Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3136372e38382e3134362e302f32342d3234203d3e20383334.roa
File:                     3136372e38382e3134362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          y19w/qG8APG75HNn8K+tTLjrPJKcV/7ZgNGodOABRkU=
Subject key identifier:   7B:F2:73:E2:AC:B0:A3:EE:C3:DF:E6:9D:24:57:C3:F4:68:BC:9B:42
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       239DF1361F46C63F114594C6C1E0FF0548715135
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3136372e38382e3134362e302f32342d3234203d3e20383334.roa
Signing time:             Thu 20 Apr 2023 00:00:15 +0000
ROA not before:           Wed 19 Apr 2023 23:55:15 +0000
ROA not after:            Thu 18 Apr 2024 00:00:15 +0000
asID:                     834
IP address blocks:        167.88.146.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9d:f1:36:1f:46:c6:3f:11:45:94:c6:c1:e0:ff:05:48:71:51:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 19 23:55:15 2023 GMT
            Not After : Apr 18 00:00:15 2024 GMT
        Subject: CN=7BF273E2ACB0A3EEC3DFE69D2457C3F468BC9B42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:33:5f:9a:49:d8:6d:b9:49:98:52:20:8c:
                    8a:03:22:c3:36:7d:c7:9f:76:6e:6d:0b:5e:c6:ea:
                    90:fc:4c:18:28:78:80:53:6f:b1:b3:b0:cd:53:72:
                    c0:88:ad:b7:c4:3f:d8:ac:63:10:c9:ea:4d:8a:f9:
                    d8:ad:aa:46:9a:a8:ee:c9:d9:5b:93:e6:97:54:71:
                    14:1d:03:56:06:fd:ce:ed:a4:46:cd:fd:6e:96:97:
                    c3:c3:fa:34:d4:95:b2:ed:55:74:71:6f:3d:39:86:
                    8d:c2:3b:39:4a:04:0a:65:23:88:41:a2:81:4a:66:
                    a4:ac:21:b5:93:e6:bc:c6:f6:02:02:c7:65:54:d7:
                    60:27:7a:d1:7e:7a:4a:08:d7:eb:df:e6:0e:66:3f:
                    3b:9b:dc:19:79:e1:e9:77:78:44:f9:f9:14:a9:8f:
                    0b:68:ad:5f:de:8c:f1:79:37:f3:c2:42:3b:42:94:
                    cf:e1:d7:44:e7:ae:e5:b9:9e:a8:94:19:d4:af:85:
                    d9:09:64:36:54:cb:31:ec:b8:22:c0:42:55:a9:9b:
                    ae:ba:4d:c7:bf:cd:4e:45:54:84:a1:f3:85:c2:ac:
                    40:69:7c:d8:4c:8f:51:90:1a:55:5a:82:f9:e9:2d:
                    64:f1:54:03:0b:61:3d:eb:a0:d2:dd:e0:b0:31:40:
                    fc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F2:73:E2:AC:B0:A3:EE:C3:DF:E6:9D:24:57:C3:F4:68:BC:9B:42
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3136372e38382e3134362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:69:c8:f9:c3:df:a1:f8:f9:51:ef:73:fa:c9:0e:5a:29:d4:
         7b:bf:e7:5e:48:2a:d1:21:f4:46:37:86:8e:06:f5:38:20:39:
         77:cf:24:5b:53:5a:e5:6c:21:0a:2d:fa:46:66:4d:fb:45:55:
         59:26:43:bb:61:74:97:65:e4:b3:ec:c5:8e:cc:49:a3:1d:56:
         50:41:49:46:e6:74:f0:15:43:98:d6:54:eb:e0:a9:08:32:7e:
         8c:16:bd:39:c3:c9:f6:15:fb:f6:6b:43:41:58:49:18:c7:5e:
         ad:d0:cb:e3:1c:a6:e3:12:ce:89:a6:0d:d4:bf:c7:88:88:62:
         a1:b2:f7:ea:29:85:41:cb:00:6d:77:d1:ab:31:71:a8:d2:b5:
         17:29:41:4b:3d:9d:bd:87:e9:4a:8f:93:75:62:32:d1:5a:23:
         6d:fd:76:b1:4c:a2:5a:f9:1c:a3:4b:30:1c:bf:d2:49:84:de:
         1f:fe:b7:57:a2:9b:d5:40:57:3e:cc:a6:f5:de:13:a0:b9:aa:
         3f:82:f6:6a:a3:74:f5:9e:31:cc:03:0d:9d:5f:b6:bd:12:b3:
         4f:ff:24:34:ef:ae:89:3b:ac:af:04:b3:c0:bc:0f:55:57:eb:
         63:80:1a:d4:d7:da:87:0c:75:e6:10:fc:9a:a4:a7:9a:5c:d5:
         59:34:de:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----