Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3134382e302f32342d3234203d3e20323034383433.roa
File:                     3230342e39332e3134382e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier:          a9zDogZQfwvcr1mnjo/fJazj6WJc+BeeC8TzOwXzEDc=
Subject key identifier:   65:CF:27:30:29:B5:33:04:DB:39:E0:85:4A:7B:D2:40:B6:D2:C7:4E
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       5FB489544DEDF9D2962AC55E9409EAB433A605D4
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3134382e302f32342d3234203d3e20323034383433.roa
Signing time:             Fri 26 May 2023 16:56:28 +0000
ROA not before:           Fri 26 May 2023 16:51:28 +0000
ROA not after:            Fri 24 May 2024 16:56:28 +0000
asID:                     204843
IP address blocks:        204.93.148.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b4:89:54:4d:ed:f9:d2:96:2a:c5:5e:94:09:ea:b4:33:a6:05:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 26 16:51:28 2023 GMT
            Not After : May 24 16:56:28 2024 GMT
        Subject: CN=65CF273029B53304DB39E0854A7BD240B6D2C74E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f0:66:46:e0:ca:8e:a6:72:83:f8:1b:bf:4f:
                    cd:21:c9:57:2d:fe:c6:e4:29:c3:2b:d2:74:82:46:
                    76:4e:a4:e1:7e:9d:01:47:57:08:0d:59:b2:9d:42:
                    ce:da:ac:ab:6c:04:5f:da:4e:88:ae:35:43:5e:31:
                    78:97:91:49:83:64:2b:8a:12:86:62:0c:c4:70:8a:
                    77:ca:50:9f:ec:b1:8b:45:0c:4b:e3:c2:89:be:5e:
                    69:a4:26:d9:99:bd:0d:e1:1a:c1:3e:ad:84:36:76:
                    6c:cd:6a:d3:27:34:05:d4:3b:60:81:21:39:52:3a:
                    84:c5:04:56:30:f9:a8:68:38:f8:fb:c5:20:71:ee:
                    11:61:87:fd:96:92:07:47:4e:25:02:0f:28:4e:5f:
                    63:39:ad:9b:b2:08:d4:c5:78:ac:b9:3e:b7:06:b0:
                    3b:33:ac:5f:57:00:d2:97:91:b5:3b:dc:df:1e:19:
                    15:f9:49:55:1c:fe:c5:85:7d:4f:55:e0:22:55:30:
                    73:da:ad:83:e7:1a:1b:9b:9d:82:c7:26:04:21:a5:
                    d5:92:f6:3e:c7:2b:0d:66:aa:bc:01:b4:c7:de:15:
                    13:f9:2d:03:d2:f3:66:94:c5:05:89:55:2d:99:da:
                    2e:89:fa:9b:a8:4b:49:33:84:05:07:f1:42:99:f0:
                    5a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CF:27:30:29:B5:33:04:DB:39:E0:85:4A:7B:D2:40:B6:D2:C7:4E
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3134382e302f32342d3234203d3e20323034383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:a3:01:46:9c:40:e7:52:af:a3:e4:ec:bd:31:91:82:b5:be:
         b1:ed:c7:03:42:ef:a1:63:52:86:3d:50:3c:d0:69:4d:18:e4:
         0b:15:51:66:e3:47:9b:1b:5c:cd:15:29:09:63:2e:12:4f:43:
         fa:43:ae:41:d0:82:56:49:9f:b6:c1:ea:c5:6e:0b:6b:10:57:
         13:2b:14:ed:7e:15:ec:72:06:75:be:14:da:e6:fa:82:a7:a2:
         36:7b:91:2f:eb:71:f3:d7:84:47:75:04:5a:0b:13:99:ef:5e:
         dd:c9:ab:cc:ac:6b:22:71:8c:94:56:cb:27:47:55:b0:2a:ed:
         18:d0:51:ab:f6:0e:61:7c:5e:32:75:ec:f5:9b:f6:44:ed:eb:
         79:93:8e:01:ba:54:0a:3c:8a:69:b9:a7:be:89:94:a7:3c:82:
         9e:24:ae:63:4c:3c:59:2f:7e:ba:4c:3f:1b:a5:83:d2:20:19:
         79:8a:f8:8b:6b:42:fc:ba:45:50:55:d9:d4:bb:fc:a6:e7:eb:
         90:ac:c2:92:8f:27:99:22:ca:05:19:7b:44:66:fc:42:a3:5e:
         d6:77:0a:51:1b:11:29:ba:70:11:71:b8:85:cf:2f:bd:4b:a7:
         8f:e1:a9:95:b1:f5:9a:54:ec:9c:21:f2:76:e2:7c:15:76:86:
         4b:2d:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----