Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3136322e302f32342d3234203d3e203631313338.roa
File:                     3230342e39332e3136322e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          We+7vWpRO3BcG36m//LMdwWSNfi4lMbnBEyfl0KG97k=
Subject key identifier:   29:DB:7A:4C:73:03:52:0A:20:AA:CE:94:8A:DA:11:27:D3:DD:D7:BF
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       6869730D1A7B3AC98C99E14A3C1674546924E069
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3136322e302f32342d3234203d3e203631313338.roa
Signing time:             Fri 24 Mar 2023 14:14:54 +0000
ROA not before:           Fri 24 Mar 2023 14:09:54 +0000
ROA not after:            Fri 22 Mar 2024 14:14:54 +0000
asID:                     61138
IP address blocks:        204.93.162.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:69:73:0d:1a:7b:3a:c9:8c:99:e1:4a:3c:16:74:54:69:24:e0:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Mar 24 14:09:54 2023 GMT
            Not After : Mar 22 14:14:54 2024 GMT
        Subject: CN=29DB7A4C7303520A20AACE948ADA1127D3DDD7BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6a:e6:e8:5c:80:ef:48:ce:96:75:36:68:97:
                    b6:7c:72:72:c5:dd:4d:38:b6:74:78:65:98:c4:38:
                    d6:5d:ad:43:24:c4:83:c0:f7:9f:1c:36:a9:74:40:
                    6d:3c:9d:75:b6:f4:f3:0a:9e:e4:24:fa:19:33:09:
                    f2:45:d4:c9:31:7f:32:9f:15:04:9b:6b:f1:93:1d:
                    83:75:fb:19:89:24:aa:db:0b:36:da:ef:7e:63:aa:
                    3c:90:a6:82:40:6b:d3:45:c6:35:62:fa:81:73:85:
                    c4:6b:59:1f:0b:52:af:5d:a5:07:80:19:c2:8b:f8:
                    11:81:a1:00:cd:ed:8f:1b:a1:df:7d:2e:9c:c8:d3:
                    b8:54:3c:ba:fc:db:50:d3:75:0d:d4:77:b8:71:1c:
                    25:c9:1b:07:62:2b:e3:bf:4d:86:87:fd:ca:b2:dd:
                    91:64:b4:a5:5b:c8:ee:13:9b:e0:d8:3e:a3:2b:95:
                    2d:61:8c:04:9f:b2:b7:bc:db:97:01:f4:7a:b9:40:
                    1c:e7:e0:f8:7c:cc:cf:ec:b1:bb:f0:90:2c:65:f4:
                    65:73:90:90:64:54:5e:65:39:bb:60:ba:30:77:d5:
                    86:f7:46:47:3d:c4:c9:45:35:ca:8a:1c:51:19:2f:
                    6f:74:8d:a5:f3:12:30:9a:7b:79:ba:02:d0:f1:b4:
                    6a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DB:7A:4C:73:03:52:0A:20:AA:CE:94:8A:DA:11:27:D3:DD:D7:BF
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3136322e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:77:69:15:65:8f:63:b2:7c:bd:53:df:97:a9:b4:4d:48:9b:
         9a:8d:42:86:97:af:50:e9:ed:22:dd:7d:40:be:a8:6b:02:c6:
         c8:2b:34:6c:70:28:51:1d:3a:db:35:d4:7a:c4:97:b1:6b:47:
         ce:e5:3b:56:2e:b5:0d:11:87:2d:9e:bc:64:d2:b5:4d:c5:4e:
         40:a3:dd:a8:ac:14:19:99:03:b9:a1:a5:57:43:da:69:54:9e:
         79:de:17:0b:12:1c:4c:85:ff:ab:49:d3:a5:d4:98:ad:57:e2:
         fa:7e:af:6d:f7:71:4a:3f:57:64:36:e0:4f:35:b2:a3:a3:3c:
         11:b6:15:3d:2d:c0:00:a9:af:63:28:38:01:4a:9d:33:85:28:
         8e:e5:e6:e8:85:9c:ba:9f:1b:40:b0:cc:eb:40:b6:af:5b:86:
         f2:74:9c:72:95:6d:6f:a7:ca:98:0e:eb:d6:30:1f:0a:a5:fc:
         24:9f:09:bb:a9:70:94:fc:ce:56:fd:d8:c6:1f:e1:b2:fd:cc:
         3e:46:fc:61:fa:7e:fc:eb:29:36:81:d7:3b:5c:97:a4:7e:bd:
         eb:e1:28:21:eb:fb:a6:7a:87:5f:3d:b9:dc:6a:5d:05:f1:2a:
         c6:25:cb:bf:33:a2:da:00:6f:10:2d:bd:8d:59:1f:40:ad:77:
         3a:06:f0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----