9:a9:d1:6c:ba:10:75:45:e0:46:a3:26:5a:
                    22:75:32:25:18:7f:d3:09:16:b6:4a:0a:c7:a7:d1:
                    a5:2f:3a:db:54:b2:8c:fc:f1:b2:21:b4:82:26:b8:
                    24:e7:40:52:dd:c6:71:ef:ca:d3:95:bb:a6:93:4f:
                    b1:31:e5:4c:ea:cb:56:9d:70:a5:ad:12:9a:38:31:
                    da:a7:1b:44:93:ea:18:c0:68:f5:f7:5a:6f:a5:19:
                    3d:b7:99:27:85:ab:af:49:2b:67:c6:b4:f5:87:fa:
                    df:f7:e5:7d:5f:84:2f:29:58:1c:06:e1:98:bc:2f:
                    00:a0:99:c8:33:79:05:1e:cb:0a:b8:a8:27:c3:c6:
                    b8:15:f2:5e:06:85:93:ea:07:6e:b4:7f:8f:7b:25:
                    be:3b:4b:32:30:98:34:f7:0e:ef:7c:48:08:40:cf:
                    7c:f4:c7:47:c7:48:8c:b0:8a:bf:ea:3f:27:00:b5:
                    d2:b1:98:75:3a:99:4f:3b:e2:53:ed:f9:dc:fb:6e:
                    c0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:12:8C:A9:A7:86:C7:71:79:B1:99:E2:74:3C:3B:32:38:68:BF:7F
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3130342e3234352e3231332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:58:81:e9:e1:4c:6f:01:bd:0e:c9:88:57:dc:19:dd:69:75:
         4d:37:3d:45:cf:b1:20:e6:e9:b8:f9:f7:e0:a2:69:d5:fd:db:
         b1:a5:81:fe:fd:a0:d1:39:5c:b7:8e:3f:70:59:25:22:16:c4:
         18:1d:a9:55:ad:b8:64:5e:fb:bf:77:1d:c9:57:9c:ba:ec:56:
         16:5c:f9:25:97:7d:f7:28:2b:70:ef:6e:df:4e:bc:23:54:6d:
         35:01:9d:e3:84:cd:fc:ca:18:e4:88:9e:c4:c6:71:99:0f:37:
         af:5e:0c:34:f5:03:41:ab:c3:26:4a:ad:70:90:1a:d7:93:c1:
         a8:37:0f:07:f5:cc:f4:9b:27:8d:d4:d4:39:dd:ea:44:1d:5a:
         5b:71:80:9b:a9:09:ae:25:40:b3:b9:9a:9d:94:9f:a7:21:7b:
         05:e6:0b:1b:2c:5a:e3:d4:ce:2d:39:96:bd:63:2b:04:50:65:
         b6:3c:4a:b7:83:16:36:24:a0:12:c4:39:9b:b3:43:62:b8:cf:
         6c:b9:de:1a:89:8e:28:6c:5f:c8:f2:21:d9:ee:0a:2b:e9:f1:
         2d:18:74:b0:eb:eb:ad:d8:d8:2d:73:b1:31:4a:e7:a2:d8:79:
         50:34:9c:45:7b:aa:6a:f4:94:f5:0a:ae:02:cf:79:14:bb:73:
         99:37:b1:12
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUQDRdX8BgicVC5B0bMNTJFrK0P7owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNDE1MjM1NTE2WhcNMjQwNDE0MDAwMDE2
WjAzMTEwLwYDVQQDEyg1MjEyOENBOUE3ODZDNzcxNzlCMTk5RTI3NDNDM0IzMjM4
NjhCRjdGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5CrVXaE9/ef
odhISiV9JbVbNhFhwa5XDLBHXpJ6mEJjj730a/0qUK4MmTAUkgOpcc9/kQo2mSaJ
cO8N8+mp0Wy6EHVF4EajJloidTIlGH/TCRa2SgrHp9GlLzrbVLKM/PGyIbSCJrgk
50BS3cZx78rTlbumk0+xMeVM6stWnXClrRKaODHapxtEk+oYwGj191pvpRk9t5kn
hauvSStnxrT1h/rf9+V9X4QvKVgcBuGYvC8AoJnIM3kFHssKuKgnw8a4FfJeBoWT
6gdutH+PeyW+O0syMJg09w7vfEgIQM989MdHx0iMsIq/6j8nALXSsZh1OplPO+JT
7fnc+27AtQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFFISjKmnhsdxebGZ4nQ8OzI4
aL9/MB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzMxMzAzNDJlMzIzNDM1MmUzMjMxMzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABo9dUwDQYJKoZIhvcNAQELBQAD
ggEBAB5YgenhTG8BvQ7JiFfcGd1pdU03PUXPsSDm6bj59+CiadX927Glgf79oNE5
XLeOP3BZJSIWxBgdqVWtuGRe+793HclXnLrsVhZc+SWXffcoK3Dvbt9OvCNUbTUB
neOEzfzKGOSInsTGcZkPN69eDDT1A0GrwyZKrXCQGteTwag3Dwf1zPSbJ43U1Dnd
6kQdWltxgJupCa4lQLO5mp2Un6chewXmCxssWuPUzi05lr1jKwRQZbY8SreDFjYk
oBLEOZuzQ2K4z2y53hqJjihsX8jyIdnuCivp8S0YdLDr663Y2C1zsTFK56LYeVA0
nEV7qmr0lPUKrgLPeRS7c5k3sRI=
-----END CERTIFICATE-----