Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3134372e302f32342d3234203d3e20313938363532.roa
File:                     3230342e39332e3134372e302f32342d3234203d3e20313938363532.roa (raw, json)
Hash identifier:          Dc6esob/g6H0vqlA3oCy9o/Ok+KFD8ybbecUTd6LGKo=
Subject key identifier:   88:2F:EB:F6:96:92:D3:29:3D:C0:D2:F8:A1:3F:5A:D0:B5:6D:15:6C
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       21F664A0F6DA3BB3320F3CA102BCD79A83580946
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3134372e302f32342d3234203d3e20313938363532.roa
Signing time:             Tue 16 May 2023 16:38:13 +0000
ROA not before:           Tue 16 May 2023 16:33:13 +0000
ROA not after:            Tue 14 May 2024 16:38:13 +0000
asID:                     198652
IP address blocks:        204.93.147.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f6:64:a0:f6:da:3b:b3:32:0f:3c:a1:02:bc:d7:9a:83:58:09:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 16 16:33:13 2023 GMT
            Not After : May 14 16:38:13 2024 GMT
        Subject: CN=882FEBF69692D3293DC0D2F8A13F5AD0B56D156C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:84:1b:c8:a3:d2:45:19:37:ef:e6:4d:6f:cd:
                    f3:1e:ff:0f:ed:40:ef:43:2f:6f:05:bc:3a:d1:3f:
                    7a:b3:86:52:2e:53:35:1a:19:16:b2:b2:c8:fb:dc:
                    4a:3f:55:20:69:98:82:37:7e:c3:17:3b:8a:4f:5a:
                    7a:f6:b1:2b:29:d7:f2:01:e3:00:91:80:39:40:dd:
                    a3:4d:d5:11:9d:ef:2d:08:8c:1b:33:a2:8b:f3:77:
                    42:13:a3:7f:22:8e:b5:3e:69:15:ae:ec:7a:a1:42:
                    4a:e9:49:e3:b4:ee:0f:f1:0b:8c:31:6d:33:a4:f8:
                    81:ea:68:21:28:84:3b:c8:9e:28:5c:eb:c3:c9:b3:
                    09:f6:85:48:44:8e:94:f6:2c:3e:a0:6b:da:b0:08:
                    de:d5:5e:96:1c:f2:9a:be:d4:f9:aa:1d:32:62:ad:
                    00:dd:a1:d7:d7:3d:02:91:73:41:25:f1:b4:b0:db:
                    82:c9:a8:6d:68:75:c3:cc:1c:87:63:33:a4:ce:c7:
                    c8:a8:e0:d7:76:f5:6c:c3:48:b2:66:30:18:85:66:
                    42:67:17:90:71:d2:c9:a9:c2:75:9f:fd:42:0a:a5:
                    07:41:b3:b0:fa:75:de:d9:83:9a:5f:1a:7b:49:19:
                    69:b1:92:98:90:1c:46:f1:ae:76:0a:c6:1a:33:bb:
                    c4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2F:EB:F6:96:92:D3:29:3D:C0:D2:F8:A1:3F:5A:D0:B5:6D:15:6C
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3134372e302f32342d3234203d3e20313938363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:27:16:6d:dc:21:2a:41:46:d6:1c:0d:a3:6f:3d:7b:ad:9a:
         78:7b:88:5c:23:81:ff:7d:a6:e6:28:5e:af:82:2e:86:d4:5d:
         e1:f3:d0:5b:f1:20:5d:ea:2a:45:6c:59:ad:71:fa:5e:3d:09:
         b5:0c:2e:67:63:80:d8:ed:85:bc:d8:b9:8d:d3:8d:e5:99:bb:
         bb:2f:43:f8:ba:6e:30:c3:65:45:73:0f:73:ec:56:1c:2f:ef:
         f6:4b:2a:03:99:07:ff:53:3e:87:6a:fa:c2:c8:3e:19:4d:44:
         1a:33:6a:9a:f0:ae:55:a8:e7:96:10:1f:3b:9b:6c:1d:b6:72:
         40:55:42:e9:08:cf:37:84:87:75:03:a4:8c:3e:b4:d1:41:42:
         1a:4a:d6:40:ac:d5:50:8b:7e:d4:e2:d7:d8:cf:72:7d:87:4b:
         06:25:8f:de:12:64:dd:e9:a8:ce:49:ed:e4:e4:fd:b0:bc:d9:
         47:54:33:61:78:c3:ee:b6:9a:a9:0e:50:da:21:03:d4:a5:82:
         f8:ff:06:69:2f:f3:da:d5:ab:a7:b0:a9:7d:97:42:32:13:6d:
         9f:47:e2:ba:75:e5:69:d4:bd:23:1b:cc:b4:9c:01:9f:98:67:
         97:a5:54:33:93:24:a1:c7:7b:2e:fd:d0:18:6c:44:7c:e3:7c:
         41:0c:0e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----