Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3137332e302f32342d3234203d3e203631313338.roa
File:                     3230342e39332e3137332e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          4OUNw18Afs4cBnRTUx8Nb0kBOVVPRMSrGULqUGUsWlI=
Subject key identifier:   20:23:58:03:59:A8:D6:49:48:A4:84:84:16:70:C2:92:50:24:72:CA
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       026EFC2358467E5A61B4F905D63A3347653A06B3
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3137332e302f32342d3234203d3e203631313338.roa
Signing time:             Fri 17 Mar 2023 12:45:39 +0000
ROA not before:           Fri 17 Mar 2023 12:40:39 +0000
ROA not after:            Fri 15 Mar 2024 12:45:39 +0000
asID:                     61138
IP address blocks:        204.93.173.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6e:fc:23:58:46:7e:5a:61:b4:f9:05:d6:3a:33:47:65:3a:06:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Mar 17 12:40:39 2023 GMT
            Not After : Mar 15 12:45:39 2024 GMT
        Subject: CN=2023580359A8D64948A484841670C292502472CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:21:16:e6:29:26:d1:99:55:a6:6f:88:26:
                    da:91:a5:98:a9:f4:b3:82:d5:46:07:b7:46:91:f8:
                    34:2e:d1:f2:49:04:ee:cc:f4:88:5f:c6:e8:50:1a:
                    55:a0:d6:52:71:8d:7d:63:38:8b:ef:bd:da:6b:d7:
                    c3:ea:56:40:1f:ca:6c:a7:35:77:05:e1:48:d1:34:
                    2c:2d:2b:3e:8d:5f:a2:0f:4a:34:26:9b:8b:7b:2a:
                    73:fb:ab:15:7d:a3:8b:73:34:65:58:10:4d:b3:45:
                    94:69:5d:50:d1:48:09:68:bc:a1:78:b3:77:0a:d1:
                    2e:f2:61:2f:de:31:be:e2:53:be:2a:cb:6d:94:f9:
                    8c:6b:5c:41:a0:1a:0c:31:94:94:75:10:df:ca:2b:
                    25:8c:b8:3d:ac:0b:9c:b0:f7:84:b7:e2:e2:6e:2e:
                    d0:b3:ea:56:86:6e:03:f6:fa:e9:d5:fc:bf:e7:e6:
                    e8:7f:f0:28:f9:47:cf:6d:b4:08:72:98:7c:79:28:
                    48:a8:eb:5e:b7:2e:14:c6:c8:ec:90:71:f3:fb:f1:
                    4f:92:6d:94:2b:64:49:35:f2:2c:dc:9a:de:2b:a5:
                    63:e0:67:d5:44:81:d9:fe:c6:bb:f2:89:ec:65:30:
                    cb:9e:63:53:42:a2:aa:d7:3d:8f:20:8a:95:b5:4f:
                    12:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:23:58:03:59:A8:D6:49:48:A4:84:84:16:70:C2:92:50:24:72:CA
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3137332e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:33:de:c7:5c:82:cc:50:3b:0b:1d:b1:1a:6c:6e:79:f6:4c:
         65:a3:13:91:8e:de:36:82:4c:55:6d:a8:fd:97:5a:37:84:a7:
         b2:74:fb:fd:9c:13:69:17:b0:10:1f:c8:b8:ae:3a:fa:6a:d1:
         25:a6:ab:81:26:f0:b8:c1:82:ba:e2:b9:be:0d:23:f4:fd:28:
         d7:b4:59:8b:c8:90:c9:3b:19:25:03:c7:20:c5:72:48:df:df:
         91:3e:f6:c3:f0:83:27:e7:8e:d0:3c:ee:34:a5:f3:17:86:1e:
         44:e7:d3:91:04:7a:a1:42:f2:d0:5d:73:0f:8a:35:ff:af:f8:
         a5:98:e2:d4:b1:18:f3:56:fa:a0:c7:99:b6:b8:a7:81:64:e7:
         57:48:e2:8b:90:69:4e:de:7f:ab:8e:5b:d1:ef:c1:e2:a7:f5:
         00:87:cc:60:18:64:ae:a3:7e:80:20:d1:04:b3:c1:85:0b:ab:
         4f:52:cd:eb:24:1a:80:fd:97:ab:1a:40:61:40:4c:b1:3a:69:
         b3:5b:d3:de:0c:cd:c3:93:2a:06:5d:0d:7b:37:45:45:b3:92:
         e5:62:34:65:a5:c4:ad:cd:07:f8:fa:ed:7c:ba:06:b1:70:66:
         23:e3:3d:ef:1c:db:8f:34:c2:60:c5:33:7b:34:4c:df:60:95:
         0d:6f:9a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----