Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3136342e302f32342d3234203d3e20313938363532.roa
File:                     3230342e39332e3136342e302f32342d3234203d3e20313938363532.roa (raw, json)
Hash identifier:          Gtnf1jUVP+2LxsLz9J86Ga8+MXLgmOWJBQzxXn0k74A=
Subject key identifier:   88:72:28:DD:41:D9:DA:5C:90:4C:4E:31:AA:A9:3B:DF:71:26:BD:4E
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       357267A2FD1D561BBA0771C6CF057F13E3821DF6
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3136342e302f32342d3234203d3e20313938363532.roa
Signing time:             Tue 16 May 2023 16:38:14 +0000
ROA not before:           Tue 16 May 2023 16:33:14 +0000
ROA not after:            Tue 14 May 2024 16:38:14 +0000
asID:                     198652
IP address blocks:        204.93.164.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:72:67:a2:fd:1d:56:1b:ba:07:71:c6:cf:05:7f:13:e3:82:1d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 16 16:33:14 2023 GMT
            Not After : May 14 16:38:14 2024 GMT
        Subject: CN=887228DD41D9DA5C904C4E31AAA93BDF7126BD4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9c:09:7f:f0:58:85:3a:19:a2:88:e2:b2:d5:
                    75:02:9d:83:47:f7:3f:fa:bc:e7:64:59:16:62:f3:
                    b3:15:d0:de:ce:98:06:6f:33:e4:4b:64:61:cc:22:
                    31:7d:c2:53:fb:9f:e5:3a:4e:b5:e6:78:69:05:73:
                    0d:bc:15:a6:fd:a3:b2:0d:90:6f:25:c9:39:a1:88:
                    55:85:e7:fe:b9:b6:f1:0f:e3:e8:59:df:47:d1:10:
                    d6:83:a0:05:37:e4:80:29:39:8f:77:83:0e:8c:e4:
                    b2:c6:9f:19:be:21:e4:1c:83:8c:e9:18:34:17:c4:
                    9b:a9:6f:43:d2:76:19:dc:b1:fe:48:9f:7a:ea:2d:
                    9b:98:a2:b1:f0:e4:72:8a:5f:e8:c9:36:c8:e8:de:
                    98:47:7c:85:21:14:c2:26:36:5e:fd:05:d9:11:a3:
                    25:c0:c4:1c:65:45:b1:9d:6b:ad:9a:f5:7f:5c:52:
                    e5:c1:ed:90:9b:30:5c:b3:b3:d9:a7:ff:6e:d6:bd:
                    a5:7a:e1:6e:bc:02:61:59:7e:78:bf:48:34:4f:e4:
                    5f:fb:6b:c5:d8:31:9a:50:a2:83:c2:49:20:c9:f4:
                    52:25:e1:65:66:b3:5b:72:f4:ec:38:59:bc:6a:6f:
                    f1:4a:5a:79:e7:ba:ee:b1:6c:7f:24:53:ca:1f:7e:
                    de:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:72:28:DD:41:D9:DA:5C:90:4C:4E:31:AA:A9:3B:DF:71:26:BD:4E
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3136342e302f32342d3234203d3e20313938363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:6e:c3:4a:d9:b0:9e:39:dc:8d:f6:38:d1:54:55:48:c8:81:
         a9:19:08:d8:23:91:31:60:fd:5d:40:f4:e3:76:3b:73:62:21:
         fd:1f:93:e5:ba:3a:d9:78:bb:29:06:20:e7:3f:9c:f0:39:85:
         06:c9:f9:f5:d9:38:28:af:1f:c7:92:ff:8e:78:de:cf:d7:6c:
         4c:32:00:2b:45:8e:c2:56:a7:cd:4b:0a:dd:54:07:de:3f:7a:
         98:4e:3d:97:9f:4d:14:10:56:38:44:37:c2:3b:60:33:05:7b:
         1a:ae:98:d9:48:7f:68:e6:7f:ae:81:1d:3d:03:83:74:6e:a1:
         79:f8:6f:4d:78:05:fa:16:53:a3:06:3a:a9:77:8b:8a:3b:82:
         64:62:af:a4:16:85:1c:72:14:53:bc:76:ef:5f:67:46:1c:b2:
         db:e4:32:c0:29:04:c8:c3:13:96:7e:d7:a7:ff:55:81:b9:43:
         7c:9e:af:38:b7:e2:c4:b5:8e:7e:92:9c:f8:54:80:30:7b:27:
         fd:ec:60:ee:49:65:78:3a:ce:57:b8:86:46:bf:d1:5b:6a:f2:
         20:0c:05:74:0f:57:55:b9:4a:c5:e2:62:60:d3:09:04:27:ee:
         81:bb:4d:6c:fa:a4:4e:58:7f:a3:43:da:39:28:d3:a8:9b:1d:
         68:8d:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----