Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3136342e302f32342d3234203d3e20383334.roa
File:                     3230342e39332e3136342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          4kvwh5JDi3ekxkHMliLRa/werYCrzVFhpl/NVHk501Q=
Subject key identifier:   8F:3D:B3:4B:CC:22:65:21:48:9B:C1:22:E0:54:BD:6E:77:A4:80:EF
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       4C5D42EDBC0AB7CD1C6B9A4A438C841CE1B0A94C
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3136342e302f32342d3234203d3e20383334.roa
Signing time:             Thu 20 Apr 2023 00:00:14 +0000
ROA not before:           Wed 19 Apr 2023 23:55:14 +0000
ROA not after:            Thu 18 Apr 2024 00:00:14 +0000
asID:                     834
IP address blocks:        204.93.164.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5d:42:ed:bc:0a:b7:cd:1c:6b:9a:4a:43:8c:84:1c:e1:b0:a9:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 19 23:55:14 2023 GMT
            Not After : Apr 18 00:00:14 2024 GMT
        Subject: CN=8F3DB34BCC226521489BC122E054BD6E77A480EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c6:4e:32:7a:fd:d9:24:c7:81:6c:26:e7:d5:
                    42:fc:ea:d3:de:54:9a:e8:56:99:b9:c5:1e:40:d5:
                    79:7f:f5:12:e6:d9:a7:bf:01:01:ad:95:87:17:24:
                    8e:cd:13:94:a7:88:47:27:fd:e4:04:96:f3:20:67:
                    3d:44:dc:8d:4d:39:7c:a0:eb:2f:a5:b1:95:48:10:
                    28:7c:c1:60:8f:e3:6b:9c:25:b1:3b:3c:fe:13:f0:
                    95:90:63:bf:ba:fb:89:88:a5:05:73:7c:a1:f5:3f:
                    94:e7:87:95:07:a6:5e:02:06:ad:d2:4b:9c:aa:a2:
                    a9:ca:69:e0:b9:34:29:4a:d2:c0:fd:d1:0c:82:41:
                    a4:5e:94:c1:57:5e:ed:86:ca:76:17:2b:28:ed:d3:
                    d5:90:91:37:7a:71:3a:72:85:ec:12:32:1e:fb:8f:
                    40:44:dd:94:85:5f:4f:fc:13:ed:55:2a:4f:5a:ed:
                    1f:7f:c3:70:ef:9f:50:64:51:11:2e:ac:ae:6b:23:
                    e3:de:ba:6e:41:9e:c7:1a:13:8a:c0:f8:e3:92:5c:
                    3d:de:e5:00:47:20:3d:7b:e0:89:b9:ee:35:50:a6:
                    20:71:06:98:8d:98:97:d5:7e:7f:d5:3e:93:ba:d4:
                    c5:0d:f1:b4:11:71:7d:55:65:ed:16:c3:da:97:4c:
                    76:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3D:B3:4B:CC:22:65:21:48:9B:C1:22:E0:54:BD:6E:77:A4:80:EF
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3136342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:e5:40:be:59:2e:3c:b8:74:3e:9c:07:55:54:c8:a6:8b:f3:
         b3:a5:eb:91:24:d0:1c:6c:4d:d2:b8:8b:e5:1d:05:be:c1:e2:
         68:34:b9:a6:65:e9:01:0e:67:d3:01:02:68:ac:6b:7c:4d:99:
         c1:21:da:5b:eb:49:cc:8d:3c:b4:89:cf:b9:63:b7:e6:d2:11:
         8f:31:46:1e:24:42:f9:c3:50:9d:7d:6c:d0:6d:b1:dd:2b:cf:
         2d:11:1e:54:fe:22:08:bb:d3:4b:c7:3a:60:bf:cf:88:48:90:
         20:50:db:d3:10:45:43:66:33:0d:93:0c:f3:98:29:9a:9c:fe:
         30:b5:0b:5e:fa:5d:bc:6c:02:cb:b5:9d:f6:33:b0:06:52:b4:
         21:20:fe:a1:52:08:8d:8f:19:48:36:76:b0:f5:74:75:49:22:
         f2:46:5a:fc:80:dd:78:62:bd:2b:54:f3:4a:31:12:ea:0d:83:
         f0:71:11:36:dd:49:80:6e:1b:75:c7:df:5b:71:9f:7a:e9:72:
         21:6a:40:33:98:13:23:02:ec:26:7f:66:7c:1b:31:93:1e:7c:
         89:66:ca:67:82:ad:5a:55:8d:87:ae:c2:72:ca:d8:f6:7d:fd:
         db:de:07:54:39:f4:37:99:a7:01:8a:86:5f:36:13:a6:ed:82:
         d4:b6:2c:69
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUTF1C7bwKt80ca5pKQ4yEHOGwqUwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNDE5MjM1NTE0WhcNMjQwNDE4MDAwMDE0
WjAzMTEwLwYDVQQDEyg4RjNEQjM0QkNDMjI2NTIxNDg5QkMxMjJFMDU0QkQ2RTc3
QTQ4MEVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sZOMnr92STH
gWwm59VC/OrT3lSa6FaZucUeQNV5f/US5tmnvwEBrZWHFySOzROUp4hHJ/3kBJbz
IGc9RNyNTTl8oOsvpbGVSBAofMFgj+NrnCWxOzz+E/CVkGO/uvuJiKUFc3yh9T+U
54eVB6ZeAgat0kucqqKpymnguTQpStLA/dEMgkGkXpTBV17thsp2Fyso7dPVkJE3
enE6coXsEjIe+49ARN2UhV9P/BPtVSpPWu0ff8Nw759QZFERLqyuayPj3rpuQZ7H
GhOKwPjjklw93uUARyA9e+CJue41UKYgcQaYjZiX1X5/1T6TutTFDfG0EXF9VWXt
FsPal0x2swIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFI89s0vMImUhSJvBIuBUvW53
pIDvMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZl
N2ZkOGQzNjYwLzAvMzIzMDM0MmUzOTMzMmUzMTM2MzQyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADMXaQwDQYJKoZIhvcNAQELBQADggEB
AFblQL5ZLjy4dD6cB1VUyKaL87Ol65Ek0BxsTdK4i+UdBb7B4mg0uaZl6QEOZ9MB
Amisa3xNmcEh2lvrScyNPLSJz7ljt+bSEY8xRh4kQvnDUJ19bNBtsd0rzy0RHlT+
Igi700vHOmC/z4hIkCBQ29MQRUNmMw2TDPOYKZqc/jC1C176XbxsAsu1nfYzsAZS
tCEg/qFSCI2PGUg2drD1dHVJIvJGWvyA3XhivStU80oxEuoNg/BxETbdSYBuG3XH
31txn3rpciFqQDOYEyMC7CZ/ZnwbMZMefIlmymeCrVpVjYeuwnLK2PZ9/dveB1Q5
9DeZpwGKhl82E6btgtS2LGk=
-----END CERTIFICATE-----