Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3138342e302f32342d3234203d3e20383334.roa
File:                     3230342e39332e3138342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          aMxLSMzU3eo8HT/DBcKvwNuoZjjZmtRM3ANtTX4+MDw=
Subject key identifier:   0D:13:D6:FD:9B:F8:B2:93:0A:39:FA:84:45:79:30:8E:40:18:B4:30
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       48D28A5B54BD258ECC195E0935AF495F5D9B2CA7
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3138342e302f32342d3234203d3e20383334.roa
Signing time:             Mon 15 May 2023 11:30:06 +0000
ROA not before:           Mon 15 May 2023 11:25:06 +0000
ROA not after:            Mon 13 May 2024 11:30:06 +0000
asID:                     834
IP address blocks:        204.93.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d2:8a:5b:54:bd:25:8e:cc:19:5e:09:35:af:49:5f:5d:9b:2c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 15 11:25:06 2023 GMT
            Not After : May 13 11:30:06 2024 GMT
        Subject: CN=0D13D6FD9BF8B2930A39FA844579308E4018B430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:83:0b:3d:32:8f:62:78:cd:db:f8:ea:5d:
                    97:27:ba:3f:2b:68:57:22:a0:44:8e:60:20:e2:5d:
                    53:31:52:d0:bd:a0:1b:86:bf:91:ad:12:1a:f2:d0:
                    4b:89:91:88:c6:76:d4:9d:d4:8d:7e:d1:cb:b0:ff:
                    5a:f4:9e:41:b2:58:1c:0e:c0:5d:ca:27:1b:4b:d1:
                    29:f6:28:c4:2e:cb:83:7c:11:47:06:2d:39:74:28:
                    ba:ec:70:96:5d:95:eb:db:29:15:2b:7e:44:29:fd:
                    7a:13:1f:56:26:94:51:18:f2:c6:1f:3d:b8:69:21:
                    7d:ba:54:87:a0:7f:e0:c2:f6:7c:2f:b3:a8:25:89:
                    07:45:d0:94:7b:4f:ee:f8:5d:30:48:88:2b:49:64:
                    7f:f0:b6:73:94:44:c9:56:96:41:ef:36:a3:ef:4b:
                    12:55:04:6b:8d:da:cd:9e:1f:10:36:05:55:5c:68:
                    f8:b3:12:8c:c0:a5:df:d0:24:6e:d4:9f:25:af:3a:
                    d4:ae:74:16:30:a3:6f:73:bc:1f:56:b3:fa:5f:3b:
                    c8:4c:2b:43:6d:46:ff:be:67:3e:33:75:4a:59:89:
                    2b:32:7c:8f:90:db:b5:40:cf:7d:72:97:4b:4a:68:
                    4c:67:d9:4b:6b:88:48:ac:75:f6:03:2b:7f:fb:70:
                    b0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:13:D6:FD:9B:F8:B2:93:0A:39:FA:84:45:79:30:8E:40:18:B4:30
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3138342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:43:93:e7:48:e8:a4:98:6d:0f:fd:bf:fe:d1:75:16:e0:ed:
         5d:d0:e4:4a:a0:50:4c:62:1f:d7:c1:8c:00:7e:6d:af:7d:1c:
         1f:2a:7e:70:7c:ee:5c:ac:34:8f:0d:5d:99:7d:01:90:90:94:
         df:1d:31:5d:3b:12:b0:f9:46:e2:92:dd:11:70:65:bb:f9:79:
         65:64:f5:61:d3:d9:14:79:64:7f:b2:86:41:54:e8:14:60:db:
         38:c4:34:f5:a7:d1:65:e4:9f:2c:35:c1:69:0f:2f:a4:5a:a2:
         1a:ff:e9:32:12:c9:6a:9c:01:b9:6e:06:b8:5e:d3:6e:73:1a:
         26:48:38:c4:9d:b5:7c:52:3c:82:f8:2d:7f:4c:28:ee:59:0a:
         8c:5f:c7:5e:c7:6f:9e:40:c2:60:77:1f:50:11:d5:ca:04:84:
         c2:05:73:3f:ae:b1:c2:51:b8:bb:1d:b9:7b:8a:9b:4e:bd:54:
         42:72:52:56:de:49:94:08:64:d1:8f:60:1f:35:72:38:01:58:
         36:0f:e8:5e:ac:ca:1a:8c:b4:d9:c1:6e:62:79:ef:8c:56:3c:
         59:89:c7:24:75:57:61:82:cf:f0:26:be:0a:5d:2b:01:7a:3a:
         34:05:82:b6:98:a5:ed:54:81:1a:1c:62:4c:60:5f:e4:b0:f5:
         40:66:e6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----